Cisco Acano X-series
![Cisco](https://files.manualsbrain.com/attachments/7380d0050044647c30f5c24bbbf5d0c0b6d9bb84/common/fit/150/50/faa183d287233c52228cfea3dbc2a127fe780f60564fcb0955d9c3d1cd23/brand_logo.png)
Cisco Meeting Server Release 2.0 : Single Split Meeting Server Deployments
94
Table 10: MMP commands to configure FIPS
MMP commands
Description
fips
enable|disable
enable|disable
Enables/disables the FIPS-140-2 mode cryptography for all cryptographic operations for
network traffic. After enabling or disabling FIPS mode, a reboot is required
network traffic. After enabling or disabling FIPS mode, a reboot is required
fips
Displays whether FIPS mode is enabled
fips test
Runs the built-in FIPS test
13.4 TLS certificate verification
You can enable Mutual Authentication for SIP and LDAP in order to validate that the remote
certificate is trusted. When enabled, the Call Bridge will always ask for the remote certificate
(irrespective of which side initiated the connection) and compare the presented certificate to a
trust store that has been uploaded and defined on the server.
certificate is trusted. When enabled, the Call Bridge will always ask for the remote certificate
(irrespective of which side initiated the connection) and compare the presented certificate to a
trust store that has been uploaded and defined on the server.
Table 11: MMP commands to configure TLS
MMP commands
Description
tls <sip|ldap> trust <crt
bundle>
bundle>
Defines Certificate Authorities to be trusted
tls <sip|ldap> verify
enable|disable|ocsp
enable|disable|ocsp
Enables/disables certificate verification or whether OCSP is to be
used for verification
used for verification
tls <sip|ldap>
displays current configuration
13.5 User controls
MMP admin users can:
n
Reset another admin user’s password
n
Set the maximum number of characters that can be repeated in a user’s password – and
there are a number of other user password rule additions
there are a number of other user password rule additions
n
Limit MMP access by IP address
n
Disable MMP accounts after configurable idle period
13.6 Firewall rules
The MMP supports the creation of simple firewall rules for both the media and admin interfaces.
Note that this is not intended to be a substitute for a full standalone firewall solution and
therefore is not detailed here.
Note that this is not intended to be a substitute for a full standalone firewall solution and
therefore is not detailed here.
13 Additional security considerations & QoS