Cisco Cius Overview page 16

Overview of Supported Security Features
Feature
Security profiles
Encrypted configuration files
Optional disabling of the web server
functionality for Cisco Cius
Phone hardening
802.1X Authentication
Secure SIP Failover for SRST
Signaling encryption
Cisco Cius Administration Guide, Release 9.2(3)
16
Description
Defines whether Cisco Cius is nonsecure, authenticated,
encrypted, or protected. For more information about these
features and about Cisco Unified Communications Manager
and Cisco Cius security, see the Cisco Unified Communications
Manager Security Guide.
Lets you ensure the privacy of Cisco Cius configuration files.
For security purposes, you can prevent access to a Cisco Cius
web page (which indicates a variety of operational statistics for
the device) and user options pages. For more information, see
the Enabling and Disabling Web Page
Additional security options, which you control from Cisco
Unified Communications Manager Administration:
• Disabling PC port on the media station
• Disabling Gratuitous ARP (GARP)
• Disabling PC Voice VLAN access
• Providing restricted access to the web applications
• Disabling Bluetooth Accessory Port
• Disabling access to web pages
• Requiring a screen lock
• Controlling access to Google Android market.
• Controlling access to installation of applications from
unknown sources
Cisco Cius can use 802.1X authentication to request and gain
access to the network. See the
Authentication on Cisco Cius, on page 19
information.
After you configure an SRST reference for security and then
reset the dependent devices in Cisco Unified Communications
Manager Administration, the TFTP server adds the SRST
certificate to the Cisco Cius cnf.xml file and sends the file to
the device. A secure device then uses a TLS connection to
interact with the SRST-enabled router.
Ensures that all SIP signaling messages that are sent between
the device and the Cisco Unified CM server are encrypted.
Overview of Cisco Cius
Access.
Supporting 802.1X
for more
OL-26938-01