T46S SSL

[Mycal]

Are there any additional lines of code or perhaps a firmware update that could remediate this finding?

[Kevin_Yealink]

(12-05-2017 06:38 PM)Mycal Wrote:  Are there any additional lines of code or perhaps a firmware update that could remediate this finding?

Hi

So you already provision the with that 2 parameters, but it still can't test DES loophole?

Can you go to phone web interface, then go to Settings-> Configuration-> Export or Import Configuration, and please also send me your test/scan report.

May i know why you need block it? May i know how many phones in your side?
Best Regards,
Kevin

[jakes]

Hi Kevin.
We are running 3CX v15.5 latest service pack and templates. Phones are T48S firmware v66.83.0.20

Where in the 3CX auto template should these lines of code be added?
sip.tls_cipher_list = AES:!ADH:!LOW:!EXPORT:!NULL
security.tls_cipher_list = AES:!ADH:!LOW:!EXPORT:!NULL

Attached are a the results from a recent network security scan on one of our T48S.

Thank you.