Chapter 7: Security And Protection; Security Methods And Protocols - Konftel 800 Installation & Administration

SECURITY AND PROTECTION

SECURITY METHODS AND PROTOCOLS

Konftel 800 supports a number of security methods and protocols to protect the
integrity of its configuration and operation.
802.1X Ethernet Authentication
With 802.1X Ethernet authentication enabled, Konftel 800 must authenticate as a
recognized device before getting an authorization to communicate on the network.
You can secure the 802.1X Ethernet authentication process by configuring one of
the following options:
• . The device uses the applicable TLS version to communicate with the
EAP TLS
802/1X authentication server. You can manually install TLS certificates can on
Konftel 800 by using the web administration interface or the certificates .xml
file.
• . The device uses the MD5 method to communicate with the 802/1X
EAP MD5
authentication server. You must enable
It is possible to configure both TLS and MD5, and then the authentication server
(RADIUS server) selects the protocol to use.
FIPS
Enabling the Federal Information Processing Standards (FIPS) results in the use
of an enhanced suite of encryption algorithms as well as supporting timers and
processes to meet the FIPS 140-2 requirements. With FIPS enabled, you can not
have the Legacy Encryption methods enabled at the same time.
TLS
The device uses Transport Layer Security (TLS) protocols for SIP authentication,
HTTPS connectivity for the centralized file server, and LDAP authentication and
communication. The following TLS protocols are available:
• to secure the communications with the SIP Registrar.
SIP-TLS
• to secure the communications with the LDAP server. The device
LDAP-TLS
uses this protocol by default.
You can manually install TLS certificates can on Konftel 800 by using the web
administration interface or the certificates .xml file.
Legacy Encryption
141
to use .
EAP MD5