T46S SSL

[Mycal]

(11-29-2017 07:10 AM)Kevin_Yealink Wrote:  

(11-28-2017 06:58 PM)Mycal Wrote:  We cannot due to the structure and architecture of our network auto provision the phones. Is there any way to make this change other than auto provisioning?

(11-16-2017 06:56 AM)Kevin_Yealink Wrote:  

(11-15-2017 06:16 PM)Mycal Wrote:  Hey all,

Does anyone happen to know if there is a setting or firmware update that disables SSL v2 v3 and DES and IDEA ciphers for this model phone? They are showing up on vulnerability scans.

Thank you,

Hi

We support to disable it. Please kindly Auto provision the phone with below parameter:
sip.tls_cipher_list = AES:!ADH:!LOW:!EXPORT:!NULL
security.tls_cipher_list = AES:!ADH:!LOW:!EXPORT:!NULL

Let me know if any update.

BR
Kevin

Hi

This method only can configure via AutoP. AutoP is easy for you and you just need to set up a small HTTP server in your personal computer.
I attached provision cfg file and guide for how to provision with HFS tool.
Please kindly test in your side.


Best Regards
Kevin

Hey Kevin,

As I previously stated auto provisioning will not work given our architecture we do not have these phones on a local subnet and in certain cases we do not have access to the phones at all. Is there a way to manually import said config file? Will this config file remove the manually configured settings on the phones? If so will we need to generate a config file for each phone specifically?

Thank you,