Cisco 7975G - Understanding Security Profiles

1-13
Cisco Unified IP Phone 7975G Administration Guide for Cisco Unified Communications Manager 6.0
OL-12642-01
Chapter 1 An Overview of the Cisco Unified IP Phone
Understanding Security Features for Cisco Unified IP Phones
Related Topics
• Understanding Security Profiles, page 1-13
• Identifying Encrypted and Authenticated Phone Calls, page 1-14
• Device Configuration Menu, page 4-12
• Supporting 802.1X Authentication on Cisco Unified IP Phones, page 1-16
• Security Restrictions, page 1-18
Understanding Security Profiles
Cisco Unified IP Phones that support Cisco Unified Communications Manager 6.0 or later use a security
profile, which defines whether the phone is nonsecure, authenticated, or encrypted. For information
about configuring the security profile and applying the profile to the phone, refer to Cisco Unified
Communications Manager Security Guide.
To view the security mode that is set for the phone, look at the Security Mode setting in the Security
Configuration menu. For more information, see the
“Security Configuration Menu” section on
page 4-27.
Related Topics
• Identifying Encrypted and Authenticated Phone Calls, page 1-14
• Device Configuration Menu, page 4-12
• Security Restrictions, page 1-18
Phone hardening Additional security options, which you control from
Cisco
Unified Communications Manager Administration:
• Disabling PC port
• Disabling Gratuitous ARP (GARP)
• Disabling PC Voice VLAN access
• Disabling access to the Setting menus, or providing restricted
access that allows access to the User Preferences menu and
saving volume changes only
• Disabling access to web pages for a phone.
Note You can view current settings for the PC Port Disabled,
GARP Enabled, and Voice VLAN enabled options by
looking at the phone’s Security Configuration menu. For
more information, see the
“Device Configuration Menu”
section on page 4-12.
802.1X Authentication The Cisco Unified IP Phone can use 802.1X authentication to
request and gain access to the network. See the
“Supporting 802.1X
Authentication on Cisco Unified IP Phones” section on page 1-16
for more information.
1. CAPF = Certificate Authority Proxy Function
Table 1-3 Overview of Security Features (continued)
Feature Description