JP2019101567A - Printing system, printing control apparatus, control method thereof, and program - Google Patents

Abstract

To reset a firewall setting to a setting that does not interfere with network communication with a printing apparatus when user's erroneous operation enables a firewall to cause an interrupted state of a part or all of network communication between a printing control apparatus and the printing apparatus.SOLUTION: A print control apparatus for communicating with an image forming apparatus via a network, includes firewall setting means for controlling to permit or prohibit communication with the image forming apparatus according to setting information, acquires the setting information of the firewall setting means, and changes the setting information to a setting to permit the communication with the image forming apparatus when the setting information is not a setting to permit the communication with the image forming apparatus.SELECTED DRAWING: Figure 6

Description

  The present invention relates to a printing system, a printing control apparatus, a control method thereof, and a program.

  As an image forming apparatus, for example, a multi-function peripheral (MFP) having a function such as copying, printing, scanner, and facsimile is widely used. In addition, a printing system is connected as an external controller to a print control apparatus (server) that performs various image processing related to print job processing and various setting processing for the printing apparatus and print instruction to these image forming apparatuses (printing apparatuses). Building is also widely done.

  The purpose of connecting and using such a printing control device is, for example, to further improve the quality of a printed image by enhancing the function provided by the printing device or utilizing the unique function of the printing control device. It is to let An example of the enhancement is to improve the processing performance of a print job. For example, the printing control apparatus is responsible for interpreting page description language (PDL) and generating bitmap data, and the printing apparatus receives the generated bitmap data and prints an image. As a result, it is possible to print the print job more efficiently and in a shorter time than when the printing apparatus alone performs all the processing. The unique functions of the print control apparatus include page editing and imposition of print jobs, image processing settings, and image processing according to the type of paper used for printing.

  The above-described print control apparatus is called DFE (Digital Front End), and includes a plurality of network adapters for performing network communication. Such a print control apparatus includes a network adapter for connecting to a printing apparatus, as well as a network adapter for connecting to a network. Then, a local network is constructed separately from the LAN by the print control device and the print device connected via the network adapter, and the print control device and the print device perform network communication. At this time, when the print control apparatus performs processing for converting PDL data of a print job into bitmap data, and the printing apparatus performs print processing, the print control apparatus transmits the bitmap data and the control command for print processing to the printing apparatus. Send. Further, as an example of transmission from the printing apparatus to the printing control apparatus, for example, it is conceivable to notify the printing control apparatus of the operating state of the printing apparatus and the state of consumables.

  Also, the print control apparatus connected to the network has an OS (Operation System) standard firewall (FireWall) function. The firewall function is, for example, a function that permits or prohibits communication based on information such as a destination address, a sender address, a port number, and a protocol for network communication. Furthermore, the firewall function has a function of recording the history of control regarding communication permitted and prohibited performed by itself as a log. It is also known that when the OS standard firewall function is invalidated or partially restricted, the OS displays a warning to prompt the user to activate the firewall function or cancel the restriction. ing.

JP, 2016-130997, A

  It is assumed that the firewall function is disabled or partially restricted so that network communication between the print control apparatus and the printing apparatus is not interrupted by the firewall function. However, the user is prompted to disable the disabled firewall function by the function of the OS, and the user may enable the firewall function accordingly. When the firewall function is activated, there is a problem that part or all of the network communication between the print control apparatus and the printing apparatus is interrupted. Such a problem is not limited to the case where the firewall function is activated by the function of the OS, but also occurs when the firewall is activated due to a user's erroneous operation. In order to recover from a state in which part or all of the network communication between the print control device and the printing device is interrupted, it is necessary for the user to reset the firewall settings to settings that do not hinder network communication with the printing device There is.

  The object of the present invention is to solve the problems of the prior art.

  An object of the present invention is to provide a technology for automatically correcting the setting and enabling network communication without requiring the user to perform resetting even if the setting of the firewall function is erroneously activated. It is.

In order to achieve the above object, a print control apparatus according to an aspect of the present invention has the following configuration. That is,
A print control apparatus that communicates with an image forming apparatus via a network,
A firewall setting unit that performs control to permit or prohibit communication with the image forming apparatus according to setting information;
Acquisition means for acquiring setting information of the firewall setting means;
A determination unit that determines whether the setting information acquired by the acquisition unit is a setting for permitting communication with the image forming apparatus;
Changing means for changing the setting information to a setting for permitting communication with the image forming apparatus when the determination means determines that the setting information is not a setting for permitting communication with the image forming apparatus; , And is characterized by.

