IPP Printing to Konica Minolta C224e over the internet(Citrix/RDSH Deployment)
-
I am working on a VIrtual Desktop (RDSH) of sorts and I am thinking about whether I want to do all the printer mapping through thin clients vs setting up IPP printing.
The security would be simple enough, publishing ports via the firewall and restricting traffic to originate only from my RDSH deployment IP address. Not sure if its feasible. Also not sure if I want to rely on WIndows 2016 Server's generic printer driver to do all the work.
Appreciate anyones thoughts on the matter...
-
@bigbear said in IPP Printing to Konica Minolta C224e over the internet(Citrix/RDSH Deployment):
I am working on a VIrtual Desktop (RDSH) of sorts and I am thinking about whether I want to do all the printer mapping through thin clients vs setting up IPP printing.
The security would be simple enough, publishing ports via the firewall and restricting traffic to originate only from my RDSH deployment IP address. Not sure if its feasible. Also not sure if I want to rely on WIndows 2016 Server's generic printer driver to do all the work.
Appreciate anyones thoughts on the matter...
Set it up in the Virtual Desktop, IMO. You're just asking for trouble otherwise.
-
I was able to get printer redirection working on my single server setup.
I was just thinking I may wanna do something akin to google cloud print the IPP. The copiers all seem to support it.
-
The problem with printer redirection is that all those printers seen from the clients will be seen in the RDSH server. Personally never liked that.
-
@Dashrender said in IPP Printing to Konica Minolta C224e over the internet(Citrix/RDSH Deployment):
The problem with printer redirection is that all those printers seen from the clients will be seen in the RDSH server. Personally never liked that.
Yeah and that is exactly how I would be printing remotely to our printer. lol.
-
If the users are all coming from the same location, IP, then you can probably map all needed printers over the internet, otherwise you'll probably need to map through the client
-
The printer redirection has improved drastically since my last go around with RDSH.
Also @Dashrender I notice in the admin session you can see all printer sessions, but users only see their own redirected printers.
-
@bigbear said in IPP Printing to Konica Minolta C224e over the internet(Citrix/RDSH Deployment):
e security would be simple enough, publishing ports via the firewall and restricting traffic to originate only from my RDSH deployment IP address. Not sure if its feasible.
I do not recommend using IPP printing, it is a security in my mind. You can setup the printer with a local IP address and deploy through GPO or installed locally. Maybe if they are in different networks to use a VPN instead.
-
Haven't gone down this rabbit hole yet, but what about Direct print?
https://technet.microsoft.com/en-us/library/jj134156(v=ws.11).aspx -
@dbeato said in IPP Printing to Konica Minolta C224e over the internet(Citrix/RDSH Deployment):
@bigbear said in IPP Printing to Konica Minolta C224e over the internet(Citrix/RDSH Deployment):
e security would be simple enough, publishing ports via the firewall and restricting traffic to originate only from my RDSH deployment IP address. Not sure if its feasible.
I do not recommend using IPP printing, it is a security in my mind. You can setup the printer with a local IP address and deploy through GPO or installed locally. Maybe if they are in different networks to use a VPN instead.
What is your security concern if the firewall is limited only to allow printing via that port to the hosted RDSH service?
I was thinking other than IPP, then VPN would be the other option, other than client mapped network print.
-
@Dashrender If you are limiting it by the IP address (WAN), anyone on that IP address will have access to the printer. That will be my only concern in that case.
-
@dbeato said in IPP Printing to Konica Minolta C224e over the internet(Citrix/RDSH Deployment):
@Dashrender If you are limiting it by the IP address (WAN), anyone on that IP address will have access to the printer. That will be my only concern in that case.
Well assuming you have an assigned IP by your VPS provider, and it's for the RDSH server - this should not be a concern. If you have baddies logging onto your RDSH server, access to your IPP Printer is the least of your concerns.
-
@Dashrender said in IPP Printing to Konica Minolta C224e over the internet(Citrix/RDSH Deployment):
ies logging onto your RDSH server, access to your IPP Printer is the least of your concerns.
Correct!