T46S SSL

[Kevin_Yealink]

(11-28-2017 06:58 PM)Mycal Wrote:  We cannot due to the structure and architecture of our network auto provision the phones. Is there any way to make this change other than auto provisioning?

(11-16-2017 06:56 AM)Kevin_Yealink Wrote:  

(11-15-2017 06:16 PM)Mycal Wrote:  Hey all,

Does anyone happen to know if there is a setting or firmware update that disables SSL v2 v3 and DES and IDEA ciphers for this model phone? They are showing up on vulnerability scans.

Thank you,

Hi

We support to disable it. Please kindly Auto provision the phone with below parameter:
sip.tls_cipher_list = AES:!ADH:!LOW:!EXPORT:!NULL
security.tls_cipher_list = AES:!ADH:!LOW:!EXPORT:!NULL

Let me know if any update.

BR
Kevin

Hi

This method only can configure via AutoP. AutoP is easy for you and you just need to set up a small HTTP server in your personal computer.
I attached provision cfg file and guide for how to provision with HFS tool.
Please kindly test in your side.


Best Regards
Kevin