  According to the present invention, even when the setting of the firewall function is erroneously activated, the setting can be automatically corrected and network communication can be performed without requiring the user to perform resetting again. is there.

FIG. 1 is a block diagram for explaining the arrangement of a print control apparatus according to the first embodiment. FIG. 1 is a schematic view of a printing system according to a first embodiment. FIG. 2 is a block diagram for explaining the hardware configuration of the image forming apparatus according to the first embodiment. FIG. 2 is a functional block diagram for explaining functions related to network communication, which the print control apparatus and the image forming apparatus according to the first embodiment have. 5 is a flowchart for explaining processing executed by a firewall setting monitoring unit when the print control apparatus according to the first embodiment is started. The flowchart explaining the monitoring process of the state of the firewall of S504 of 5. FIG. FIG. 6 is a view showing an example of a UI screen displayed in step S605. 10 is a flowchart for explaining processing executed by a firewall setting monitoring unit when the print control apparatus according to the second embodiment is started. 5 is a flowchart illustrating the firewall setting monitoring process of S804. FIG. 7 is a view showing an example of a firewall log held by a firewall unit of the print control apparatus according to the second embodiment. FIG. 8 is a view showing an example of condition rules of firewall setting information of the firewall unit of the print control apparatus according to the second embodiment. FIG. 8 is a view showing an example of a UI screen displayed on the display unit in step S905.

  Hereinafter, embodiments of the present invention will be described in detail with reference to the accompanying drawings. The following embodiments do not limit the present invention according to the claims, and all combinations of the features described in the embodiments are not necessarily essential to the solution means of the present invention. .

Embodiment 1
First, with reference to FIGS. 1 to 3, the basic operation of a printing system having a printing control apparatus and an image forming apparatus according to the first embodiment will be described.

  FIG. 2 is a schematic diagram of a printing system according to the first embodiment.

  In this printing system, the terminal device 211 is connected to a LAN (Local Area Network) 212, and the print control device 201 is also connected to the LAN 212. The print control apparatus 201 and the image forming apparatus 207 are connected via the LANs 205 and 206. Reference numerals 202 to 204, 208, and 209 denote connectors for connecting a LAN cable. The image forming apparatus 207 also includes a sheet feeding unit 210 that stores sheets used for printing.

  FIG. 1 is a block diagram for explaining the arrangement of a print control apparatus 201 according to the first embodiment.

  A network I / F (interface) unit 101 is a first network interface connected to the LAN 212 through the connector 202. A RIP (Raster Image Processor) processing unit 102 converts print data described in page description language (PDL) into a raster image such as a bitmap image. The network I / F unit 104 is a second network interface connected to the LAN 205 through the connector 203. The HDD 105 is a hard disk drive (HDD) that temporarily stores print data received via the network I / F unit 101. The HDD 105 also stores various setting value information managed by the print control apparatus 201. The print control apparatus 201 can read out and use the setting value information from the HDD 105 as necessary, and write the change of the setting value requested from the outside or the operation unit 109 to the HDD 105. The first memory 106 is a memory used by the RIP processing unit 102 for image data expansion processing. The CPU 107 develops the program stored in the HDD 105 in the second memory 108 and executes the expanded program to control the entire print control apparatus 201. The second memory 108 is used by the CPU 107 as a temporary storage area of data. The operation unit 109 has buttons, keys, a touch panel, and the like, and receives an instruction from the user. The encoding unit 103 encodes the raster image from the RIP processing unit 102 into a data format that can be interpreted by the image forming apparatus 207. The image interface unit 111 transmits the image data encoded by the encoding unit 103 to the image forming apparatus 207 via the connector 204 and the LAN 206. The display unit 110 displays a message or the like to the user. The operation unit 109 and the display unit 110 may be integrally configured, and the display unit 110 may have a touch panel function.

  Next, as a basic operation of the printing system, processing of a print job input from the terminal device 211 will be described. The terminal device 211 is a computer connected to the LAN 212, and a plurality of the terminal devices 211 may exist on the LAN 212.

