Cisco 7965G Administration Manual page 27

Chapter 1 An Overview of the Cisco Unified IP Phone
Table 1-3 Overview of Security Features (continued)
Feature
CAPF (Certificate Authority
Proxy Function)
Security profiles
Encrypted configuration files
Optional disabling of the web
server functionality for a phone
Phone hardening
802.1X Authentication
1. CAPF = Certificate Authority Proxy Function
Related Topics
•
•
•
•
•
OL-12650-01
Description
Implements parts of the certificate generation procedure that are too
processing-intensive for the phone, and it interacts with the phone
for key generation and certificate installation. The CAPF can be
configured to request certificates from customer-specified
certificate authorities on behalf of the phone, or it can be configured
to generate certificates locally.
Defines whether the phone is nonsecure, authenticated, or
encrypted. See the
page 1-14 for more information.
Lets you ensure the privacy of phone configuration files.
You can prevent access to a phone's web page, which displays a
variety of operational statistics for the phone.
Additional security options, which you control from
Cisco Unified Communications Manager Administration:
Disabling PC port
•
Disabling Gratuitous ARP (GARP)
•
• Disabling PC Voice VLAN access
• Disabling access to the Setting menus, or providing restricted
access that allows access to the User Preferences menu and
saving volume changes only
Disabling access to web pages for a phone.
•
You can view current settings for the PC Port Disabled,
Note
GARP Enabled, and Voice VLAN enabled options by
looking at the phone's Security Configuration menu. For
more information, see the
section on page
The Cisco Unified IP Phone can use 802.1X authentication to
request and gain access to the network. See the
Authentication on Cisco Unified IP Phones" section on page 1-16
for more information.
Understanding Security Profiles, page 1-14
Identifying Encrypted and Authenticated Phone Calls, page 1-14
Device Configuration Menu, page 4-12
Supporting 802.1X Authentication on Cisco Unified IP Phones, page 1-16
Security Restrictions, page 1-18
Cisco Unified IP Phone 7965G and 7945G Administration Guide for Cisco Unified Communications Manager 6.0
Understanding Security Features for Cisco Unified IP Phones
"Understanding Security Profiles" section on
"Device Configuration Menu"
4-12.
"Supporting 802.1X
1-13