SYS211 Netgard Secure Scanning for U.S. DOD and Federal Agencies. Keep background noise to a minimum

Transcription

1 SYS211 Netgard Secure Scanning for U.S. DOD and Federal Agencies Presenter: Henry Gold Business Area Manager API Technologies Before we begin Please silence your cell phones Keep background noise to a minimum Do not put your phone on HOLD Please let instructor know if anyone else is sitting in with you The phone audio will be muted - Please save questions until the end or submit text based questions as we move through presentation 1

2 Have questions? Submit text based questions via the Q&A pod Your Status Throughout the program, we will ask you to respond by indicating your Status. When asked please use the Status Options drop-down button, located at the top of your screen. Set your status now by indicating: Agree 2

3 Goals The goals of today s e-le@rning session are Introduce the new Netgard MFD security solution that will help facilitate sales to U.S. DOD (and soon civilian agencies) How does Netgard relate to GSA? Reduce your sales cycle Provide you with product training to get you started with Netgard MFD e-le@rning Objectives Upon completion of this course, you will be able to: Build your knowledge of a key Security requirement to deploy systems to the U.S. DOD and Civilian Agencies Give you the tools needed to close business with the U.S. Gov. Provide the necessary skills to install this solution 3

4 Agenda 1. API Technologies Introduction 2. Netgard Overview 3. Physical Installation and Technical Overview 4. Live Q&A Discussion API Technologies Introduction Who is API Technologies? Featured Customers The Customer Need Toshiba Academy MPS Certification Program 4

5 Company Snapshot Prime contractor in sophisticated electronics, highly engineered systems, secure communications and electronic components and subsystems to the global defense and aerospace industries Publicly traded (ATNY.OB) Revenues of over $380M 2000 Employees Key product focus Defense & Aerospace Products & Services Systems & Engineering i Services Secure Communications Products & Services Components & Subsystems Featured Customers US & International Government Agencies Leading Government & Defense Contractors 5

6 The Customer Need DOD Requirement: All multi-function devices (MFDs) that can transmit scan jobs over the LAN must be secured by a Common Access Card (CAC) that will verify and authorize the user before a scan-to-network function is permitted (STIG) Expanding security to Copy function & Print Release HSPD 12 (PIV card) Seeing requirement at Civilian Agencies CAC & SMARTCARD Deployments 17 million cards issued to date 5.55 million active cards are in use today Today CACs are: The standard at more than 1,000 sites Used in over 25 countries To date the DoD has deployed over 1 million card readers and associated middleware around the world 6

7 Netgard Overview How it works Authentication Options Value Proposition Toshiba Academy MPS Certification Program Netgard: How it Works End Users Brings their CAC Card to our Device They insert their CAC Card in the reader They enter their Pin Number The Server Verifies Credentials(OCSP/LDAP/AD) Operation Panel Access Granted OR Operation Panel Access Denied Status/ Job Cancel Program Application Copy Send Document Box OCSP/LDAP/AD 7

8 Connectivity Simple, in line Ethernet connection Web based remote admin Integrates with Active Directory and/or PKI Supports CAC PIN, X.509 certificate, LDAP, PKI and OCSP Live Video Demonstration 8

9 Important Facts Conforms to DoD requirements Works with all major copier models Support for CAC/PIV V1 & V2 Special security features: FIPS & 201 encryption & signing Confirms identity of sender Added security on Scan-to- feature replaces the From Reply-to and Sender fields with CAC user s address (obtained from CAC or LDAP) Netgard Customers / Deployments Over 3000 Netgard devices are currently deployed in all branches of armed services: Air Force (Andrews, Ramstein, Bolling & Hill AFB) Army (Aberdeen, Fort Collins) Army National Guard Army Reserves Navy (Jabuti Naval Base) DAPS/DLA 9

10 Configurable Authentication Options PIN (Default, Always ON) User s PIN is used to unlock the CAC. X509 validation (requires issuer certificate) CAC certificate Challenge/response Requires issuer certificate OCSP User s certificate is sent to OCSP server for revocation check. Requires issuer certificate LDAP/LDAPS (anonymous and non-anonymous) LDAP lookup is performed to ensure the user is valid LDAPS requires server certificate Non-anonymous lookup requires username and password Kerberos Network PKI authentication How Does the Netgard Affect the Printer/MFP? No adjustment to the Copier/MFP is required the Netgard MFD connects the MFP to the LAN and handles all network traffic control. Windows users see no difference when they print to the Copier/MFP or add a printer. Administrators may connect to Copier/MFP and manage it using the browser interface as normal. Other Copier/MFP communication, like the Printer Monitor Utility (SNMP based), is unaffected as well. 10

11 Value Proposition Quick to market CAC/PIV Secures Scan to Network. No custom development needed on MFD MFD agnostic Easy to deploy With over 3000 devices deployed field tested Significant investment core competency Priced right Additional Points Next release will support GSA PIV (1 st half 2012) Secure Print Release - Print to cloud with NSI Scan to home Utilizes NSI Autostore 11

12 Physical Installation Let s Install Netgard Connectivity and Physical Connections Local Access Via IP Connection Basic Configuration Setup of MFP Advanced Authentication Options Netgard Maintenance Pre-Installation Checklist Troubleshooting Toshiba Academy MPS Certification Program Connectivity 12

13 Physical Connection Make connections Connect CAC Reader to USB port Connect base network to LAN port Connect copier to DEV port Connect computer to MGMT port (no crossover needed) Connect Vend cable via USB port (optional) Power up unit (~60 seconds to boot) Initial Install Requires Local Access Via IP Connection 13

