Yep, and printers should be on their network, with a firewall in between them and end users -- print jobs must go through a print server. An end user device sho

Yep, and printers should be on their network, with a firewall in between them and end users -- print jobs must go through a print server. An end user device should not be able to communicate directly with a network printer. Last I knew, most HP network printers still have SNMP enabled by default (with the default "public" and "private" community strings as well) and many (most?) also have exposed web interfaces and the default credentials often are not changed. Even relatively competent tech people don't realize they can get "pwned" via their printers.