Grandstream Networks GRP260X Series Administration Manual page 47

Web Access
Only allow the IP address list as a whitelist or restrict the IP address list as a blacklist to access the Web.
Control List
Web Session
Configures timer to logout web session during idle. The valid range is 2-60 min. The default value is 10 min
Timeout
Administrator can disable or enable user web access.
Enable User Web
Access
The default setting is "Enabled".
Validate Server After enabling this feature, phone will validate the server's certificate. If the server that our phone tries to register on
Certificates is not on our list, it will not allow server to access the phone.
Specifies the time in minutes that the web or LCD login interface will be locked out to user after five login failures.
Web/Restrict
This lockout time is used for web login, and LCD restrict mode admin login. Range is 0-60 minutes.
mode Lockout
Duration
The default setting is "5".
Web/Restrict
Configure attempt limit before lockout.
Mode lockout
Default is 5. Range is 1-10.
Attempt Limit
User Info Management
Test Password
Checks password strength to ensure better security.
Strength
User Password
New Password Set new password for web GUI access as User. This field is case sensitive.
Confirm
Enter the new User password again to confirm.
Password
Admin Password
Current
The current admin password is required for setting a new admin password.
Password
New Password Set new password for web GUI access as Admin. This field is case sensitive.
Confirm
Enter the new Admin password again to confirm.
Password
Client Certificate
Configures the minimum TLS version supported by the phone. The minimum TLS version must be less than or equal
Minimum TLS to the maximum TLS version.
Version The TLS version can be TLS 1.0, TLS 1.1 or TLS 1.2
The Default value is set to "TLS 1.0"
Configures the maximum TLS version supported by the phone. The maximum TLS version must be greater than or
Maximum TLS equal to the minimum TLS version.
Version The TLS version can be TLS 1.0, TLS 1.1, TLS 1.2, Unlimited,
The Default value is "Unlimited"
Enable/Disable This feature defines the function for weak cipher suites. If set to "Enable Weak TLS Cipher Suites", allow users to
Weak Cipher encrypt data by weak TLS cipher suites. If set to "Disable Symmetric Encryption RC4/DES/3DES", allow
Suites users to disable weak cipher DES/3DES and RC4.