• 
Select [Require password when creating additional folders].
 
 
 
• 
Select [Prompt for password when scanning to private folder]. 
 
•  Deselect [Allow access to job log data]. 
Passcodes  for  Scan-to-Mailbox  mailboxes  should  be  selected  to  be  as  random  as  possible  and  should  be  changed  on  a 
regular basis, consistent with applicable internal policies and procedures. Xerox recommends that the minimum length of a 
password assigned to a private Scan to Mailbox folder be 8 alphanumeric characters. 
bb). To enable the Print from USB feature from the Web UI follow the instructions on page 114 of the SAG. 
cc).  To enable the Print from Mailbox feature from the Web UI follow the instructions on page 6 of the User Guide Supplement. 
dd). In  the  evaluated  configuration  Embedded  Fax  Secure  Receive  option  should  be  enabled
6
,  the  fax  forwarding  on  receive 
feature should be enabled. The Local Polling option and embedded fax mailboxes should not be set up or used at any time.  
•  To enable Secure Receive from the Local UI follow these instructions:  
Either: 
•  Touch Secure Receive Settings on the Incoming Fax Defaults screen. 
•  Touch the [Enable] button under Secure Receive. Do not select the [Enable] button under Guest Access. 
•  To  change  the  passcode  touch  the  code  field  and  then  use  the  keypad  to  enter  a  new  4-digit  secure  receive 
passcode number
7
.  
•  Touch the [Save] button to save the option selected and the passcode entered. 
Or 
•  Touch Device Settings on the Tools Pathway and then Fax Secure Receive Enablement. 
•  Enter the current secure receive passcode number in the text box and select the [Enter] button.  
•  Touch the [Enable] button on the Fax Secure Receive screen.  
•  Touch the [Save] button to save the option selected. 
The System Administrator should ensure that the secure receive passcode, which is fixed at 4-digits, is changed every 
three days. 
•  To enable Fax Forwarding on Receive and establish up to five fax forward rules from the WebUI follow the instructions 
for Fax Forwarding starting on page 146 of the SAG.  
•  The evaluation assumes that after normal business hours Fax Forwarding on Receive is enabled and  secure receive is 
disabled.  
•  The Mailbox and Polling Policy should be  set to  delete received  faxes when they are printed. To set the Mailbox  and 
Polling Policy follow the instructions under “Defining Mailbox and Polling Policies” on page 148 of the SAG. Makes sure 
the ‘Delete on Print’ option is selected. 
ee). For best security print jobs (other than LANFax jobs) submitted to the device from a client or from the Web UI should be 
submitted as a secure print job. Once a secure print job has been submitted the authenticated user can release the job for 
printing at the Local UI following the directions starting on page 68 of the User Guide.  
ff).  In  the  evaluated  configuration  the  Secure  Print  security  function  should  be  set  to  require  the  User  ID  for  identification 
purposes to release a secure print job. The Secure Print security function can be accessed and configured by following the 
instructions on page 109 of the SAG.  
gg). Before upgrading software on the device via the Manual/Automatic Customer Software Upgrade, please check for the latest 
certified software versions. Otherwise, the machine may not remain in its certified configuration. 
hh). In the evaluated configuration, customer software upgrades via the network are not allowed.  
ii).  In the evaluated configuration the domain filtering option for E-mail was set to limit the domains to which Scan to E-mail 
jobs can be sent. To enable the domain filtering option perform the following from the WebUI: 
•  Select the Properties tab. 
•  Select the following entries from the Properties 'Content menu’:  
•  Services  Email  Setup. Select the Security tab  
•  Select the [Edit] button under “Network Policies”. 
   
6
 This will apply to any received fax, including faxes that are remotely polled to the device from another remote fax machine or remote device.
 
7
 Secure receive passcodes are fixed at 4-digits.