Provisioning Server Security Notes; Set Up An Ftp Server As Your Provisioning Server - Polycom CX5500 Administrator's Manual

Polycom CX5500 Unified Conference Station Administrator's Guide

Provisioning Server Security Notes

Read this section if you have never set up a provisioning server before.
For organizational purposes, Polycom recommends configuring a separate log file directory, an override
directory, a contact directory, and a license directory, though this is not required. Each directory can have
different access permissions. For example, you can allow LOG, CONTACTS, and OVERRIDES to have
full read and write access, and LICENSE to have read-only access.
You should ensure that the file permissions you create provide the minimum required access and that the
account has no other rights on the server.
Tip: Allowing File Uploads to Your Provisioning Server
Polycom recommends that you allow file uploads to the provisioning server where the security
environment permits. File uploads allow event log files to be uploaded. Log files provide backup
copies of changes users make to the directory, and to the phone's configuration through the Web
server and/or local user interface. These log files help Polycom provide customer support when
diagnosing issues that may occur with the phone operation.
The phone's server account needs to be able to add files that it can write to in the log file directory and
the provisioning directory. It must also be able to list files in all directories mentioned in the
<MACaddress>.cfg file. All other files that the phone needs to read, such as the application executable
and the standard configuration files, should be made read-only using file server file permissions.
Tip: Use RFC-Compliant Servers
Polycom recommends that you use RFC-compliant servers.
Each phone may open multiple connections to the server.
The phone will attempt to upload log files, a configuration override file, and a directory file to the server if
changed. This requires that the phone's account has delete, write, and read permissions. The phone will
still function without these permissions, but will not be able to upload files.
If you know the phone is going to download a file from the server, you should mark the file as read-only.
Set up an FTP Server as Your Provisioning
Server
Read this section if you have never set up a provisioning server before.
A simple provisioning configuration uses File Transfer Protocol or FTP. FTP servers are free, require
installation, and use logins and passwords. A free and popular server,
Windows. FileZilla Server (version 0.9.xx) has been tested with the CX5500 Software.
Polycom, Inc.
FileZilla Server, is available for
1.1.0
44