  First, the terminal device 211 submits a print job to the print control device 201 via the LAN 212. A network data packet transmitted from the terminal device 211 to the print control device 201 propagates the LAN 212 and is taken into the print control device 201 via the connector 202. The print control apparatus 201 receives the data via the network I / F unit 101.

  When the print control apparatus 201 receives the print data, the control of the CPU 107 causes the received data to be written to the HDD 105 as necessary. This is a queuing (spool) generally performed for the purpose of improving the data transfer speed. The data stored in the HDD 105 is read out to the RIP processing unit 102 by an instruction of the CPU 107. On the other hand, print data for which queuing has not been performed is directly transferred to the RIP processing unit 102 by an instruction of the CPU 107. The print data thus sent to the RIP processing unit 102 is rasterized by the RIP processing unit 102 and converted into a raster image.

  Next, based on the format of the created raster image and the data format that can be interpreted by the image forming apparatus 207 set in advance, the encoding unit 103 converts the raster image into a data format that can be interpreted by the image forming apparatus 207. Encode An example of this encoding process is a data compression process performed for the purpose of reducing the amount of data to be transmitted to the image forming apparatus 207. Since such encoding is performed as necessary, if the generated raster data can be interpreted by the image forming apparatus 207 as it is, or if reduction of the data amount is not necessary, encoding is not necessary. May be skipped. The data after encoding needs to be in a format that can be interpreted by the image forming apparatus 207. For example, the format may be a specific print language format or a data format compressed by a specific method such as JBIG, etc. It changes with the ability of the interpretation means which it incorporates. Thus, the data encoded as necessary is repacketized by the network I / F unit 104 and sent from the connector 203 to the image forming apparatus 207 via the LAN 205 and the connector 208.

  The image forming apparatus 207 that has received the data packet feeds a sheet from the sheet feeding unit 210 and performs the printing process according to the printing process procedure that it has. As another route for transmitting encoded data, there is also a route for transferring to the image interface unit 111 via the encoding unit 103 and sending it to the image forming apparatus 207 using a dedicated transmission channel of the connector 204 and the LAN 206.

  FIG. 3 is a block diagram for explaining the hardware configuration of the image forming apparatus 207 according to the first embodiment. The image forming apparatus 207 according to the first embodiment is roughly divided into a main body 301 of the image forming apparatus and an image input / output control unit 305.

  A main body 301 of the image forming apparatus includes an operation unit 302, a reader unit 303, and a printer unit 304. The operation unit 302 is used by the user to operate the main body 301 and the image input / output control unit 305 of the image forming apparatus. The reader unit 303 reads an image of a document, and outputs image data corresponding to the image to the printer unit 304 and the image input / output control unit 305. The printer unit 304 prints an image corresponding to the image data from the reader unit 303 and the image input / output control unit 305 on a recording sheet (sheet).

  The image input / output control unit 305 is connected to the main body 301 of the image forming apparatus, and includes an interface unit 306, an image memory 307, a control unit 308, and a hard disk (HDD) 309. The HDD 309 stores various setting values of the image forming apparatus 207, such as an address book, operation history, user settings, ID settings, and network settings. The interface unit 306 is an interface between the print control apparatus 201 and the terminal apparatus 211 on the network 212 and the control unit 308. The interface unit 306 receives encoded image data transferred from the print control apparatus 201 via the connector 208 or the connector 209, expands the received data into image data that can be printed by the printer unit 304, and controls the control unit. Pass to 308 The control unit 308 includes a CPU, a ROM, a RAM, and the like. The CPU of the control unit 308 develops a program stored in the ROM or other recording medium in the RAM and executes the program, and the data of each of the reader unit 303, the interface unit 306, the image memory 307, etc. Control the flow. Instead of the HDD 309, another nonvolatile memory may be provided in which data is not erased even when the power is turned off, and the data may be stored in the nonvolatile memory. The above is the schematic configurations of the print control apparatus 201 and the image forming apparatus 207, and the printing system including them.

  FIG. 4 is a functional block diagram for explaining functions related to network communication, which the print control apparatus 201 and the image forming apparatus 207 according to the first embodiment have. In FIG. 4, parts common to the above-described drawings are denoted by the same reference numerals. Here, the function of the print control apparatus 201 is achieved by the CPU 107 developing a program stored in the HDD 105 or the ROM in the second memory 108 and the CPU 107 executing the developed program. The function of the image forming apparatus 207 is achieved by the CPU of the control unit 308 developing a program stored in the HDD 309 or the ROM on the RAM and the CPU executing the developed program.

