[YMCS/YDMP Free Trial Program]Yealink would like to offer Free Trial Program of Yealink device management service for our current eligible customers. You can see the details below.
https://www.yealink.com/ydmp-freetrial-2020


Post Reply 
 
Thread Rating:
  • 0 Votes - 0 Average
  • 1
  • 2
  • 3
  • 4
  • 5
Disable TLS 1.0 and less secure Cipher Suites
Author Message
complex1 Offline
3CX Adv. Cert. Engineer
*****

Posts: 970
Joined: Jan 2014
Reputation: 25
Post: #2
RE: Disable TLS 1.0 and less secure Cipher Suites
(10-06-2019 01:26 PM)esachs4 Wrote:  A client of ours recently had a penetration test done and they found multiple vulnerabilities on the phone system.

I was wondering if there was a way to force TLS 1.1 and 1.2 and disable less secure cipher suites.

Please see attached

Hi,

It depend which firmware version the devices are running...
In firmware update x.81.0.70 is added two new supported TLS versions: TLS 1.1 and TLS 1.2
You can configure the TLS version the IP phone uses to negotiate with the provisioning server when using TLS transport method to download the boot file and configuration files from the provisioning server.

The parameter in the auto provision template is as follows: security.default_ssl_method =

It configure the TLS version the IP phone uses to negotiate with the provisioning server when using TLS transport method to download the boot file and configuration files from the provisioning server.
0-use TLS 1.0 to negotiate with the provisioning server.
3-use TLS 1.2 to negotiate with the provisioning server, and it is backward compatible. (Default)
4-use TLS 1.1 to negotiate with the provisioning server.
5-use TLS 1.2 to negotiate with the provisioning server.

Hope this will help.

Best regards,
Frank.

Dutch is my native language, not English. Apologies for my imperfect grammar.
Please do not send unsolicited PM messages. I will not answer them.
10-07-2019 10:38 AM
Find all posts by this user    like0    dislike0 Quote this message in a reply
Post Reply 


Messages In This Thread
RE: Disable TLS 1.0 and less secure Cipher Suites - complex1 - 10-07-2019 10:38 AM

Possibly Related Threads...
Thread: Author Replies: Views: Last Post
  Disable Speakerphone key? lruiz@connexum.com 4 5,827 12-11-2019 03:55 PM
Last Post: Yisroel_MongoTEL
  Blacklist disable dbusacca 4 6,323 07-04-2018 02:21 PM
Last Post: stan0ne
  Yealink secure certificates and disabling ciphers Scot E. 1 2,728 12-29-2017 03:40 AM
Last Post: Lucia_Yealink
  Disable full-screen display on T48S when other extensions are being called TStaudte 0 2,125 07-21-2017 05:08 AM
Last Post: TStaudte
  Disable Basic Settings MichaelY 1 4,184 05-07-2016 06:25 AM
Last Post: Karl_Yealink
  Disable call forwarding feature. TruckingExp 3 6,261 08-14-2015 04:19 AM
Last Post: Karl_Yealink
  Secure Yealink - stability? blind_oracle 5 6,327 06-10-2015 04:14 AM
Last Post: Flora_Yealink
  T2XXP - Disable Button jason.luka 1 3,844 08-14-2014 05:33 PM
Last Post: Yealink Support
  Disable Call Rejection nicknomo 5 9,533 06-25-2014 10:21 AM
Last Post: Yealink Support
  Disable Audio Alert for BLF Pickup using Provision File callworth 1 6,808 12-13-2012 05:27 PM
Last Post: Flora_Yealink

Forum Jump:


User(s) browsing this thread: 1 Guest(s)

Contact Us   Yealink   Return to Top   Return to Content   Lite (Archive) Mode   RSS Syndication