It depends on the environment.   I have one where there is a common print server - which is actually very helpful for both usability and security given that printers are typically poorly secured devices. So the rules are set up that printers can only talk to the printer server. The clients cannot communicate directly with the printers.   In another environment, some clients must connect directly to the printers, so there are rules ensuring they can only connect to the printers on the ports specified by the vendor (for the features that are used). ... View more