Encrypted Media Path And Signaling Path; Phone And User Authentication; Worm And Virus Protection; Prevention Of Toll Abuse - Mitel 3300 General Information Manual

• "Encrypted Media Path and Signaling Path" on page 57
• "Phone and User Authentication" on page 57
• "Worm and Virus Protection" on page 57
• "Prevention of Toll Abuse" on page 57
• "Secure Management Interfaces" on page 58
• "Secure Applications" on page 58
• "SIP Security" on page 58

Encrypted Media Path and Signaling Path

Encrypted media and signaling path is supported for all Mitel's IP phones on the 3300 ICP
(Release 6.0 and later). The media path encryption is accomplished with Secure RTP using
128-bit Advanced Encryption Standard (AES). Encryption is backwards compatible to support
both currently shipping desktops as well as previously deployed Mitel IP desktops. Mitel
provides encryption of the media path between multiple 3300 ICPs using Secure Sockets Layer
(SSL) protocol. This allows scalability of applications by configuring 3300 ICPs into clusters or
deploying them as part of a centrally managed but distributed architecture.

Phone and User Authentication

Mitel implements phone authentication that requires a unique association of MAC addresses
and IP and user-entered PIN registration numbers. Additionally, desktop software downloads
are encrypted. Mitel also provides 802.1x authentication for desktops (Release 6.0 and later)
which offers support for the Extensible Authentication Protocol (EAP) using EAP-MD5 challenge
authentication to a RADIUS Server. Users authenticate through the phone interface by entering
a surname and password. This support is provided on the 5212, 5224, and 5235 IP Phones.

Worm and Virus Protection

The 3300 ICP uses an embedded real time operating system. This system is less susceptible
to virus or worm attacks that target traditional applications and their OS services because it
provides a very small base of common functionality with general purpose operating systems
such as Microsoft Windows, Lynx and UNIX. This lack of common functionality means that
VxWorks is not affected by the viruses and worms typically found on networks and the Internet.
This also makes it difficult for an attacker to write a virus targeted at generic VxWorks
implementations.
Application servers based on Windows NT/2000 must be properly maintained with regard to
current operating system security updates. Mitel products based on Windows NT/2000 include
the Contact Center Solutions, Speech Server and Messaging Server systems and Enterprise
Manager. These key application servers must be maintained with the latest in Microsoft security
updates and worm protection.

Prevention of Toll Abuse

Any communication system that has a combination of Direct Inward System Access (DISA)
Management and Maintenance
57