Chapter 1 An Overview of the Cisco Unified IP Phone

Understanding Security Features for Cisco Unified IP Phones

Table 1-3

Overview of Security Features (continued)

 

 

 

 

Feature

 

Description

 

 

Signaling Encryption

Ensures that all SIP signaling messages that are sent between the

 

 

 

 

device and the Cisco Unified CallManager server are encrypted.

 

 

CAPF (Certificate Authority

Implements parts of the certificate generation procedure that are too

Proxy Function)

 

processing-intensive for the phone, and it interacts with the phone

 

 

 

 

for key generation and certificate installation. The CAPF can be

 

 

 

 

configured to request certificates from customer-specified

 

 

 

 

certificate authorities on behalf of the phone, or it can be configured

 

 

 

 

to generate certificates locally.

 

 

 

Security Profiles

 

Defines whether the phone is nonsecure, authenticated, or

 

 

 

 

encrypted.

 

 

Encrypted Configuration files

Enables privacy of phone configuration files.

 

 

Optional disabling of the web

You can prevent access to a phone’s web page, which displays a

server functionality for a phone

variety of operational statistics for the phone.

 

 

Phone hardening

Additional security options, which you control from Cisco

 

 

 

 

Unified CallManager Administration:

 

 

 

 

Disabling PC port

 

 

 

 

Disabling Gratuitous ARP

 

 

 

 

Disabling PC Voice VLAN access

 

 

 

 

Disabling access to the Setting menus, or providing

 

 

 

 

 

restricted access that allows access to the User Preferences

 

 

 

 

 

menu and saving volume changes only

 

 

 

 

Disabling access to web pages for a phone.

 

 

 

 

Note You can view current settings for the PC Port Disabled,

 

 

 

 

 

GARP Enabled, and Voice VLAN enabled options by

 

 

 

 

 

looking at the phone’s Security Configuration menu. For

 

 

 

 

 

more information, see the “Device Configuration Menu”

 

 

 

 

 

section on page 4-15.

 

 

802.1X Authentication

The Cisco Unified IP Phone can use 802.1X authentication to

 

 

 

 

request and gain access to the network. See the “Supporting 802.1X

 

 

 

 

Authentication on Cisco Unified IP Phones” section on page 1-18

 

 

 

 

for more information.

 

 

 

 

 

 

 

Cisco Unified IP Phone Administration Guide for Cisco Unified CallManager 5.1 (SIP), Cisco Unified IP Phones

 

 

1-16

 

 

 

 

OL-11524-01

 

 

 

 

 

 

Page 50
Image 50
Cisco Systems 7970G manual More information, see the Device Configuration Menu