Chapter 7: Security; Security - Avaya 9601 Administering

Chapter 7: Security

Security

SIP-based 9600 Series IP Deskphones provide lock and logout functionalities for security and
protection of the privacy of a user. When a user locks the deskphone, no one can unlock the
deskphone without the assigned password for the particular user. When the deskphone is in a
locked state, a user can receive calls or make emergency calls. The deskphone restricts access to
any user data while in locked state.
When a user logs out from the deskphone, the deskphone is available for other users to use.
However, when another user logs in to the same deskphone using designated extension and
password, the user can not access other user's data who have used the same deskphone. For
example, suppose user A and user B use the same deskphone. When user A logs out of the
deskphone, user B logs in. When user B logs in, user B can not access any record of user A, such
as contacts and call records, on the deskphone.
Important:
The CRAFT menu provides access to certain administrative procedures from the deskphone.
You must change the default password for the CRAFT menu to restrict users from using the
administrative procedures to change the deskphone configuration.
For troubleshooting the deskphones, the deskphones support SSH and a secure password
assignment mechanism for the Avaya professionals to login to the deskphones remotely and
perform the required operations remotely in a secure environment.
SSH users are not given the root access. The access permission is read-only and does not support
access to any private data including:
• Digital certificate private keys
• Authentication credentials for SIP, HTTP, 802.1X, VPN, Exchange, and LDAP
• Contact and call log information
• Personal browser information, such as bookmarks, URL history, and cookies
Therefore, an SSH user cannot execute the phone-report script as the script execution requires
write-access to some folders as well as read-access to some private data.
The deskphone support SRTP. SRTP is used to encrypt and secure the audio going to and from the
endpoint.
In order to correctly use SRTP, there are various components within the network that you must
correctly configure. For the deskphones to function properly with SRTP, you must configure the
August 2015 Administering Avaya 9601/9608/9611G/9621G/9641G/9641GS IP Deskphones SIP
Comments on this document? infodev@avaya.com
71