86
Security
Gigaset T300 PRO / Gigaset T500 PRO / englisch / A31008-M2212-R102-3-7619 / admin_administration.fm / 19.03.2012
V
e
rsion 2, 06.0
8
.2010
Security
In the security area there are setting options to protect the PBX against hacking attempts
by accessing the phone accounts (SIP accounts). These include guidelines for the
complexity of access passwords, automatic checking and changing of passwords and a
filter system for IP addresses, from which registration requests are sent to the telephone
system. Using the filtering, the behaviour in the case of requests is analysed, so that a
classification is possible into unsuspicious and attacking clients. Resulting from this, the
system can automatically place the affected IP addresses in a whitelist or block them in a
blacklist (
Preferences
Guidelines for SIP passwords
To prevent unauthorised access via phone accounts (SIP accounts), there are two
complexity guidelines for their passwords. The selected guideline is used in the
autoprovisioning of phones and when generating random passwords in the manual
configuration of phone access.
The requirements of both guidelines for minimum password strength are (in each case
as a minimum):
Minimum number of specific characters for passwords
Permit manual assignment of weak passwords: This option allows the configuration of SIP
accounts with insecure passwords, whereby no warning is given before saving.
Guideline
Length
a-z
A-Z
0-9
Secure
16
3
2
2
Paranoid
30
5
5
5
