Kuteteza Kugwirizana pakati pa Cisco Unity
Connection, Cisco Unified Communications
Woyang'anira, ndi Mafoni a IP
• Kuteteza Kulumikizana Pakati pa Cisco Unity Connection, Cisco Unified Communications Manager, ndi IP Phones, patsamba 1
Kuteteza Kulumikizana pakati pa Cisco Unity Connection, Cisco Unified Communications Manager, ndi Mafoni a IP
Mawu Oyamba
M'mutuwu, mupeza kufotokozera zachitetezo chomwe chingakhalepo zokhudzana ndi kulumikizana pakati pa Cisco Unity Connection, Cisco Unified Communications Manager, ndi mafoni a IP; chidziwitso pazochitika zilizonse zomwe muyenera kuchita; malingaliro omwe amakuthandizani kupanga zisankho; kukambirana za zisankho zomwe mumapanga; ndi machitidwe abwino.
Nkhani Zachitetezo Zolumikizana Pakati pa Unity Connection, Cisco Unified Communications Manager, ndi Mafoni a IP
Zomwe zitha kukhala pachiwopsezo cha Cisco Unity Connection system ndi kulumikizana pakati pa madoko a Unity Connection amawu (pophatikiza SCCP) kapena magulu adoko (pakuphatikiza kwa SIP), Cisco Unified Communications Manager, ndi mafoni a IP.
Ziwopsezo zotheka ndi izi:
- Kuwukira kwapakati pa anthu (pamene chidziwitso chikuyenda pakati pa Cisco Unified CM ndi Unity Connection chikuwonetsedwa ndikusinthidwa)
- Kununkhiza kwa anthu pamanetiweki (pamene mapulogalamuwa amagwiritsidwa ntchito kujambula zokambirana za foni ndi zidziwitso zomwe zimayenda pakati pa Cisco Unified CM, Unity Connection, ndi mafoni a IP omwe amayendetsedwa ndi Cisco Unified CM)
- Kusintha kwa ma signing call pakati pa Unity Connection ndi Cisco Unified CM
- Kusintha kwamayendedwe atolankhani pakati pa Unity Connection ndi kumapeto (kwa mwachitsanzoample, foni ya IP kapena chipata)
- Kubedwa kwa Identity kwa Unity Connection (pamene chipangizo chosagwirizana ndi Unity Connection chimadziwonetsera kwa Cisco Unified CM ngati seva ya Unity Connection)
- Kubedwa kwa chidziwitso cha seva ya Cisco Unified CM (pamene seva yosakhala ya Cisco Unified CM imadziwonetsera ku Unity Connection ngati seva ya Cisco Unified CM)
CiscoUnifiedCommunicationsManagerSecurityMagawo aUnity Connection Mauthenga a Mawu
Cisco Unified CM imatha kuteteza kulumikizana ndi Unity Connection motsutsana ndi zowopseza zomwe zalembedwa mu Security Issues for Connection pakati pa Unity Connection, Cisco Unified Communications Manager, ndi IP Phones.
Zotetezedwa za Cisco Unified CM zomwe Unity Connection imatha kutenga patsogolotage of akufotokozedwa mu Table 1: Cisco Unified CM Security Features Yogwiritsidwa Ntchito ndi Cisco Unity Connection.
Gulu 1: Cisco Unified CM Security Features Yogwiritsidwa Ntchito ndi Cisco Unity Connection
| Chitetezo Mbali | Kufotokozera |
| Kutsimikizika kwa siginecha | Njira yomwe imagwiritsa ntchito protocol ya Transport Layer Security (TLS) kutsimikizira kuti palibe tampering yachitika pamapaketi osayina panthawi yopatsirana. Kutsimikizika kwa siginecha kumadalira kupanga kwa Cisco Certificate Trust List (CTL) file. Izi zimateteza ku: • Kuwukira kwa anthu omwe amasintha mayendedwe a chidziwitso pakati pa Cisco Unified CM ndi Unity Connection. • Kusintha kwa siginecha yoyimba. • Kubedwa kwa chidziwitso cha seva ya Unity Connection. • Kubedwa kwachinsinsi kwa seva ya Cisco Unified CM. |
| Kutsimikizika kwa chipangizo | Njira yomwe imatsimikizira chizindikiritso cha chipangizocho ndikuwonetsetsa kuti chinthucho ndi chomwe chimati ndi. Izi zimachitika pakati pa Cisco Unified CM ndi madoko a mauthenga a mawu a Unity Connection (kwa kuphatikizika kwa SCCP) kapena magulu adoko a Unity Connection (kuti agwirizane ndi SIP) pomwe chipangizo chilichonse chimalandira satifiketi ya chipangizo china. Ziphaso zikavomerezedwa, kulumikizana kotetezeka pakati pa zida kumakhazikitsidwa. Kutsimikizika kwa chipangizocho kumadalira kupangidwa kwa Cisco Certificate Trust List (CTL) file. Izi zimateteza ku: • Kuwukira kwa anthu omwe amasintha mayendedwe a chidziwitso pakati pa Cisco Unified CM ndi Unity Connection. • Kusintha kwa media mtsinje. • Kubedwa kwa chidziwitso cha seva ya Unity Connection. • Kubedwa kwachinsinsi kwa seva ya Cisco Unified CM. |