  The device drivers 401, 402, and 409 are drivers of the network I / F 101, the network I / F 104, and the interface unit 306, respectively, and control transmission / reception processing of network packets of the respective network I / F units and the interface unit. These device drivers 401, 402, and 409 have a role of providing the OS units 404 and 410 with a unified control API independent of each network I / F unit and interface unit. The OS units 404 and 410 are operating systems. In the first embodiment, a plurality of device drivers are controlled in the print control apparatus 201 and the image forming apparatus 207, and a network communication API is provided to software applications operating on the respective apparatuses. . The firewall unit 403 provides a firewall function provided by the OS unit 404. This firewall function can be switched on / off. The setting (valid / invalid) of the firewall of the firewall unit 403 can be acquired through the OS unit 404, and the setting can be changed. In addition, it has a firewall setting condition that holds a condition rule for determining permission and prohibition of network communication.

  A print command request unit 405, a management command control unit 406, an MFP command I / F control unit 407, and a firewall setting monitoring unit 408 are functions of a software application that operates on the print control apparatus 201. An MFP management command control unit 411 and an MFP print command reception unit 412 are functions of a software application that operates on the image forming apparatus 207.

  The print command request unit 405 generates a raster image data generated by the print control apparatus 201 and a print command of the raster image data in the printing process of the print job. Then, it converts it into a dedicated print command protocol through the MFP command I / F control unit 407, and transmits it to the MFP print command reception unit 412 of the image forming apparatus 207. The MFP print command reception unit 412 receives the raster image data and the print command for print processing by the image forming apparatus 207. The transmission and reception of the raster image data and the print command uses the above-mentioned dedicated print command protocol, which is used only when the print control apparatus 201 cooperates with the image forming apparatus 207 to process a print job.

  Although the image forming apparatus 207 can operate without being connected to the print control apparatus 201, the MFP print command receiving unit 412 operates only when the image forming apparatus 207 is connected to the print control apparatus 201. This is to improve the processing efficiency of the CPU of the image forming apparatus 207 when the print control apparatus 201 is not connected. The management command control unit 406 acquires, from the image forming apparatus 207, the device status of the image forming apparatus 207, the mounted option, various statuses of consumables, and print job status information through the MFP command I / F control unit 407. .

  The MFP management command processing unit 411 receives the management command transmitted through the MFP command I / F control unit 407, and the device status of the image forming apparatus 207, installed options, various statuses of consumables, print job status, etc. Are sent back to the print control apparatus 201. The MFP management command processing unit 411 further notifies the above-described state information in accordance with a change in the device state of the image forming apparatus 207.

  The firewall setting monitoring unit 408 of the print control apparatus 201 is responsible for monitoring the firewall state and setting change processing described below in the first embodiment. The firewall setting monitoring unit 408 stores firewall settings necessary to prevent the network communication between the image forming apparatus 207 and the print control apparatus 201 via the MFP command I / F control unit 407 from being interrupted. Hold

  Next, monitoring of the firewall state and setting change processing performed by the firewall setting monitoring unit 408 according to the first embodiment will be described with reference to the flowcharts of FIGS. 5 and 6. The processing of the flowcharts shown in FIG. 5 and FIG. 6 is achieved by the CPU 107 of the print control apparatus 201 loading the program stored in the HDD 105 or ROM into the second memory 108 and the CPU 107 executing the loaded program. Be done.

  FIG. 5 is a flowchart for explaining the process executed by the firewall setting monitoring unit 408 when the print control apparatus 201 according to the first embodiment is started. In the first embodiment, it is assumed that the setting that the state of the firewall is invalid is stored in the firewall information.

  First, in step S501, the CPU 107 acquires the current status (valid / invalid) of the firewall unit 403 through the OS unit 404. Next, in step S502, the CPU 107 determines whether the acquired firewall state is the same as the stored firewall information (firewall state: invalid). Here, when it is determined that they are the same, the process proceeds to S504, but when it is determined that they are not the same, the process proceeds to S503. In step S503, the CPU 107 changes the state of the firewall of the firewall unit 403 to the firewall information stored in the firewall setting monitoring unit 408 through the OS unit 404. Then, in step S504, the CPU 107 executes firewall setting monitoring processing, and ends this processing.

