Set Up User And Phone Security Features - Polycom CX5500 Administrator's Manual

Set Up User and Phone Security
Features
After you set up your CX5500 system on your network with the default configuration, users can place and
answer calls. Polycom's Open SIP UC software enables you to make custom configurations to optimize
security settings.
This section shows you how to update your configuration for the following security features:
●
Local User and Administrator Passwords
privilege levels—user and administrator—each with its own password.
●
Incoming Signaling Validation
signaling.
●
Configuration File Encryption
protected (encrypted). The phone can recognize encrypted files, which it downloads from the
provisioning server, and it can encrypt files before uploading them to the provisioning server.
●
Digital Certificates
●
Generate a Certificate Signing Request
●
TLS Profiles Configure your phone with a profile that specifies trusted digital certificates. You can
also install and specify custom certificates.
●
Support Mutual TLS Authentication
authentication of the phone.
●
Configurable TLS Cipher Suites
TLS session negotiation.
●
Secure Real-Time Transport Protocol
eavesdropping. Encrypting audio streams to avoid interception and eavesdropping.
●
Lock the Phone
●
Support 802.1X Authentication
a wireless local area network (WLAN).
●
Set User Profiles
network.
To troubleshoot any problems with your CX5500 system on the network, see
System.
For more information on the configuration files, see
Configuration Files.
For more information on the Web Configuration Utility, see
For instructions on how to read the parameter tables for features listed in this section, see
Feature Parameter Tables.
Polycom, Inc.
Levels of security are provided for validating incoming network
Confidential information stored in configuration files can be
The CX5500 system supports digital certificates and associated private keys.
Support phone authentication of the server and server
Control which of cipher suites will be offered/accepted during
Encrypting audio streams to avoid interception and
Prevent access to the phone menu and to key presses.
Authenticate devices connecting to a local area network (LAN) or
Access your personal phone settings from any phone in your organization's
Several local settings menus are protected with two
Create a request to obtain a device certificate.
Use the Centralized Provisioning Method -
Provision with the Web Configuration
Troubleshoot Your CX5500
Utility.
Read the
175