Xerox® Security Guide for Light Production Mono Class Products 
 
 
Ports 546, 547: DHCPv6 
These ports are used for DHCPv6. When querying the IPv6 DNS server address, the product 
accesses port 547 of DHCPv6 server and receives the result from DHCPv6 server at port 546. 
The product can query the IPv6 DNS server address when the auto acquisition of IPv6 DNS 
server address is enabled, and a system administrator can disable it from CentreWare Internet 
Services. 
 
Ports 80, 631: IPP (FreeFlow) 
These ports support the Internet Print protocols(IPP). 631 is the standard port number for IPP and 
80 is an added port number. The added port number is configurable. A system administrator can 
disable this service  and  port 80 (turn IPP port OFF/ON)  via Local User Interface or from 
CentreWare Internet Services. IPP is also used in FreeFlow print. In FreeFlow print, only port 631 
is used. A system administrator can disable this port and service (turn FreeFlow port OFF/ON) 
from CentreWare Internet Services. 
 
Port 636: LDAPS 
This is the secure channel port used to access LDAP server using LDAPS (LDAP over TLS) for 
LDAP authentication and for Address Book queries in the Scan to Email feature.  
 
Port 1824: HTTPS (OffBox Validation) 
This port is used to communicate with OffBox Validation server. The protocol and port number can 
be changed by a system administrator on the OffBox Validation server side and cannot be 
changed via local UI or from CentreWare Internet Services.  
 
Port 1900: SSDP 
This port provides the discovery feature that complies with SSDP (Simple Service Discovery 
Protocol). This port number cannot be changed. Whether this port opens depends on whether the 
UPnP discovery feature is/are enabled or disabled.  
 
Port 3702, WSD Discovery 
This port provides the WSD (Web Services on Devices) discovery feature. This port number 
cannot be changed. Whether this port opens depends on whether the WSD print feature is 
enabled or not. 
 
Port 5353: mDNS 
This port provides the discovery feature using Multicast DNS. The port number is fixed to 5353. A 
system administrator can disable this service via local UI or from CentreWare Internet Services.  
Port 9100: raw IP 
This port has a bidirectional function (via pjl back channel), and only allows printing. The port is a 
configurable port and a system administrator can disable this service (and the port) via Local User 
Interface or from CentreWare Internet Services.