Restricting Direct Printing on Toshiba via the Print Data Converter
As the Print Data Converter is installed on each Toshiba SDK 1 EBX and SDK 2 EBX to ensure that the Toshiba MFP does not attempt to track print jobs or restrict them in any manner, as a consequence of the Print Data Converter and it’s functionality it also allows for direct printing to each MFD thus allowing users to potentially bypass PaperCut.
The Toshiba recommend way to control this type of direct printing is to enable and configure “Network Filtering”, Network Filtering allows site administrators to “permit” and/or “deny” certain addresses and address ranges the ability to access the copier.
This includes permitting and denying print jobs and access to the web based administration console “Top Access”
How to access Network Filter – Toshiba EBX (include SDK 1 and SDK 2)
- Log in to Top Access as an “Administrator”.
- Select the tab “Administration”
- Under “Setup”, select “Network”.
- Select the link for “Filtering”.
- Select “Filtering”.
- Click the drop down “Enable IP Filtering” and select “Enable”.
- From the drop down “IP Filtering Rule” chose the appropriate rule i.e. “Permit” or “Deny”.
- Enter a “Start Address” and “End Address” for “permitting” or “denying” (depending on the rule selected).
- Once completed, click “Ok” and then “Save” on the next screen.
- With “Save” selected a dialogue box will be resented advising that “When this configuration is changed, the network connection will be disconnected. Would you like to continue?” click “OK” and the device will perform and “soft reboot”.
- “Filtering” will now apply on the configured device.
Scenarios for use
As there are numerous way to configure “Filtering” to either “Permit” or “Deny” network access to an MFD or MFD’s, please see the scenarios below for examples on how to apply “Filtering” with PaperCut.
Scenario One: All access or printing to each MFD is “denied” other than from the PaperCut Application Server, in the “Filtering Rule” select “permit” and enter the TCP/IP address of the Application server in both the “Start Address” and also in the “End Address” thus only allowing access and printing from the Application Server TCP/IP address.
Scenario Two: All access or printing to each MFD is “denied” other than from the PaperCut Application Server and allowing selected access and direct printing for “NON PAPERCUT CONTROLLED PRINTING”, in the “Filtering Rule” select “permit” and enter the HOST TCP/IP address of the PaperCut Application server in the “Start Address” and also in the “End Address” thus only allowing access to from the Application Server TCP/IP address.
Then to allow NON PAPERCUT CONTROLLED PRINTING from a selected HOST system add an additional “Filter”, under “Filtering Rule” select “permit” in the “Start Address” and also the “End Address” enter the TCP/IP address of the HOST e.g. VMS, UNIX etc. allowed to print directly to a MFD or MFD’s.
Please Note: The scenarios shown are for example only, there are numerous ways that “Filtering” can be applied and each site has the potential to be different.
With “Network Filter” enabled there are points to consider prior implementing, please see below.
- Access to TOP ACCESS will be restricted unless “white listed”.
- Shared Print Queue’s on Application Server MUST be configured correctly with “automatic update” enabled i.e. Finishers, Paper Cassettes etc., SNMP and “Automatic Update” on connected “clients” will no longer function.