Specifications

1-13
Cisco Unified IP Phone 7906G and 7911G for Cisco Unified Communications Manager 8.0
OL-21033-01
Chapter 1 An Overview of the Cisco Unified IP Phone
Understanding Security Features for Cisco Unified IP Phones
Related Topics
• Identifying Authenticated, Encrypted and Protected Phone Calls, page 1-13
• Supporting 802.1X Authentication on Cisco Unified IP Phones, page 1-16
• Security Restrictions, page 1-18
• Device Configuration Menu, page 4-17
Understanding Security Profiles
All Cisco Unified IP Phones that support Cisco Unified Communications Manager 5.0 and later use a
security profile, which defines whether the phone is nonsecure, authenticated, or encrypted. For
information about configuring the security profile and applying the profile to the phone, refer to the
Cisco Unified Communications Manager Security Guide.
To view the security mode that is set for the phone, look at the Security Mode setting in the Security
Configuration menu. For more information, see Security Configuration Menu.
Related Topics
• Identifying Authenticated, Encrypted and Protected Phone Calls, page 1-13
• Security Restrictions, page 1-18
Identifying Authenticated, Encrypted and Protected Phone Calls
When security is implemented for a phone, you can identify authenticated or encrypted phone calls by
icons on the LCD screen on the phone. You can also determine if the connected phone is secure and
protected if a security tone plays at the beginning of the call.
Optional disabling of the
web server functionality
for a phone
You can prevent access to a phone’s web page, which displays a variety of operational statistics
for the phone.
Phone hardening Additional security options, which you control from Cisco Unified Communications Manager
Administration:
• Disabling PC port (applies to 7911G only)
• Disabling Gratuitous Address Resolution Protocol (GARP)
• Disabling PC Voice VLAN access (applies to 7911G only)
• Disabling access to the Setting menus, or providing restricted access that allows access to the
User Preferences menu and saving volume changes only
• Disabling access to web pages for a phone
Note You can view current settings for the PC Port Disabled, GARP Enabled, and Voice VLAN
enabled options by looking at the phone’s Security Configuration menu. For more
information, see Device Configuration Menu, page 4-17.
Table 1-4 Overview of Security Features (continued)
Feature Description