Pitney Bowes SendPro Tablet, SendPro® Tablet Connectivity Guide

  • Hello! I am an AI chatbot trained to assist you with the Pitney Bowes SendPro Tablet Connectivity Guide. I’ve already reviewed the document and can help you find the information you need or explain it in simple terms. Just ask your questions, and providing more details will help me assist you more effectively!
User Guide
SV63346 Rev. A
July 24, 2019
Shipping & Mailing
Postage devices
SendPr Tablet
Connectivity Guide
Introduction 2
BasicInstallationRequirements 2
PowerOutletRequirements 2
AdvancedNetworkRequirements 3
PortsandCommunicationRequirements 4
URLInformation 5
FAQs 7
Introduction
TheSendProTabletisanewgenerationofficeshippingsystemfromPitneyBowesthatusesWi-Fi
connectionversusanold-styleanalogphoneline.Step-by-stepinstructionsareincludedwithyour
shipmentsothatyourSendProTabletdevicewillconnecttoPitneyBowesduringtheinstallation
process.
IfyourequestedourProfessionalService,yourinstallationwillbesupportedonsitebyatrainedPitney
Bowesprofessional.
Basic Installation Requirements
Inmostcases,youconnectyourdeviceasdescribedintheinstallationinstructionsincludedinthebox.A
wizardwilltakeyouthroughtheprocedureforsettinguptheWi-Ficonnection.
Youronlineconnectionprovidesyouquickpostagerefills,automaticrateupdatesandaccessto
additionalPitneyBowessupportservices.SendProTabletcanconnectyoutoyourpreferredcarriers
includingUSPS®,FedEx®andUPS®.
Power Outlet Requirements
Thestandardsystemrequiresaminimumof1electricoutletandupto3electricoutlets.
l SendProTabletprinter-oneelectricoutlet
l SendProTabletdockoneelectricoutlet
Pitney Bowes User Guide June 2019 2
Advanced Network Requirements
SendProTabletinitiatesallcommunication(viaHTTPorTLS),soitcansafelysitbehindmostcorporate
firewalls.
l High-speednetworkconnection
l SendProTabletsupports802.11nWiFiWPA,WPA-2PSK,WPA-802.1x(LEAP)protocols.It
currentlysupports2.4and5GHzfrequencyband.
l SendProTabletcommunicatestoexternalwebservicesviaHTTPoverPort80.
l SendProTabletcommunicatestoPitneyBowessecureserver(s)viaTLSoverport443.
l SendProTabletusesPort53forDNSlookup.
l PitneyBowesrequiresaminimumnetworkbandwidthof384kbps(upstreamanddownstream)to
operate,butwerecommend1Mbit/secforbestperformance.
l PitneyBowesrecommendsthatDSLorcellulardevicesarenotsharedacrossmultipleSendPro
Tabletsystems.
l Customer-ownedwebfilteringdevicesorsoftware,aswellasSSLpacketinspectionshouldbe
disabledfortheseportsastheycanaffectperformanceorcouldpreventfunctionality.
Pitney Bowes User Guide June 2019 3
Ports and Communication Requirements
TheSendProTabletconnectionusestheseportsandprotocols.Thesystemwillrequireaccessthrough
yournetworkandfirewall.
Communications
l Allcommunicationisinitiatedfromthesystemviaports80(HTTP)and443(TLS).
l Allcommunicationsfromthesystemtotheback-endsystemareintheformofJSONmessages.
Ports
Port 443 (TLS)
l O/SupdatesandPitneyBowesApplicationSoftwareandRatesDataupdates
l WebServices
Port 53
l DNSlookup
IMPORTANT:
ITdepartmentsthatusea"rulesbased"methodforallowingspecificportstopasstrafficontheir
networkforport53,allowforbothUDPandTCPtraffictothisport.
Pitney Bowes User Guide June 2019 4
URL Information
TheseURLsmustbeaccessiblefromthedevice,withoutanyobstructions.Thisincludesbeingfreeof
anySSLpacketinspection,webfilteringdevicesorsoftwaremonitoring.Unlessindicatedotherwise,
theseURLsapplytoSendProTablet.
TolocatetheProduct Code Number (PCN)andthe7-digit serial number,checkthelabelonthe
rearofthetabletasshownhere.Notethattheserialnumberisblurredouthereforsecurityreasons.
Pitney Bowes User Guide June 2019 5
Required URLs
l Online Help-onlinesupportwebsite:
SendProTablet:
o
https://www.pitneybowes.com/us/support/products/sendpro-tablet-support.html(Port80)
l PB Web Services Support-usedbyseveralPitneyBowesapplicationsincludingShipping:
o
https://api.pitneybowes.com(Port443)
o
https://pitneybowes.okta.com(Port443)
o
http://microsoft.com/SoftwareDistribution/Server/SimpleAuthWebService(Port80)
o
http://mail.o365.pb.com(Port80)
Recommended URLs
WerecommendtheseURLsareleftopen,butifthispresentsasecurityissue,theycanremainblocked.
