I have 79xx phones deployed throughout my enviornment. Mainly on the WAN. I have had some issues with hackers trying to brute force sip credentials from my tftp root. I need to find out if there is some sort of authentican that can be used with these phones, or if there is another cisco phone, besides the SMB Pro series, that uses HTTP or secure FTP for provisioning.
Securing the configuration files is possible but requires that you put the cluster into mixed mode. It will still use TFTP in the currently released versions but each configuration file will be encrypted using the public key of the phone's LSC. This has other advantages such as TLS-protected SCCP/SIP signaling between the phone and CUCM as well.
Thank you for the reply but your response didn't really answer my questions, more so for me not fully explaining. I am not using CUCM. I am using a thrid party asterisk server. So my question is geared towards the phone's capabilities, not server. The 7900 series phones are just what we have been using but I need to know what Cisco IP Phones can support HTTP provisioning, if any.
You have reached the Cisco Logistics Support Center.. To Check Status of
your RMA, visit Product Returns & Replacements (RMA). Need help? Contact
us by Phone or Email. North Americas Phone: 1800 553 2447 Option 4
Email: email@example.com Europe Phone: +3...
The short answer is that you don't.... That isn't entirely true while at
the same time it kind of is, but for the most part you don't configure
the softkeys. You enable or disable them via TCL. Here is the long
answer. Be sure to read the whole thing or e...
Topology: IP Phone > Switches > Microsoft NPS setup to forward 802.1x
proxy to > ISE 2.1 patch 3 Authentication: EAP-TLS using Cisco MIC SANs
Phone Models 802.1X support? 802.1x flavor Addtl Comment EAP-MD5 EAP-TLS
Cisco 3905 Y Y N Cisco 6911 Y Y N Cisco ...