  FIG. 6 is a flowchart for explaining the monitoring process of the state of the firewall in S504 of FIG.

  First, in step S601, the CPU 107 starts a timer. Next, in step S602, the CPU 107 waits for time-out due to clocking of the timer set in step S601. This is to wait for a predetermined time until the state of the firewall is actually changed after the instruction to change the state of the firewall of the firewall unit 403 in S503. In this way, when a timeout occurs, that is, when a predetermined time has elapsed, the process proceeds to S603, and the CPU 107 acquires the current status (valid / invalid) of the firewall unit 403 through the OS unit 404. Next, in step S604, the CPU 107 determines whether the acquired firewall state is the same as the firewall information stored in the firewall setting monitoring unit 408. If it is determined that they are the same, the process ends. If not, the process advances to step S605, and the CPU 107 determines that the state of the firewall is not correct, and the UI screen of the print control apparatus 201 requests permission for setting change. It is displayed on the display unit 110.

  FIG. 7 is a view showing an example of the UI screen displayed in S605.

  This UI screen 701 includes a message for notifying the user that the firewall setting is incorrect, and a “Yes” button 702 instructing the firewall setting to be switched from “enabled” to “disabled”. .

  Next, in step S606, the CPU 107 waits for detecting that the "Yes" button 702 is pressed on the UI screen, and proceeds to step S607 when the "Yes" button 702 is pressed. In step S607, the CPU 107 changes the state of the firewall of the firewall unit 403 to the firewall information stored in the firewall setting monitoring unit 408 through the OS unit 404, and ends this processing.

  As described above, according to the first embodiment, when it is detected that firewall information set so as not to interfere with network communication is changed, the firewall information can be automatically corrected. As a result, it is possible to use the print control apparatus and the image forming apparatus without requiring the user to reset the firewall.

  Thus, even if firewall information is unintentionally changed by the user due to, for example, a user setting error or a user action operation to a security alert notification of the OS (Operation System), the print control device and the image forming device Communication can be prevented.

Second Embodiment
Next, Embodiment 2 of the present invention will be described. Note that the configurations and the like of the printing system, the print control apparatus 201, and the image forming apparatus 207 according to the second embodiment are the same as those of the first embodiment described above, and thus the descriptions thereof will be omitted. The second embodiment is characterized in that the firewall unit 403 has a function of recording, as a firewall log, a history of control related to network communication performed by itself.

  FIG. 10 is a view showing an example of a firewall log held by the firewall unit 403 of the print control apparatus 201 according to the second embodiment.

  In the firewall log, items of blocked communication and date and time of passed communication, destination IP address, source IP address, port number, protocol, action, transmission / reception are recorded as information. The item "action" indicates the action executed by the firewall unit 403, "DROP" indicates a packet for which communication is prohibited, and "ALLOW" indicates a packet for which communication is permitted. FIG. 10 shows an example in which reception of three packets is prohibited.

  FIG. 11 is a diagram illustrating an example of condition rules of firewall setting information that the firewall unit 403 of the print control apparatus 201 according to the second embodiment has.

  "Name" is a rule name that identifies a rule. The “local IP address” is a source IP address to which the rule applies. The “remote IP address” is a destination IP address to which the rule applies. The "local port number" is a local port number to which the rule applies. The “remote port number” is a port number of a transmission destination to which the rule applies. "Protocol" is a protocol (UDP, TCP, optional) to which the rule applies. "Action" is an action (permit / prohibit) to be executed. "Transmission / reception" indicates the direction of communication, and includes either reception indicating reception connection or transmission indicating transmission connection.

  Next, firewall setting monitoring and setting change processing performed by the firewall setting monitoring unit 408 of the print control apparatus 201 according to the second embodiment will be described with reference to the flowcharts of FIGS. 8 and 9. The processing of the flowcharts shown in FIGS. 8 and 9 is achieved by the CPU 107 of the print control apparatus 201 loading a program stored in the HDD 105 or ROM into the second memory 108 and the CPU 107 executing the loaded program. Be done.

