What is the most secure / complex MFP installation you did?

[techsxge]

After reading through some Threads here i was wondering what is the most secure / complex MFP installation you did on customers site?
I've read everything from People just plug in the Power for the Machine and leave the customer alone to People doing full network installs and everything.

Has anyone ever had to deal with high IT-Security Standards at a Customer and would share his experience?

I personally did some installations on 1k+ users office and they had some security measurements that imprested our whole IT since we're usually dealing with 50-100 Users.

[emujo2]

Hands down would be any military site using a CAC/PIV solution..There are so many check boxes that must be checked off to get these site working correctly..I had another Equitrac follow me account that would not use badges..it was not that difficult for me to set up, but the users hated having to enter their network credentials to do anything at all. E

[KenB]

Hands down would be any military site using a CAC/PIV solution..There are so many check boxes that must be checked off to get these site working correctly..I had another Equitrac follow me account that would not use badges..it was not that difficult for me to set up, but the users hated having to enter their network credentials to do anything at all. E
X2 on both of these!

CAC / PIVis a total PITA from the word “go”.

I have a Ricoh Streamline customer now with about 20 out of 60 machines where the users have to enter a 10 digit numeric only PIN to use any function. They have no control over what the PIN is, as it is system generated. Supposedly they are ordering card readers and cards, as the users have no other use for cards in their environments.

[copyman]

The FAA Tech Center. Had to be escorted by security and they stayed by me the whole install and then escorted me out. Oh yea forgot they had to x-ray & search tool bag plus walk dogs around van sniffing for explosives.

Their own IT people connected it to network.

[techsxge]

The FAA Tech Center. Had to be escorted by security and they stayed by me the whole install and then escorted me out. Oh yea forgot they had to x-ray & search tool bag plus walk dogs around van sniffing for explosives.

Their own IT people connected it to network.

holy moly i would've thought that agencies like that got their own in-house service for this, no way you can count them as your client you lucky fella

[emujo2]

I forgot about this one..lol

Scientology HQ..Walk in and announce my presence and why I'm there. They go fetch "Laddie" (his real name) Laddie proceeds to be my shadow for the next 45 min..He is never more that 2 feet away..My phone goes off and he says I can't take calls in here unless it's on speaker. He follows me out to my car to retrieve parts, then back on my ass again, he gathers up all used parts and test copies, nothing can be thrown into trash w/o his managers approval....Any time I drive by the office I yell out the window that they are a bunch of loonies..E

[techsxge]

X2 on both of these!

CAC / PIVis a total PITA from the word “go”.

I have a Ricoh Streamline customer now with about 20 out of 60 machines where the users have to enter a 10 digit numeric only PIN to use any function. They have no control over what the PIN is, as it is system generated. Supposedly they are ordering card readers and cards, as the users have no other use for cards in their environments.
I have a client that has 40 MFP's over 5 different locations where the workers switch workplace all the time so we did a network just for the MFP's and installed a card reader to it 2 years ago and i am there frequently for maintenance and every worker there thanks me for the idea of the card reader and cards. Can just recommend that

[techsxge]

I forgot about this one..lol

Scientology HQ..Walk in and announce my presence and why I'm there. They go fetch "Laddie" (his real name) Laddie proceeds to be my shadow for the next 45 min..He is never more that 2 feet away..My phone goes off and he says I can't take calls in here unless it's on speaker. He follows me out to my car to retrieve parts, then back on my ass again, he gathers up all used parts and test copies, nothing can be thrown into trash w/o his managers approval....Any time I drive by the office I yell out the window that they are a bunch of loonies..E
sounds like one of our trainees :D
But yo that actually sounds weird for a customer

[Synthohol]

There is a soda bottling company I service that has a 20 page document on the setup settings.
It's bizhub secure but extra steps. Like each machine takes an hour just to configure the damn thing.

