[Misc] Security Concerns of Web Image Monitor on Savin C4535 PCL 5c

[Guest]

We have had some "information leaks" in our office.

We have a networked Savin C4535 PCL 5c and the secretary has computer access to it to add new email addresses for the scan to email feature. What I am wondering is if she can "see" the documents that are being printed by using the "web image monitor". If so, does she just see the first page, all pages or just the file name? Is she able to reprint any documents?

Thank you.

[jonhiker]

The only documents she would be able to see are ones that would be scanned using the document server function. she would only be able to see the first page, but able to print the whole document.

Otherwise, no, no one has any access to any of the work flow on the copier via web image monitor, whether being scanned, printed, or copied.

[dave9929]

Thank you! I don't believe we use the document server function. Can document file names be viewed such as "Widget product schedule.docx"?

[Choro1dal]

Users logging to the MFD using WebImageMonitor (WIM) with default credentials and configuration cannot see documents being printed on the MFD.
(User Name:admin Password:null. Only one administrator account set up managing the Machine, Network, File and User functions.)

However, they will be able to view the print job history and which typically lists the file and user name and they will be able to see and potentially download file stored on the device in the Document server.

To prevent this you could either educate the users to password protect any files stored on the document server or change the administrator authentication settings so that the secretary logs in as the 'User Administrator' and not the 'File Administrator'.

[dave9929]

I don't believe we are using the Document Server option but could you explain what that is so I know for sure. We only print to the machine, fax while at the machine and scan to email from the machine.

[Choro1dal]

Th document server is a function where the device can store files (scanned or printed) to a partition of the MFD's hard drive for printing at a later date. It is usually the function key directly below the copy function.
If security is a concern a Ricoh trained technician would be able disable the document server function in SP mode.

[rthonpm]

Like Choro1dal said: the Document Server is essentially for print-on-demand kind of documents: time sheets, fax covers, safety checklists, anything which is a static form or printed a lot (even disclaimer sheets that some of my bankers and insurance customers used to use). File names can be seen by anyone viewing the printer log, but other than the file name they cannot access any of the data that has been printed.

Your best bet to protect data is the Locked print function. This hides the file name and also stores the job in memory until it is released with a username and password (selected in the driver before printing) at the copier. I have seen this used a lot when sensitive information needs to be printed as the person who printed the job is right there to get it. All of my defence contractors used this quite a bit...