FIG. 8 is a flowchart for explaining the process executed by the firewall setting monitoring unit 408 when the print control apparatus 201 according to the second embodiment is started. In the second embodiment, setting information shown below is stored in the firewall information.
・ Firewall status: Valid ・ Name: DFE1
Local IP address: 10.255.255.1, 10.255.255.2
Remote IP address: 10.255.255.1, 10.255.255.2
Local port number: 0xCACC-0xFFFF
Remote port number: 0xCACC-0xFFFF
Protocol: Any Action: Allow Send / Receive: Receive Name: DFE2
Local IP address: 10.255.255.1, 10.255.255.2
Local IP address: 10.255.255.1, 10.255.255.2
Local port number: 0xCACC-0xFFFF
Remote port number: 0xCACC-0xFFFF
Protocol: Arbitrary Action: Permit Transmission / reception: Transmission In the example of FIG. 10, the source IP address "10.255.255.2", the destination IP address "10.255.255.1", the source based on the firewall information set in the DFE 1 described above. The reception of packets corresponding to the IP port "0xCBCA" and the transmission destination IP port "0xCBCA" is permitted.

  First, in step S <b> 801, the CPU 107 acquires the current firewall information of the firewall unit 403 through the OS unit 404. Next, in step S802, the CPU 107 determines whether the firewall information acquired in step S801 is correctly set. If it is determined here that the setting is not correct, the process proceeds to step S803, and the CPU 107 changes the firewall information of the firewall unit 403 to the firewall information stored by the firewall setting monitoring unit 408 through the OS unit 404 and proceeds to step S804. move on. On the other hand, if it is determined in S802 that the setting is correct, the processing proceeds to S804. In step S804, the CPU 107 executes firewall setting monitoring processing, and ends this processing.

  FIG. 9 is a flowchart for explaining the firewall setting monitoring process of S804.

  First, in step S901, the CPU 107 starts a timer. Next, in step S902, the CPU 107 waits for a timer timeout, and when a timeout occurs, that is, when a predetermined time has elapsed, the CPU 107 proceeds to step S903. In step S 903, the CPU 107 analyzes the current firewall log of the firewall unit 403 through the OS unit 404. Next, in step S904, the CPU 107 determines, from the firewall log, whether or not the packet whose communication has been inhibited includes any communication that does not match the firewall information rule. If it is determined here that the communication which does not match the rule is not included, this processing ends, but if not, the processing proceeds to S905. In step S905, the CPU 107 displays, on the display unit 110 of the print control apparatus 201, a UI screen 1201 for requesting that the setting of the firewall information is not correct and permission for changing the setting.

  FIG. 12 is a view showing an example of the UI screen displayed on the display unit 110 in S905.

  This UI screen 1201 includes a message for notifying the user that the firewall setting is not correct, and a “Yes” button 1202 instructing to change the firewall setting, for example, to the above-mentioned DFE setting. There is.

  Next, in step S 906, the CPU 107 waits for the “Yes” button 1202 to be pressed on the UI screen, and proceeds to step S 907. The CPU 107 monitors firewall information of the firewall unit 403 through the OS unit 404. The unit 408 changes the setting to the stored firewall information, and ends this processing.

  As described above, according to the second embodiment, when the change of the firewall information is detected from the firewall log, the firewall information can be automatically corrected. This makes it possible to use the print control apparatus and the image forming apparatus while saving the trouble of resetting the firewall information by the user. Thus, for example, even if the firewall setting of the print control apparatus is changed due to an unintended setting or change of the user due to a user setting operation or a user action operation to the security alert notification of the OS, the setting can be automatically corrected. .

(Other embodiments)
The present invention supplies a program that implements one or more functions of the above-described embodiments to a system or apparatus via a network or storage medium, and one or more processors in a computer of the system or apparatus read and execute the program. Can also be realized. It can also be implemented by a circuit (eg, an ASIC) that implements one or more functions.

  The present invention is not limited to the above embodiments, and various changes and modifications can be made without departing from the spirit and scope of the present invention. Accordingly, the following claims are attached to disclose the scope of the present invention.

