Xerox® Security Guide for Entry Production Color Class Products 
March 2019   Page  3-10 
 
 
  Network Security 
Xerox products are designed to offer a high degree of security and flexibility in almost any network 
environment.  This section describes several aspects of the product related to network security. 
 
TCP/IP Ports & Services 
Xerox devices are robust, offering support for a wide array of services and protocols.  The devices are 
capable of hosting services as well as acting as a client for others.  The diagram below presents a high-
level overview of inbound communications (from other hosts on the network into listening services on the 
device) and outbound connections initiated by the device (acting as a client to external network services). 
Inbound (Listening Services) 
Out Bound (Network Client) 
Print Services 
LPR, IPP, Raw IP, etc. 
 
Management Services 
SNMP, Web interface, WebServices, 
etc. 
 
Infrastructure & Discovery Services 
IPSEC, SSDP, WSD, mDNS, 
NetBIOS, etc. 
Built-in Scan Services 
FTP, HTTP & HTTPS (TLS), SFTP 
(SSH), SMB, CIFS, SMTP & 
SMTPS, POP3 & POPS, etc. 
 
Authentication Services 
LDAP & LDAPS, SMB, Kerberos. 
 
Infrastructure 
ISAKMP (IPSec), DHCP & DHCPv6, 
etc. 
 
Cloud Services 
No direct APE to the above. 
 
Listening services (inbound ports) 
The following table summarizes all potentially open ports on the product.  These ports can be 
enabled/disabled within the product configuration. 
 
• FTP data (Active) - Client -