14 Administering Netgard MFD Administer Netgard by plugging directly into the Ethernet Management (MGMT) port. Set computer IP to: IP: Subnet: Gateway: Use FireFox web browser to administer Netgard Login information ID: admin Password: password For additional details see the quick install guide. GUI 14

15 Netgard Homepage Tour of UI Basic Configuration 15

16 Network configuration (Step #1) Click on the Network Tab Set IP addresses Set the Netgard s Lan Address. If DHCP write down the IP address. Tell the Netgard the IP address of the Printer Click the Apply button Set Copier IP: IP: Subnet: GW: Additional configuration optional Scan Setup (Step #2) Click on the Scan Setup button Enable Required functionality FTP Set SMTP server IP Scan to self? Encryption & Signing Append file header name? Click the Apply button 16

17 Scan Setup (Step #2 cont.) Enable SMB Open F/W when CAC authenticated? Set NSI/Autostore information Click the Apply button Netgard Admin (Optional) Click on the Admin tab Turn on Management port on LAN Port so Administer Netgard remotely Define an ACL 17

18 User Administration Click on the Admin->Users tab. Add a new Admin level user Delete the default admin user. Initial Netgard Configuration Complete. Now Setup MFP 18

19 MFP Configuration Set Copier IP address to address configured in the first step p( (default = ) Setup Scan to Network functionality Same configuration as if copier was sitting on customer network. If set to Send to Self add one Destination IP Configuration on e-studio MFP IP address = Subnet Mask= Gateway =

20 Test Basic Functionality Authenticate with a CAC and test Scan to , Scan to SMB, Scan to FTP Perform same test without CAC Browse to Copier Use LAN IP address of Netgard ( Test Print functionality Use LAN IP address of Netgard Advanced Authentication Options 20

21 Authentication Screen Authentication Options X.509 Local certificate authentication OCSP Revocation List LDAP Active Directory Lookup Kerberos Authentication Additional Configuration for X.509 Click on Scan Setup-> Certificates button Upload Certificates (chain of trust) Upload Trusted Certificates button on the right hand side Certificates must be in Base-64 encoded format (pem file extension) Point the Netgard to a NTP server to ensure the Date/Time is properly set (Admin->Time Zone) 21

22 Netgard Maintenance Configuration Management Go to the Admin->Utilities Backup and restore a device configuration Perform a Netgard Upgrade Reboot the device 22

23 Pre-Installation Check List Pre-Installation Checklist Netgard IP address (Subnet & Mask) May need to provide MAC address DNS IP SMTP IP address NTP IP Root & intermediate certificates OCSP URL LDAP information IP, Login, Search details CAC card available for testing 23

24 Troubleshooting Can t Get to Management Port? 1) Check Computer s IP address IP: Subnet: Gateway: ) Confirm that your computer IP address changed: Open Command Window (run>cmd) At the prompt type IPCONFIG Ethernet adapter Local Area Connection: Connection-specific DNS Suffix. : IP Address : Subnet Mask : Default Gateway : ) Start a New web browser session (Firefox) Ensure that the URL is correct 24

25 Diagnostics & Logs Troubleshooting Scan to Confirm that the Netgard configuration is correct: configuration Scan Setup->Scan to Network->Enable Scan Setup->Scan to Network->Server IP address correct Copier device (Network->Configuration->Copier IP Address) Confirm that the Netgard can ping the copier & SMTP server Take Netgard out of loop to ensure copier setup Confirm that the user successfully completed the CAC authentication. Reader displays Ready to Scan Capture session to determine root cause Monitoring->Diagnostics->Packet Trace->Network Select (LAN and MFD) 25

26 Troubleshooting CAC authentication failure Start off simple - Add layers of authentication to ensure configuration is correct Confirm that the Netgard can ping the OCSP, LDAP server Take Netgard out of loop to ensure copier setup Capture failed authentication session to determine root cause Monitoring->Diagnostics->Packet Trace->Network Select (LAN and MFD) Wrap-up Additional Materials from API Technologies User Guide Quick Install Guide Installation & Configuration Videos Product Catalog Negard MFD Community on Toshiba exchange Software & Services > Security > Netgard MFD 26

27 API Technologies Netgard Technical Training Certification Process 1. There are no prerequisites for the course 2. A Tech ID is REQUIRED to access API Technologies Netgard CBT/Certification Test If you do not have a Tech ID, please see you local FYI SIS Admin to add you to the Service Group and request a Tech ID at: FYI > Training > Service > Dealer Administration > New Tech Application 3. Once you have a Tech ID have your Service Manager enroll you in: CBT course 12199: API Technologies Netgard 4. A dealer technical representative must pass the technical CBT to be eligible to purchase Netgard solution API Technologies Netgard Sales Training Certification Process Pass the 73. API Technologies Netgard Certification Final Exam on FYI FYI > Training > Sales > Testing > Product Knowledge Testing Must score of 80% or better to pass 27

28 Questions Thank you for attending! Product Support +1 (908) option 8 Henry Gold +1 (908) Henry.Gold@apitech.com 28

29 Eric Roskelly Digital Training Manager Ext #42730 Please advise us if you have not registered! Rob Troxel Digital Training Manager Ext #5602 Please advise us if you have not registered! 29

30 Dean Tamashiro Digital Training Manager Please advise us if you have not registered! 30