  DESCRIPTION OF SYMBOLS 105 ... HDD, 107 ... CPU, 109 ... Operation part, 110 ... Display part, 201 ... Printing control apparatus, 207 ... Image formation apparatus, 403 ... Firewall part, 408 ... Firewall setting monitoring part

Claims (12)

A print control apparatus that communicates with an image forming apparatus via a network,
A firewall setting unit that performs control to permit or prohibit communication with the image forming apparatus according to setting information;
Acquisition means for acquiring setting information of the firewall setting means;
A determination unit that determines whether the setting information acquired by the acquisition unit is a setting for permitting communication with the image forming apparatus;
Changing means for changing the setting information to a setting for permitting communication with the image forming apparatus when the determination means determines that the setting information is not a setting for permitting communication with the image forming apparatus; ,
A printing control apparatus characterized by having. The apparatus further includes holding means for holding setting information for permitting communication between the firewall setting means and the image forming apparatus.
The print control apparatus according to claim 1, wherein the determination unit determines based on whether the setting information acquired by the acquisition unit is the same as the setting information stored in the storage unit. The changing means is
The apparatus further comprises display means for displaying a screen for warning the user that the setting information of the firewall setting means is not a setting for permitting communication with the image forming apparatus.
3. The apparatus according to claim 1, wherein the setting information is changed to a setting for permitting communication with the image forming apparatus by accepting permission to change the setting information by the user for displaying the screen. The printing control device as described. A print control apparatus that communicates with an image forming apparatus via a network,
A firewall setting unit that performs control to permit or prohibit communication with the image forming apparatus according to setting information;
Storage means for storing a firewall log by the firewall setting means;
A determination unit that determines whether the communication prohibited by the firewall log stored in the storage unit matches the condition rule of the firewall;
Change means for changing the setting information to a setting for permitting communication with the image forming apparatus when the determination means determines that the condition rule of the firewall is not matched;
A printing control apparatus characterized by having. The changing means is
The apparatus further comprises display means for displaying a screen for warning the user that the setting information of the firewall setting means is not a setting for permitting communication with the image forming apparatus.
5. The apparatus according to claim 4, wherein the setting information is changed to a setting for permitting communication with the image forming apparatus by accepting permission to change the setting information by the user for displaying the screen. Print control device.   The print control apparatus according to any one of claims 1 to 3, wherein the firewall setting unit is realized by a firewall function provided by an operating system (OS) of the print control apparatus.   The print control apparatus according to claim 6, wherein the acquisition unit acquires setting information of the firewall setting unit through the OS. A printing system having an image forming apparatus and a printing control apparatus connected via a network, the printing system comprising:
The print control device
A firewall setting unit that performs control to permit or prohibit communication with the image forming apparatus according to setting information;
Acquisition means for acquiring setting information of the firewall setting means;
A determination unit that determines whether the setting information acquired by the acquisition unit is a setting for permitting communication with the image forming apparatus;
Changing means for changing the setting information to a setting for permitting communication with the image forming apparatus when the determination means determines that the setting information is not a setting for permitting communication with the image forming apparatus; And have
The image forming apparatus forms an image based on image data received through communication with the print control apparatus. A printing system having an image forming apparatus and a printing control apparatus connected via a network, the printing system comprising:
The print control device
A firewall setting unit that performs control to permit or prohibit communication with the image forming apparatus according to setting information;
Storage means for storing a firewall log by the firewall setting means;
A determination unit that determines whether the communication prohibited by the firewall log stored in the storage unit matches the condition rule of the firewall;
And changing means for changing the setting information to a setting for permitting communication with the image forming apparatus when the determination means determines that the condition rule of the firewall is not matched.
The image forming apparatus forms an image based on image data received through communication with the print control apparatus. A control method for controlling a print control apparatus that communicates with an image forming apparatus via a network, comprising:
A firewall step of performing control for permitting or prohibiting communication with the image forming apparatus according to setting information according to setting information;
An acquiring step of acquiring setting information of the firewall process;
A determination step of determining whether the setting information acquired in the acquisition step is a setting for permitting communication with the image forming apparatus;
When the changing unit determines that the setting information is not a setting for permitting communication with the image forming apparatus, the setting information is changed to a setting for permitting communication with the image forming apparatus. Change process,
A control method characterized by comprising: A control method for controlling a print control apparatus that communicates with an image forming apparatus via a network, comprising:
A firewall step of performing control for permitting or prohibiting communication with the image forming apparatus according to setting information according to setting information;
A storage step of storing a firewall log by the firewall step;
A determination step of determining whether the communication prohibited by the firewall log stored in the storing step matches the condition rule of the firewall;
A changing step of changing the setting information to a setting for permitting communication with the image forming apparatus when the changing unit determines that the judging step does not match the condition rule of the firewall;
A control method characterized by comprising:   A program for storing a computer as each means of the print control device according to any one of claims 1 to 7.

Images