Cisco 7970G Administration Manual page 50

Understanding Security Features for Cisco Unified IP Phones
Table 1-3 Overview of Security Features (continued)
Feature
Signaling Encryption
CAPF (Certificate Authority
Proxy Function)
Security Profiles
Encrypted Configuration files
Optional disabling of the web
server functionality for a phone
Phone hardening
802.1X Authentication
Cisco Unified IP Phone Administration Guide for Cisco Unified CallManager 5.1 (SIP), Cisco Unified IP Phones
1-16
Description
Ensures that all SIP signaling messages that are sent between the
device and the Cisco Unified CallManager server are encrypted.
Implements parts of the certificate generation procedure that are too
processing-intensive for the phone, and it interacts with the phone
for key generation and certificate installation. The CAPF can be
configured to request certificates from customer-specified
certificate authorities on behalf of the phone, or it can be configured
to generate certificates locally.
Defines whether the phone is nonsecure, authenticated, or
encrypted.
Enables privacy of phone configuration files.
You can prevent access to a phone's web page, which displays a
variety of operational statistics for the phone.
Additional security options, which you control from Cisco
•
Unified CallManager Administration:
Disabling PC port
–
Disabling Gratuitous ARP
–
Disabling PC Voice VLAN access
–
Disabling access to the Setting menus, or providing
–
restricted access that allows access to the User Preferences
menu and saving volume changes only
Disabling access to web pages for a phone.
You can view current settings for the PC Port Disabled,
Note
GARP Enabled, and Voice VLAN enabled options by
looking at the phone's Security Configuration menu. For
more information, see the
section on page
The Cisco Unified IP Phone can use 802.1X authentication to
request and gain access to the network. See the
Authentication on Cisco Unified IP Phones" section on page 1-18
for more information.
Chapter 1 An Overview of the Cisco Unified IP Phone
"Device Configuration Menu"
4-15.
"Supporting 802.1X
OL-11524-01