Cisco Systems IP Phone OL 16342 01 User Manual

C H A P T E R  
10  
Phone Hardening  
To tighten security on the phone, you can perform phone hardening tasks in the Phone Configuration  
window in Cisco Unified Communications Manager Administration. This chapter contains information  
on the following topics:  
Disabling the Gratuitous ARP Setting  
By default, Cisco Unified IP Phones accept Gratuitous ARP packets. Gratuitous ARP packets, which  
devices use, announce the presence of the device on the network. However, attackers can use these  
packets to spoof a valid network device; for example, an attacker could send out a packet that claims to  
be the default router. If you choose to do so, you can disable Gratuitous ARP in the Phone Configuration  
window.  
Note  
Disabling this functionality does not prevent the phone from identifying its default router.  
Disabling Web Access Setting  
Disabling the web server functionality for the phone blocks access to the phone internal web pages,  
which provide statistics and configuration information. Features, such as Cisco Quality Report Tool, do  
not function properly without access to the phone web pages. Disabling the web server also affects any  
serviceability application, such as CiscoWorks, that relies on web access.  
To determine whether the web services are disabled, the phone parses a parameter in the configuration  
file that indicates whether the services are disabled or enabled. If the web services are disabled, the  
phone does not open the HTTP port 80 for monitoring purposes and blocks access to the phone internal  
web pages.  
Cisco Unified Communications Manager Security Guide  
OL-16342-01  
10-1  
 
   
Chapter 10 Phone Hardening  
Where to Find More Information  
Step 3  
Step 4  
To open the Phone Configuration window for the device, click the device name.  
Locate the following product-specific parameters:  
PC Port  
Settings Access  
Gratuitous ARP  
PC Voice VLAN Access  
Web Access Setting  
Tip  
To review information on these settings, click the question mark that displays next to the  
parameters in the Phone Configuration window.  
Step 5  
From the drop-down list box for each parameter that you want to disable, choose Disabled. To disable  
the speakerphone or speakerphone and headset, check the corresponding check boxes.  
Step 6  
Step 7  
Click Save.  
Click Reset.  
Additional Information  
Where to Find More Information  
Related Topics  
Related Cisco Documentation  
Cisco Unified IP Phone Administration Guide for Cisco Unified Communications Manager  
Cisco Unified Communications Manager Security Guide  
OL-16342-01  
10-3  
 
   
Chapter 10 Phone Hardening  
Where to Find More Information  
Cisco Unified Communications Manager Security Guide  
OL-16342-01  
10-4  
 

Belkin Network Card F1DC101C US User Manual
Black Box Modem MWU2000 G703 User Manual
Black Decker Coffeemaker DCM675BFC User Manual
BMW Car Stereo System BRLK2 User Manual
Bosch Appliances Ventilation Hood DIE 165 R User Manual
Cabletron Systems Switch SEH 24 User Manual
Campbell Hausfeld Fan IN170243AV User Manual
Canon Digital Camera 2807B006 User Manual
Cecilware Water Dispenser HWD 2 User Manual
Chief Manufacturing Indoor Furnishings LCD2TS User Manual