VTech ET685 Administrator And Provisioning Manual page 164

Setting
Password
Security:
Ignore security advices
Use hidden tags
Restrict URI queries
Allow CSTA control
Empty client cert
Filter Packets from
Registrar
Authentication for SIP
Reboot
Authentication for SIP
Check-Sync
Administrator Mode
Web User Interface (WebUI) Reference
ET685 Administrator and Provisioning Manual
Description
This setting specifies the password that is used for
IEEE802.1X EAP-MD5 authentication.
The security warning at the upper right hand corner of the
web interface as well as the initial security advice web page
can be switched off by setting this setting to on.
You can protect the phone's web interface with hidden
security tags against remote attackers trying to change
phone settings with faked HTTP POST requests (XSRF
attack).
By default, if admin_mode_password and http credentials
(http_user and http_pass) are set and hidden tags are
activated, query strings in URIs (the part after the ?) are
restricted to a very limited number of cases. By setting
restrict_uri_queries to false, query strings are not restricted
anymore, so you can use hidden tags and passwords, even
if you need stuff like dummy.htm?settings=save&....
Allows to remotely control the phone via CSTA protocol. see
also csta_challenge, sip_ip_dialin_content_types
If this setting is on the phone will use empty client certificate
in TLS connections.
If set to "on", all SIP packets not coming from the
registrar/proxy will be ignored. For security reasons, "on" is
the default setting. This may cause big problems in an
environment where SIP packets from other sources also
have to be accepted for proper functionality! You have to
disable it to make a call flow work which isn't going via the
proxy only !
This setting enables and disables challenge responses for
remote reboot requests.
Turning this setting on enables challenge responses for
Check-Sync requests.
This setting allows to switch between user and administrator
mode of the phone.
164
Back to Contents