Cisco Systems 7970G IP Phone User Manual


 
1-12
Cisco Unified IP Phone 7970G/7971G-GE Administration Guide for Cisco Unified Communications Manager 7.0
OL-15299-01
Chapter 1 An Overview of the Cisco Unified IP Phone
Understanding Security Features for Cisco Unified IP Phones
Related Topics
Understanding Security Profiles, page 1-12
Identifying Authenticated, Encrypted, and Protected Phone Calls, page 1-13
Establishing and Identifying Secure Conference Calls, page 1-14
Device Configuration Menu, page 4-10
Supporting 802.1X Authentication on Cisco Unified IP Phones, page 1-16
Security Restrictions, page 1-17
Understanding Security Profiles
Cisco Unified IP Phones that support Cisco Unified Communications Manager 7.0 or later use a security
profile, which defines whether the phone is nonsecure, authenticated, or encrypted. For information
about configuring the security profile and applying the profile to the phone, refer to Cisco Unified
Communications Manager Security Guide.
To view the security mode that is set for the phone, look at the Security Mode setting in the Security
Configuration menu. For more information, see the “Security Configuration Menu” section on
page 4-23.
Security profiles Defines whether the phone is nonsecure, authenticated, encrypted, or protected.
See the “Understanding Security Profiles” section on page 1-12 for more
information.
Encrypted configuration files Lets you ensure the privacy of phone configuration files.
Optional disabling of the web server
functionality for a phone
You can prevent access to a phone’s web page, which displays a variety of
operational statistics for the phone.
Phone hardening Additional security options, which you control from
Cisco Unified Communications Manager Administration:
Disabling PC port
Disabling Gratuitous ARP (GARP)
Disabling PC Voice VLAN access
Disabling access to the Setting menus, or providing restricted access that
allows access to the User Preferences menu and saving volume changes only
Disabling access to web pages for a phone.
Note You can view current settings for the PC Port Disabled, GARP Enabled,
and Voice VLAN enabled options by looking at the phone’s Security
Configuration menu. For more information, see the “Device Configuration
Menu” section on page 4-10.
802.1X Authentication The Cisco Unified IP Phone can use 802.1X authentication to request and gain
access to the network. See the “Supporting 802.1X Authentication on Cisco
Unified IP Phones” section on page 1-16 for more information.
Table 1-3 Overview of Security Features (continued)
Feature Description