Disable SSL / TLS

[jakes]

Hello all.
We have T48S, CP860 & CP960's. Is there a way to disable SSL 2.0 & 3.0 on these phones? Can it be done through provisioning?

Any insight would be helpful. See attached network security scan results to one of our phones.

Thank you.

[Mamoulian]

I had a similiar situation. In my case it help that I added this line to the CFG-Config

sip.tls_cipher_list = AES:!ADH:!LOW:!EXPORT:!NULL
security.tls_cipher_list = AES:!ADH:!LOW:!EXPORT:!NULL
static.security.default_ssl_method = 5


Parameter static.security.default_ssl_method <y0000000000xx>.cfg
Description It configures the TLS version the IP phone uses to authenticate with the server.
Permitted
Values
0-TLS 1.0 only
3-SSL V23 (automatic negotiation with the server. The phone starts with TLS1.2 for negotiation.)
4-TLS 1.1 only
5-TLS 1.2 only
Default 3