DescriptionFeature
Uses SRTP to ensure that the media streams between supported devices proves
secure and that only the intended device receives and reads the data. Includes
creating a media master key pair for the devices, delivering the keys to the
devices, and securing the delivery of the keys while the keys are in transport.
Media encryption
Ensures that all SCCP and SIP signaling messages that are sent between the
device and the Cisco Unified Communications Manager server are encrypted.
Signaling encryption
Implements parts of the certificate generation procedure that are too
processing-intensive for the phone, and interacts with the phone for key
generation and certificate installation. The CAPF can be configured to request
certificates from customer-specified certificate authorities on behalf of the
phone, or it can be configured to generate certificates locally.
CAPF (Certificate Authority
Proxy Function)
Defines whether the phone is nonsecure, authenticated, encrypted, or protected.Security profiles
Lets you ensure the privacy of phone configuration files.Encrypted configuration
files
You can prevent access to a phone’s web page, which displays a variety of
operational statistics for the phone.
Optional disabling of the
web server functionality for
a phone
Additional security options, which you control from Cisco Unified
Communications Manager Administration:
•
Disabling PC port
•
Disabling Gratuitous ARP (GARP)
•
Disabling PC Voice VLAN access
•
Disabling access to the Setting menus, or providing restricted access that
allows access to the User Preferences menu and saving volume changes
only
•
Disabling access to web pages for a phone
You can view current settings for the PC Port Disabled, GARP
Enabled, and Voice VLAN enabled options by looking at the phone’s
Security Configuration menu.
Note
Phone hardening
The Cisco Unified IP Phone can use 802.1X authentication to request and gain
access to the network.
802.1X Authentication
Related Topics
Security Profiles, on page 17
Security Restrictions, on page 22
Authenticated, Encrypted, and Protected Phone Calls, on page 17
Cisco Unified IP Phone 7941G, 7941G-GE, 7942G, 7961G, 7961G-GE, and 7962G Administration Guide for Cisco
Unified Communications Manager 9.0 (SCCP and SIP)
16
Cisco Unified IP Phone
Supported Security Features