Cisco Unified IP Phone Security Features
Networking Protocol
Transport Layer Security
(TLS)
Trivial File Transfer
Protocol (TFTP)
User Datagram Protocol
(UDP)
Related Topics
Cisco Unified IP Communications Product Interactions
Phone Startup Process
Network Configuration Menu
Cisco Unified IP Phone Security Features
Implementing security in the Cisco Unified Communications Manager system prevents identity theft of the
phone and Cisco Unified Communications Manager server, prevents data tampering, and prevents call signaling
and media stream tampering.
To alleviate these threats, the Cisco IP telephony network establishes and maintains authenticated and encrypted
communication streams between a phone and the server, digitally signs files before they are transferred to a
phone, and encrypts media streams and call signaling between Cisco Unified IP phones.
If you configure security-related settings in Cisco Unified Communications Manager Administration, the
phone configuration file will contain sensitive information. To ensure the privacy of a configuration file, you
must configure it for encryption. For detailed information, refer to "Configuring Encrypted Phone Configuration
Files" in Cisco Unified Communications Manager Security Guide.
The following table shows where you can find additional information about security in this and other documents.
Cisco Unified IP Phone 7931G Administration Guide for Cisco Unified Communications Manager 9.0 (SCCP
and SIP)
12
Purpose
TLS is a standard protocol for securing
and authenticating communications.
TFTP allows you to transfer files over
the network.
On the Cisco Unified IP Phone, TFTP
enables you to obtain a configuration
file specific to the phone type.
UDP is a connectionless messaging
protocol for delivery of data packets.
Cisco Unified IP Phone 7931G
Usage notes
When security is implemented, Cisco
Unified IP Phones use the TLS protocol
when securely registering with Cisco
Unified Communications Manager.
For more information, see the
Cisco Unified Communications Manager
Security Guide.
TFTP requires a TFTP server in your
network, which can be automatically
identified from the DHCP server. If you
want a phone to use a TFTP server other
than the one specified by the DHCP
server, you must manually assign TFTP
server from the Network Configuration
menu on the phone.
For more information, see the Cisco
Unified Communications Manager
System Guide, "Cisco TFTP" chapter.
The Cisco Unified IP Phone transmits
and receives RTP streams, which utilize
UDP.
Seite drucken