Disable Transport Layer Security Ciphers - Cisco 8832 Administration Manual

Cisco IP Conference Phone Administration
Field Name Field Type
Or Choices
Customer support upload String, up to 256
URL characters
Disable TLS Ciphers See
Layer Security Ciphers,
on page
Related Topics

Disable Transport Layer Security Ciphers

You can disable Transport Layer Security (TLS) ciphers with the Disable TLS Ciphers parameter. This
allows you to tailor your security for known vulnerabilities, and to align your network with your company's
policies for ciphers.
None is the default setting.
Disable more than one cipher suite by selecting and holding the Ctrl key on your computer keyboard. If you
select all of the phone ciphers, then phone TLS service is impacted. Your choices are:
• None
• TLS_RSA_WITH_3DES_EDE_CBC_SHA
• TLS_RSA_WITH_AES_128_CBC_SHA
• TLS_RSA_WITH_AES_256_CBC_SHA
• TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
• TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256
• TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
• TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384
For more information about phone security, see Cisco IP Phone 7800 and 8800 Series Security Overview
White Paper
white-paper-listing.html).
Default
Disable Transport None
103.
Configure User Credentials Persistent for Expressway
(https://www.cisco.com/c/en/us/products/collaboration-endpoints/unified-ip-phone-8800-series/
Cisco IP Conference Phone 8832 Administration Guide for Cisco Unified Communications Manager
Disable Transport Layer Security Ciphers
Description
Provides the URL for the Problem Report Tool (PRT).
If you deploy devices with Mobile and Remote Access
through Expressway, you must also add the PRT server
address to the HTTP Server Allow list on the
Expressway server.
For more information, see the
Credentials Persistent for Expressway Sign-In, on page
114.
Disables the selected TLS cipher.
Disable more than one cipher suite by selecting and
holding the Ctrl key on your computer keyboard.
Sign-In, on page 114
Configure User
103