Understanding Security Warnings - Cisco TELEPRESENCE ISDN GATEWAYS 2.0 Online Help Manual

Understanding security warnings

The Security status page displays a list of active security warnings for the ISDN gateway. To access
this information, go to Status > Security. Security warnings identify potential weaknesses in the
security of the ISDN gateway's configuration. For more information on configuring security settings,
refer to Configuring security
Displaying security status.
The table below details the warnings that appear and the relevant actions needed to rectify them.
Warning
Advanced
password
security is
disabled
Hide log
messages on
console is
disabled
Require
administrator
login to console
is disabled
Guest account is
enabled
Admin account
has default
username
Cisco TelePresence ISDN Gateways v2.0 Online help (Printable format)
settings. For more detailed information on the security status, refer to
Action
Enable advanced security mode in
user authentication settings
Enable hide log messages on
console in serial console settings
Enable require administrator login
in serial console settings
Disable the guest account
Change the admin account
username
Understanding security warnings
Explanation
If Advanced security mode is not enabled,
passwords will be stored in plain text or
MD5, and therefore be unsecure.
To enable Advanced security mode, go to
Settings > Security and select Enable
advanced security mode.
To hide log messages on the console, go
to Settings > Security and select Hide
log messages on console. This will stop
event messages appearing on the
console.
Having to log in as administrator on the
serial console increases security.
To do this, go to Settings > Security and
select Require administrator login.
By default the guest user account is
assigned the privilege of 'conference list
only', meaning that users who log in as
guest can view the list of active
conferences and change their own profile.
Disabling the guest account makes the
ISDN gateway more secure.
To disable the guest account, go to
Users > User list and select Guest.
Select Disable user account.
The ISDN gateway must have at least
one configured user with administrator
privileges. By default, the User ID is
"admin" and no password is required.
To change the admin account username,
go to Users > User list and select admin.
Enter a new username in the User ID field
and click Update user settings.
96 of 116