Theyareenabledbydefault.
l SendPro APIs (Pitney Bowes hosted shipping site)-ShippingTrackableLabelsWeb
ServicesSupport
o
https://api.pitneybowes.com(Port443)
o
https://foundation.us.sending.pitneybowes.com/(Port443)
o
https://shipping.sending.us.pitneybowes.com/(Port443)
o
https://sendpro.us.pitneybowes.com/addressbook(Port443)
o
https://sendpro.us.pitneybowes.com/preferences/costaccounts(Port443)
o
https://sendpro.pitneybowes.com/preferences/printing(Port443)
o
https://sendpro.pitneybowes.com/history(Port443)
o
https://integration.sending.us.pitneybowes.com/(Port443)
o
https://locations.sendpro.pitneybowes.com/(Port443)
o
https://uam.sendpro.pitneybowes.com/(Port443)
o
https://sending.us.pitneybowes.com/(Port443)
o
https://sendpro.pitneybowes.com/(Port443)
l Device Management
o
https://smb.pitneybowes.com(Port443)
o
https://play.google.com(Port443)
Pitney Bowes User Guide June 2019 6
FAQs
Question Answer
WhatOSdoesthisdevicerun? SendProTablet(SPTB)Android8.1
HowareupdatestotheAndroidOperatingSystem
performed?
UpdatesaremanagedbySamsungKnoxtool.
Whyarebothports80and443inuse?Pleasedetailwhat
informationisbeingsentoverport80andifitisrequired
ALLcriticalfundsrelatedorcoreshippingservicesonly
useport443.Someofthenon-criticalservicesuseport
80(examples:onlineread-onlyHelpSystemcontent,or
non-PitneyBowessitesfortrackingservicessite)
Whatcontrolsareinplacetoprotectthisdeviceagainst
network-basedmalwarethreats?
Controlsinclude:
l WhitelistofURLs
l TLS
l Onlyexecutesservicesneededtoperform
activities
l OSdistributionhasbeenoptimizedandlocked
down
Whatinformationisbeingsentandpresumablystoredat
PitneyBowes?
PitneyBowescollectspostalusagedatathatisrequired
forUSPSreporting.ThisincludesitemssuchasClassof
Mail,Weight,anduseofspecialservicefees.No
PersonalIdentifiableInformation(PII)iscollectedor
used.Wealsocollectmachinehealthinformationsuch
asSoftwareversionnumbers,errorsreported,etc.
Ifinformationisbeingstored,howisitbeingstored?Please
describetheprotectionsinplace.
Postalusageinformationisstoredinaspecial
applicationanddatabase,whichisreviewedbySendPro
TabletpriortoourPostageMeterApproval.Machine
HealthinformationisstoredinAmazonWebServices,
butisuploadedthroughaTLSconnectionand
authenticatedusingmachineresidentcredentials.Again,
noPIIinformationiscollectedorstoredthere.
Doesithaveafirewall? No
Whocontrolsthefirewallrules? Notapplicable
Howarethefirewallrulesconfigured? AllowonlytheportsHttp,TLSandDNS
Whatisthesecuritypatchprocess? SendProTabletsecuritypatchesareappliedby
emergencyupdatesviaPitneyBowesonly,andona
regularschedulethroughPitneyBowesservices.
Pitney Bowes User Guide June 2019 7
Question Answer
Whatisthesoftwareupdateprocess,andhowoftendoes
thisoccur?
Asrequiredwithperiodicfeatureadditionsandbugfixes
l Whatisthenetworktrafficflowtoandfromthe
SendProTabletsystem?
l Whatfirewallrulesneedtobeinplacetoallowthe
necessarycommunication?
l Outgoingcontactinitiated(nopush)utilizingTLS,
URLsprovidedbyPitneyBowesservices
l Outgoing-transactionaldata
l Incomingisbothtransactionaldataandfilesand
WebServices
CanyouidentifysuspiciousactivityaffectingSendPro
Tablet?
Yes.Anauditprocessexiststovalidatethefinancial
integrityofthesystem.Errorlogsareavailableandcan
beuploadedtothePitneyBowesdatacenter.
WhataretheaccesscontrolsinplacetosecureSendPro
Tablet?
Theapplicationaccessismanagedbythecustomer
usinganaccesscode.ThesystemoperatesinaKiosk
modewhereaccesstotheunderlyingAndroidoperating
systemisprevented.
Howdoyouauthenticateanindividualoraservice? TrackingLabels"Shipping"applicationaccessis
managedbythecustomerusingUserIDsandpasswords
toauthenticate.
Arethereaudittrailsinplace? Yes.Extensivelogsandallfinancialtransactionsare
auditedbythePitneyBowesinfrastructure.TheSendPro
Tabletlogsallerrorconditions,andmaintainsinkusage
logs,printusagelogs,etc.
Isdatastoredonthedevice? Yes.SendProTabletstorestransactionaldata,graphic
images,customerprofilesandsettings,files(rates,etc.).
Transactionalusagedataisuploadedandthendeleted
whenconfirmeduponreceiptbyPitneyBowes
InfrastructureoverTLSchannel.
Whatcontrolsprotectthedata? AllfilesanddatainterfaceutilizingTLS.Incomingdata
andfilesaresignedandverifiedpriortouse.Ifconsumed
bytheprinter,itisverifiedoneachuse.Ifusedbythe
application,itisverifiedonload.
Pitney Bowes User Guide June 2019 8
/