How to Configure Windows Firewall to Communicate with IPSec Configured Printer

Before you begin

Verify the printer's IPSec settings are properly configured on the printer.

Actual success is confirmed when you are no longer able to access the device's EWS from the host IP address. However, after enabling a firewall rule, your connection to the printer should return. Alternatively, you may be able to use another workstation/server with a different IP address to connect to the printer.

Example showing IPSec
activation

Access the printer's web page; i.e., http://printer_IP_address
replacing printer_IP_address
with the printer's IP address.

Click on Security (Configuration).

Click on IPSec.

Enter the necessary values under Connections: Pre-Shared Key Authenticated Connections
.

Host 1 Address
– Print server IP or workstation IP
Key
– Create a password

Click Submit
.

Configuring Windows firewall rule to accept printer connection

Open Windows Firewall with Advanced Security
and access its Properties
.

Access the IPSec Settings
tab and click on Customize
.

Verify all three
settings are using the Default
settings and then click OK
. (See last page for the default settings behind the Advanced
configuration.)

Right-click on Connection Security Rules
and click on New Rule
.

Select Server-to-server
type; click on Next
.

Add the IP address
of the server for Endpoint 1
, and IP address
for printer or multiple printers under Endpoint 2
. Click on Next
.

Select Require authentication for inbound and outbound connections
, and click on Next
.

Select Advanced
button, then click on Customize…

In the First authentication method
, click on the Add
button.

Select Preshared key
and
type
the required key/passphrase
. Click OK
to return to the previous screen.

Click OK
.

Keep the defaults that are already pre-selected for you. Click on Next
.

Enter an appropriate Name
and Description
. Click on Finish
.

Make sure that the security rule
you just created is Enabled
.

Tests to confirm successful configuration

Access the printer's EWS with the security rule enabled and repeat again with the rule disabled.

Perform a simple ping test with the security rule enabled and repeat again with the rule disabled.

From the host, perform a Wireshark network trace to the device to reveal the protocols utilized in IPSec transmission mode.

Expanded view of IPSec default settings

Still need help?

If you require additional assistance, please close this window, go to your product's support page and locate

Get In Touch with Lexmark!
for contact information.
NOTE:
When calling for support, you will need your
printer model/machine type
and serial number
(SN
). Please be near the products described in this article to expedite the support process and reduce call-back situations.

LEGACY ID: HO4057