AudioCodes MediaPack MP-201B, User Manual, Page: 175 / 270

Version 3.0.1 175 July 2010
MP-20x Telephone Adapter 12. Remote MP-20x Telephone Adapter Management
„ Checks the software version with which the configuration file was created (if the file
was created with a later software version, it is not used).
„ Merges the configuration file with the current configuration:
•
Parameters that appear in the new file are modified or added
•
Parameters that do not appear in the new file remain in their existing value
Notes:
•
It is recommended that the configuration file (that is downloaded from the
network), contains only the small subset of parameters that the service
provider needs to update remotely.
•
To create the configuration file, it is recommended to use a MP-20x that is
restored to factory settings, modify the required parameters using the Web
GUI, and then upload the configuration file from MP-20x with the option to
get only the modified configuration fields enabled.
12.2.5.3 Security Concerns and Measures
The main security hazard in automatic file download is that a hacker can force MP-20x to
download a file from the hacker's server instead of the service provider’s legitimate server.
Another concern is exposing information such as the SIP proxy IP address and user and
password information in the configuration file (if the hacker is sniffing the network).
The following security measures are available to prevent this:
„ The configuration file can be encrypted using 3DES with pre-configured key. This
prevents the user from learning the format of the file and obtaining information from it.
„ HTTPS can be used to further encrypt the transport.
„
HTTPS certificates can be used to allow MP-20x to authenticate the server and also to
prevent the user from acquiring the file from the server.