[emujo2]

What really sucks is the only reason it's taking 1-2 hours to set them up, is because some solutions guy doesn't want to do it themselves and forces the tech to work through the control panel..Like it's services responsibility to ensure a SSL cert is created..E

[JasonSBE]

I did an install for a fairly large investment firm once. I was given a booklet filled with pre-configuration instructions. Approx... 16 pages. The hilarious part was after following all the instructions, the local I.T. contact wanted me to set up all the print drivers and SMB scanning myself, even though their domain had everything locked down without administrator privilege. He didn't seem to understand why I couldn't just get on all the computers in his network and install whatever software I needed to install. I asked him if he had a server that he would like me to help him install the drivers on so that he could share them out over the domain. He had no idea what I was talking about. I wonder how much that guy got paid...

[KenB]

I have a client that has 40 MFP's over 5 different locations where the workers switch workplace all the time so we did a network just for the MFP's and installed a card reader to it 2 years ago and i am there frequently for maintenance and every worker there thanks me for the idea of the card reader and cards. Can just recommend that
We’ve been after them to get set up with cards and readers since we first installed Streamline about 3 years ago.

[blackcat4866]

For me, the maximum security prison was the worst.

It took two hours to get from the parking lot, check in, empty my pockets, get searched (don't forget between the toes!), metal detector, gather a prepared toolkit that never left the facility (it had only 15 items, not much that you can do with that), get escorted to the location, and either accompanied the whole time or double locked in the office alone.

When I finished it took only 1 hour to reverse the process. So a very basic service call took not less than 3 hours. And if you need something from the car: approval from the warden to bring in whatever it was, and 3 addition hours of security checks (going out and back in).

Jamie would fill in for me occasionally. He was a nervous sort and the guards caught on to that. His security checks were much more thorough (cavity checks). He really really hated it when I took vacations.

I once spent 3 additional hours looking for an empty tube of superglue that I threw in a trash can ... and consequently did not have at checkout. =^..^=

[JasonSBE]

For me, the maximum security prison was the worst.

It took two hours to get from the parking lot, check in, empty my pockets, get searched (don't forget between the toes!), metal detector, gather a prepared toolkit that never left the facility (it had only 15 items, not much that you can do with that), get escorted to the location, and either accompanied the whole time or double locked in the office alone.

When I finished it took only 1 hour to reverse the process. So a very basic service call took not less than 3 hours. And if you need something from the car: approval from the warden to bring in whatever it was, and 3 addition hours of security checks (going out and back in).

Jamie would fill in for me occasionally. He was a nervous sort and the guards caught on to that. His security checks were much more thorough (cavity checks). He really really hated it when I took vacations.

I once spent 3 additional hours looking for an empty tube of superglue that I threw in a trash can ... and consequently did not have at checkout. =^..^=


The last copier company I worked at was only 1 of 5 vendors allowed into the largest state Prison in my state..... and the country I believe. Getting in the facilities and to the equipment was always a bear, but none of the MFP's we serviced were on the network. Not even connected to fax lines. All they used them for was copying. But yeah... I feel your pain.

[mascan42]

Complexity would be anything CAC/PIV related.

As far as security, that would be the federal courthouse I went to the week after 9/11. Copier parts look remarkably suspicious when viewed through an x-ray machine and a veil of paranoia.

[copyman]

Oh yeah forgot about this one. Not that you would consider real security but sure did feel like it! I had this account called the Franciscan Sisters where girls went to become nuns. It was a big house and copier was upstairs in the living quarters. They couldn't look or talk to a man. The old head nun (Sister Claire rest in peace) stood by me the whole time like a mother hen watching her chicks (nuns)!

And of course over the years I've had the usual calls at Military bases, nuclear power plants, oil refinery, etc. where you leave your vehicle outside the gate and are driven to the copier.

[rrrohan]

Oh yeah forgot about this one. Not that you would consider real security but sure did feel like it! I had this account called the Franciscan Sisters where girls went to become nuns. It was a big house and copier was upstairs in the living quarters. They couldn't look or talk to a man. The old head nun (Sister Claire rest in peace) stood by me the whole time like a mother hen watching her chicks (nuns)!

And of course over the years I've had the usual calls at Military bases, nuclear power plants, oil refinery, etc. where you leave your vehicle outside the gate and are driven to the copier.

i just wish if there is a complex config u could just do it once, backup the settings then apply it to a totally different copier.

even with usb export/import its only taking the bare minimum not even the static IP is copied over lol.

i think Konica themselves have some remote deployment software but ive never used it not sure if thats any better