Polycom SIP 2.2.0 manual Incoming Signaling Validation, Configuration File Encryption, Device.cfg

Configuring Your System

Incoming Signaling Validation

The three optional levels of security for validating incoming network signaling are:

•Source IP address validation

•Digest authentication

•Source IP address validation and digest authentication Configuration changes can performed centrally at the boot server:

Central	Configuration File:	Specify the type of validation to perform on a request-by-request
(boot server)	sip.cfg	basis, appropriate to specific event types in some cases.
		•	For more information, refer to Request Validation
			<requestValidation/> on page A-14.

Configuration File Encryption

Configuration files (excluding the master configuration file), contact directories, and configuration override files can all be encrypted.

Note	The SoundPoint IP 300 and 500 phones will always fail at decrypting files. These
	phones will recognize that a file is encrypted, but cannot decrypt it and will display
	an error. Encrypted configuration files can only be decrypted on the SoundPoint IP
	301, 320, 330, 430, 501,550, 600, 601, and 650 and the SoundStation IP 4000
	phones.
	The master configuration file cannot be encrypted on the boot server. This file is
	downloaded by the bootROM that does not recognize encrypted files. For more
	information, refer to Master Configuration Files on page A-2.
	For more information on encrypting configuration files including determining
	whether an encrypted file is the same as an unencrypted file and using the
	SDK to facilitate key generation, refer to Encrypting Configuration Files on
	page C-3.
	Configuration changes can performed centrally at the boot server:
Central	Configuration File:	Specify the phone-specific contact directory and the
(boot server)	sip.cfg	phone-specific configuration override file.
		• For more information, refer to Encryption <encryption/>
		on page A-74.
	Configuration file:	Change the encryption key.
	<device>.cfg	• For more information, refer to refer to Flash Parameter
		Configuration on page A-100.

4 - 49