Description
Feature
Defines whether the phone is nonsecure, authenticated, encrypted, or protected. Other entries
in this table describe security features. For more information about these features, about
Cisco Unified Communications Manager, and about Cisco DX600 Series phone security,
see the
Cisco Unified Communications Manager Security Guide
.
Security profile
Lets you ensure the privacy of phone configuration files.
Encrypted configuration files
For security purposes, you can prevent access to the web pages for a phone (which display
a variety of operational statistics for the phone) and User Options web pages. For more
information, see
Manage the User Options Web Pages, on page 151
.
Optional web server disabling for a
phone
Additional security options, which you control from Cisco Unified Communications Manager
Administration:
•
Disable PC port
•
Disable Gratuitous ARP (GARP)
•
Disable PC Voice VLAN access
•
Provide restricted access to the web applications
•
Disable Bluetooth Accessory Port
•
Disable access to web pages for a phone
•
Require a screen lock
•
Control access to Google Play
•
Control access to installation of applications from unknown sources
Phone hardening
The Cisco DX600 Series phone can use 802.1X authentication to request and gain access
to the network. See
802.1X Authentication Support, on page 24
for more information.
802.1X Authentication
After you configure a Survivable Remote Site Telephony (SRST) reference for security and
then reset the dependent devices in Cisco Unified Communications Manager Administration,
the TFTP server adds the SRST certificate to the phone cnf.xml file and sends the file to the
phone. A secure phone then uses a TLS connection to interact with the SRST-enabled router.
Secure SIP Failover for SRST
Ensures that all SCCP and SIP signaling messages that are sent between the device and the
Cisco Unified Communications Manager server are encrypted.
Signaling encryption
Security Profiles
All Cisco Desktop Collaboration Experience DX600 devices that support Cisco Unified Communications
Manager use a security profile, which defines whether the phone is nonsecure, authenticated, or encrypted.
For information about configuring the security profile and applying the profile to the phone, see the
Cisco
Unified Communications Manager Security Guide
.
Cisco Desktop Collaboration Experience DX650 Administration Guide, Release 10.1(1)
21
Security Features