Xerox continues security focus with 12 new Common Criteria Certifications

Xerox, distributed throughout sub-Saharan Africa by Bytes Document Solutions, has earned the international standard in information security for 12 more of its mid- and high-speed office multifunction products.

These systems join 18 other Xerox digital colour and black-and-white office products, bringing the total number of National Information Assurance Partnership (NIAP) Common Criteria Certified machines to 30.

"Unlike other document services vendors, Xerox has its entire multifunction system evaluated for Common Criteria Certification, rather than just an isolated security kit or an individual security feature," says Tanya Moodley, product manager: office systems group monochrome at Bytes Document Solutions.

"Certifying only a security kit or feature is like locking your front door but leaving your back door and windows wide open. To ensure complete security, Xerox goes through the rigorous process of having the entire system evaluated."

The Xerox WorkCentre 232/238/245/255/265/275 copier-printers and the six corresponding WorkCentre Pro advanced multifunction systems, which print, copy, fax, scan and e-mail, received the latest Common Criteria Certification.

NIAP is a US government initiative created to meet the security testing needs of IT consumers and companies. The Common Criteria Certification ensures highly sensitive information is treated with the proper level of confidentiality and integrity and only authorised personnel have access to the information.

"The Xerox WorkCentre and WorkCentre Pro 232/238/245/255/265/275 copier-printers and advanced multifunction systems boast speeds from 32-75 pages per minute," Moodley continues. "They are equipped with cutting-edge security measures that allow customers to restrict access, track usage and protect confidential information flowing through the devices and across the network."

NIAP specifically certified the following components of the Xerox systems:

* Encryption with secure protocols: The multifunction systems encrypt data travelling on the network to and from the device, preventing unauthorised viewers from accessing print and scanned documents as they travel to file servers or other network repositories. The systems can be managed securely by encrypting the connection to the Web user interface or through device management through software that supports encryptions, such as Xerox Device Manager or Xerox CentreWare Web.
* Authentication: By validating user names and passwords prior to use, Network Authentication restricts workers` access to scan, e-mail and fax features as needed. System Administrator Authentication requires systems administrators to log in to the device in order to make configuration changes.
* Internal audit log: The multifunction systems can maintain audit logs of activity to help track the path of documents.
* Firewall: A built-in firewall manages all communication access to authorised users.
* Image Overwrite option: The Image Overwrite option electronically "shreds" data stored on the machine`s hard disk during routine job processing. Electronic removal of data can be performed automatically after every job or when a person specifically requests it.
* Embedded fax: Unprotected fax connections in multifunction devices can be a back door into the network. Therefore, Xerox assures complete separation of the fax telephone line and the network connection.
* Secure Print: Prevents unauthorised viewing of hard copy documents by holding jobs in queue until a PIN number is entered at the device.