Network Printers Printing During Security Scan

[Vulcat]

I have Orbi RBR40 with 2 Satellites, I have and Epson Workforce WF-2650, Epson XP-7100, Epson XP-6000, and Brother HL-L2360DW printers all attached wirelessly to network, all the printers have updated FW along with the Orbi, During the last two Armor Security scans all 4 printers printed the following:

HEAD / HTTP/1.1

Host: <printer IP>:9100

User-Agent: curl/7.59.0

Accept: */*

OPTIONS * RTSP/1.0

CSeq: 1

User-Agent: curl/7.59.0

GET / HTTP/1.1

Host: <printer IP>:9100

User-Agent: curl/7.59.0

Accept: */*

other than disabling the security, is there a fix to stop the printing on all the printers?

Thanks,

Don Harries

vulcat@gmail.com

[DexterJB]

Hi @Vulcat, I have sent you a message. Please check your inbox.

Dexter

[MKrisak]

I am having the same issue as many on your forums. Every time their is a scan, I am printing 3 pages of curl commands. This is wasting paper and ink not to mention money due to my ink subscription. Help is appreciated along with a permanent fix like preventing Armor from scanning select devices. Thanks.

[DexterJB]

Hi @MKrisak, I have sent you a message. Please check your inbox.

Dexter

[Prescott66]

Since many customers (including me) are having this issue, maybe it would be more productive to just post the solution instead of privately messaging people; unless of course the solution involves comprimising the security of our networks, in which case it looks like a firmware update is in order.

[hjk_plm]

NETGEAR is aware of this issue and the good news is that we have a fix under test. We are working on releasing the fix for Orbi and other Nighthawk routers soon.

[blairsimmons]

@DexterJB   Can you please post the fix for this so we can all see it?

[DexterJB]

Hi @blairsimmons, the fix is currently being tested. We will provide an update on this thread once available.

Dexter

[blairsimmons]

@DexterJB  can you please send it to me so I can test it too?

[Bomber1712]

I am having the same issue and would appreciate being let in on the secret. Please provide a solution for all, as soon as possible. Thank you.

[Retired_Member]

I'm having the same problem and it is frustrating to know that there is a secret fix available only if you are contacted outside of this forum. Please post the fix asap so we can all resolve this bug. I don't want to waste any more paper in my printers nor exceed my inkjuet ink monthly quota.

[Prescott66]

The fix isn't so secret—it's an invitation to beta test new firmware for the router. Personally I find the occasional random page printed less annoying than the potential of introducing other problems on my network with beta firmware, so I opted to just wait for the official fix.

[smariano]

I am having an issue regarding the Netgear armor security software. Each time it runs a vulnerability scan my printer spits out a few pages saying the following:

HEAD / HTTP 1.1

Host: x.x.x.x:9100

User-Agent : curl/7.59.0

Accept: */*

and other pages similar to the above.

How do i stop this please?

[Darq]

When will this fix be released?

I've been having these 3 pages printed ever since I received my Orbi, and am very eager to stop having my printer print on its own.

Thanks

[Retired_Member]

I found the solution -- turn Armor off! And if this isn't fixed before my 1-year free subscription, I( won't renew. Like everyone I'm waiting for a solution from Netgear that works.

[2NRoy]

Laser printer connected with my orbi router is spontaneously printing pages with HEAT / HTTP/ 1.1

Host IP

User- Agent: Curl/7.59.0

Accept: */*

Need help to stop this

[Bomber1712]

I would suggest following these directions to manually update to 2.5.1.8. It worked for me:

https://kb.netgear.com/31573/How-do-I-manually-upgrade-firmware-on-my-Orbi-router-using-orbilogin-co...

[2NRoy]

Thanks- I will follow the steps over the weekend and confirm.
Thanks

[Lesismore1955]

@Bomber1712 Kudos. I updated my firmware and it seems to have resolved my random printing issues. Can anyone tell me why Netgear charges to assist one in updating their firmware which, is a reocurring issue?

[wamonite]

This is slowly driving me and my family mad. Every time we go to use the printer, it is jammed with a few HTTP requests from the security scan. Any news on the firmware testing or an invitation to test a beta? Thanks, W

RBR20 firmware V2.3.5.26

Espon XP-8500

[Christian_R]

Hello wamonite, 

May you update to the latest RBR20 firmware version and let me know if your issue persists.

https://kb.netgear.com/000061404/RBR20-RBS20-Firmware-Version-2-3-5-36-Hot-Fix

Christian 

[wamonite]

Hi Christian,

I installed the hot fix shortly after your reply and have not had a incident yet so looking promising.

Thanks,

W

[Christian_R]

Hi wamonite, 

Glad to hear! Thanks for the update! 

Best,

Christian 

[wamonite]

Hi Christian,

It seems I spoke too soon. While it certainly has decreased in frequency, my printer has just printed the offending HTTP requests after which point the app notified me it had completed a vulnerability scan, so the hotfix has improved but not fixed it. I can't even open the Orbi app on my iPhone 11 at the moment (it crashes after the FaceId - a separate issue I will shortly scour the forums for) so feeling quite underwhelmed.

Cheers,

W

For reference:-

HEAD / HTTP/1.1

Host: ...:9100

User-Agent: curl/7.59.0

Accept: */*

OPTION * RTSP/1.0

CSeq: 1

User-Agent: curl/7.59.0

GET / HTTP/1.1

Host: ...:9100

User-Agent: curl/7.59.0

Accept: */*

[garrettdigital]

I’m having the same problem and I thought it was a printer issue with my Brother printer so I eventually got rid of the printer and got a new HP multifunction printer and I get the same thing. I’m using Armor on the Orbi and I don’t think the lack of security outweighs wasting 3 printed pages every week.

Contents of the printed pages.

Page 1
GET / HTTP/1.1
Host: 10.0.0.18:9100
User-Agent: curl/7.59.0
Accept: */*

Page 2
HEAD / HTTP/1.1
Host: 10.0.0.18:9100
User-Agent: curl/7.59.0
Accept: */*

Page 3
OPTIONS * RTSP/1.0
CSeq: 1
User-Agent: curl/7.59.0

Can someone please post a solution?

The IP address above is that of the printer.