Security

For information about toll fraud, see the DEFINITY^® or Avaya Communication Manager documents on the Avaya support Web site. The 9600 Series IP Telephones cannot guarantee resistance to all Denial of Service attacks. However, there are checks and protections to resist such attacks while maintaining appropriate service to legitimate users.

All 9600 Series IP Telephones that have WML Web applications support Transport Layer Security (TLS). This standard allows the telephone to establish a secure connection to a HTTPS server, in which the upgrade and settings file can reside. This setup adds security over another alternative.

You also have a variety of optional capabilities to restrict or remove how crucial network information is displayed or used. These capabilities are covered in more detail in
Chapter 5: Server Administration.

• Support signaling channel encryption while registering, and when registered, with appropriately administered Avaya Media Servers.

NOTE: Signaling and audio are not encrypted when unnamed registration is effective.

• Restricting the response of the 9600 Series IP Telephones to SNMP queries to only IP addresses on a list you specify.
• Specifying an SNMP community string for all SNMP messages the telephone sends.
• Restricting dialpad access to Local Administration Procedures, such as specifying IP addresses, with a password.
• Removing dialpad access to most Local Administration Procedures.
• Restricting the end user’s ability to use a telephone Options application to view network data.