Cisco Systems 7940G Manual De Usuario

All Cisco Unified IP Phones that support Cisco Unified Communications Manager 7.0 use a security 
profile, which defines whether the phone is nonsecure, authenticated, or encrypted. For information 
about configuring the security profile and applying the profile to the phone, refer to Cisco Unified 
Communications Manager Security Guide, Release 7.0.

To view the security mode that is set for the phone, look at the Security Mode setting in the Security 
Configuration menu. For more information, see the 

.

Media encryption

Uses SRTP to ensure that the media streams between supported devices proves secure and 
that only the intended device receives and reads the data. Includes creating a media master 
key pair for the devices, delivering the keys to the devices, and securing the delivery of the 
keys while the keys are in transport.

Signaling Encryption

Ensures that all SCCP signaling messages that are sent between the device and the Cisco 
Unified Communications Manager server are encrypted.

CAPF (Certificate Authority 
Proxy Function)

Implements parts of the certificate generation procedure that are too processing-intensive 
for the phone, and it interacts with the phone for key generation and certificate installation. 
The CAPF can be configured to request certificates from customer-specified certificate 
authorities on behalf of the phone, or it can be configured to generate certificates locally.

Security profiles

Defines whether the phone is nonsecure, authenticated, or

 

encrypted.

Optional disabling of the web 
server functionality for a phone

You can prevent access to a phone’s web page, which displays a variety of operational 
statistics for the phone.

Phone hardening

Additional security options, which you control from Cisco Unified Communications 
Manager Administration:

Disabling PC port

Disabling Gratuitous ARP (GARP)

Disabling PC Voice VLAN access

Disabling access to the Setting menus, or providing restricted access that allows access 
to the User Preferences menu and saving volume changes only

Disabling access to web pages for a phone.

You can view current settings for the PC Port Disabled, GARP Enabled, and Voice 
VLAN enabled options by looking at the phone’s Network Configuration menu. 
For more information, see the