Cisco Systems 7960G, 7940G manual Understanding Security Profiles, Related Topics

Models: 7960G 7940G

1 162
Download 162 pages 37.83 Kb
Page 22
Image 22

Chapter 1 An Overview of the Cisco Unified IP Phone

Understanding Security Features for Cisco Unified IP Phones

Table 1-3

Overview of Security Features (continued)

 

 

 

Feature

 

Description

 

 

Media encryption

Uses SRTP to ensure that the media streams between supported devices proves secure and

 

 

that only the intended device receives and reads the data. Includes creating a media master

 

 

key pair for the devices, delivering the keys to the devices, and securing the delivery of the

 

 

keys while the keys are in transport.

 

 

Signaling Encryption

Ensures that all SCCP signaling messages that are sent between the device and the Cisco

 

 

Unified Communications Manager server are encrypted.

 

 

CAPF (Certificate Authority

Implements parts of the certificate generation procedure that are too processing-intensive

Proxy Function)

 

for the phone, and it interacts with the phone for key generation and certificate installation.

 

 

The CAPF can be configured to request certificates from customer-specified certificate

 

 

authorities on behalf of the phone, or it can be configured to generate certificates locally.

 

 

 

Security profiles

 

Defines whether the phone is nonsecure, authenticated, or

 

 

encrypted.

 

 

Optional disabling of the web

You can prevent access to a phone’s web page, which displays a variety of operational

server functionality for a phone

statistics for the phone.

 

 

Phone hardening

Additional security options, which you control from Cisco Unified Communications

 

 

Manager Administration:

 

 

Disabling PC port

 

 

Disabling Gratuitous ARP (GARP)

 

 

Disabling PC Voice VLAN access

 

 

Disabling access to the Setting menus, or providing restricted access that allows access

 

 

to the User Preferences menu and saving volume changes only

 

 

Disabling access to web pages for a phone.

 

 

Note You can view current settings for the PC Port Disabled, GARP Enabled, and Voice

 

 

VLAN enabled options by looking at the phone’s Network Configuration menu.

 

 

For more information, see the “Displaying the Network Configuration Menu”

 

 

section on page 4-1.

 

 

 

Related Topics

Understanding Security Profiles, page 1-10

Identifying Encrypted and Authenticated Phone Calls, page 1-11

Security Restrictions, page 1-11

CAPF Interaction when the Phone Resets, page 1-12

Understanding Security Profiles

All Cisco Unified IP Phones that support Cisco Unified Communications Manager 7.0 use a security profile, which defines whether the phone is nonsecure, authenticated, or encrypted. For information about configuring the security profile and applying the profile to the phone, refer to Cisco Unified Communications Manager Security Guide, Release 7.0.

To view the security mode that is set for the phone, look at the Security Mode setting in the Security Configuration menu. For more information, see the “Network Configuration Menu” section on page 4-4.

 

Cisco Unified IP Phone 7960G/7940G Administration Guide for Cisco Unified Communications Manager 7.0 (SCCP)

1-10

OL-15498-01

Page 22
Image 22
Cisco Systems 7960G, 7940G manual Understanding Security Profiles, Related Topics

7960G, 7940G specifications

Cisco Systems has long been a leader in creating innovative networking and communication solutions. Among their range of Voice over IP (VoIP) phones, the Cisco 7960G and 7940G stand out as robust, versatile devices that cater to the needs of modern businesses. Released in the early 2000s, these models respectively combine functionality, ease of use, and key features tailored for effective communication.

The Cisco 7960G is a high-end model designed for users who demand advanced features and functionalities. It comes with a large backlit LCD display that not only enhances visibility but also provides easy navigation through various options. The phone supports up to six lines, allowing users to manage multiple calls effortlessly. Its user-friendly interface includes programmable feature buttons and a 10/100 Ethernet switch, enabling seamless integration into existing networks.

On the other hand, the Cisco 7940G is a more basic model designed for users who require essential features for their business communications. It includes a monochrome LCD screen and supports a maximum of two lines. Despite its simplicity, the 7940G is equipped with several key features such as integrated speakerphone and mute options, making it ideal for day-to-day communication needs. Both models support Power over Ethernet (PoE), eliminating the need for separate power adapters and ensuring a cleaner, more organized workspace.

In terms of technologies, both the 7960G and 7940G leverage the Session Initiation Protocol (SIP) for signaling and media exchange. They also support secure communication through protocols like Secure Real-time Transport Protocol (SRTP) and Transport Layer Security (TLS). This ensures that businesses can engage in confidential conversations without the risk of interception.

The characteristics that make these models appealing include durability, ease of configuration, and reliability. Organizations can benefit from Cisco’s reliable support and regular updates, ensuring that their communication infrastructure remains robust and secure. With features designed for scalability, both phones can easily integrate into larger systems while maintaining high call quality.

In summary, Cisco’s 7960G and 7940G VoIP phones are exemplary devices that cater to a variety of business communication scenarios. With their blend of functionality, support for essential technologies, and reliable performance, they continue to serve organizations effectively in an increasingly interconnected world. Whether used in a bustling office or as part of a dynamic telecommunications strategy, these models offer excellent value and performance.