| Chizindikiro chachinsinsi | Njira yomwe imagwiritsa ntchito njira zachinsinsi pofuna kuteteza (kupyolera mwa kubisa) chinsinsi cha mauthenga onse owonetsera a SCCP kapena SIP omwe amatumizidwa pakati pa Unity Connection ndi Cisco Unified CM. Kubisala kwa siginecha kumatsimikizira kuti zidziwitso zokhudzana ndi maphwando, manambala a DTMF omwe amalowetsedwa ndi maphwando, kuyimba foni, makiyi obisala media, ndi zina zotero zimatetezedwa ku mwayi wosayembekezereka kapena wosaloledwa. Izi zimateteza ku: • Kuwukira kwapakati pa anthu omwe amawona kufalikira kwa chidziwitso pakati pa Cisco Unified CM ndi Unity Connection. • Kununkhiza kwa magalimoto pa netiweki komwe kumayang'ana chidziwitso chomwe chikuyenda pakati pa Cisco Unified CM ndi Unity Connection. |
| Media encryption | Njira yomwe chinsinsi cha media chimachitika pogwiritsa ntchito njira zachinsinsi. Njirayi imagwiritsa ntchito Secure Real Time Protocol (SRTP) monga momwe IETF RFC 3711 imafotokozera, ndikuwonetsetsa kuti wolandila yekhayo angatanthauzire zowulutsa pakati pa Unity Connection ndi pomaliza (kwa kale.ample, foni kapena chipata). Thandizo limaphatikizapo ma audio okha. Kubisa kwa Media kumaphatikizapo kupanga makiyi a Media Player pazida, kupereka makiyi a Unity Connection ndi mapeto, ndi kuteteza makiyi pamene makiyi ali paulendo. Unity Connection ndi mapeto amagwiritsa ntchito makiyiwo kubisa ndi kubisa mawu omvera. Izi zimateteza ku: • Kuwukira kwapakati pa anthu omwe amamvetsera zofalitsa zofalitsa pakati pa Cisco Unified CM ndi Unity Connection. • Kununkhiza kwa anthu pamanetiweki komwe kumamvetsera zokambirana za pafoni zomwe zimayenda pakati pa Cisco Unified CM, Unity Connection, ndi mafoni a IP omwe amayendetsedwa ndi Cisco Unified CM. |
Kutsimikizika ndi kubisa kwamasigino kumakhala ngati zofunikira zochepa pakubisa kwa media; ndiko kuti, ngati zida sizigwirizana ndi kubisa ndi kutsimikizika, kubisa kwa media sikungachitike.
Cisco Unified CM chitetezo (chitsimikiziro ndi kubisa) chimangoteteza mafoni ku Unity Connection. Mauthenga olembedwa pa sitolo ya mauthenga samatetezedwa ndi Cisco Unified CM kutsimikizika ndi mawonekedwe a encryption koma akhoza kutetezedwa ndi Unity Connection mauthenga otetezeka achinsinsi. Kuti mumve zambiri pazachitetezo cha Unity Connection, onani Kusamalira Mauthenga Olembedwa Mwachinsinsi komanso Otetezedwa.
Self-encrypting drive
Cisco Unity Connection imathandiziranso ma drive odzilemba okha (SED). Izi zimatchedwanso Full Disk Encryption (FDE). FDE ndi njira yachinsinsi yomwe imagwiritsidwa ntchito kubisa zonse zomwe zimapezeka pa hard drive.
Deta imaphatikizapo files, opareshoni ndi mapulogalamu mapulogalamu. Ma hardware omwe amapezeka pa disk amasunga deta yonse yomwe ikubwera ndikuchotsa deta yonse yotuluka. Pamene galimoto yatsekedwa, chinsinsi cha encryption chimapangidwa ndikusungidwa mkati. Deta yonse yomwe yasungidwa pagalimoto iyi imabisidwa pogwiritsa ntchito kiyiyo ndikusungidwa mu mawonekedwe obisika. FDE imakhala ndi ID yofunikira komanso kiyi yachitetezo.
Kuti mudziwe zambiri, onani https://www.cisco.com/c/en/us/td/docs/unified_computing/ucs/c/sw/gui/config/guide/2-0/b_Cisco_UCS_C-series_GUI_Configuration_Guide_201/b_Cisco_UCS_C-series_GUI_Configuration_Guide_201_chapter_010011.html#concept_E8C37FA4A71F4C8F8E1B9B94305AD844.
Zokonda pachitetezo cha Cisco Unified Communications Manager ndi Unity Kulumikizana
Cisco Unified Communications Manager ndi Cisco Unity Connection ali ndi njira zachitetezo zomwe zikuwonetsedwa mu Table 2: Zosankha zachitetezo chamtundu wa madoko amawu (zophatikizira za SCCP) kapena magulu adoko (pazophatikiza za SIP).
Chenjezo
Kukonzekera kwa Cluster Security Mode kwa madoko a mauthenga a mawu a Unity Connection (kwa kuphatikizika kwa SCCP) kapena magulu a doko (pazophatikizira za SIP) ziyenera kufananiza zokhazikitsira chitetezo cha madoko a Cisco Unified CM.
Kupanda kutero, Cisco Unified CM kutsimikizika ndi kubisa sikulephera.
Gulu 2: Zosankha Zachitetezo
| Kukhazikitsa | Zotsatira |
| Osatetezeka | Kukhulupirika ndi zinsinsi za mauthenga osayinira mafoni sizikutsimikiziridwa chifukwa mauthenga osayinira mafoni amatumizidwa ngati malemba omveka bwino (osabisika) olumikizidwa ku Cisco Unified CM kudzera padoko losavomerezeka m'malo mwa doko lovomerezeka la TLS. Kuphatikiza apo, media stream sangathe kubisidwa. |
| Chotsimikizika | Kukhulupirika kwa mauthenga osayina mafoni kumatsimikiziridwa chifukwa amalumikizidwa ndi Cisco Unified CM kudzera padoko lovomerezeka la TLS. Komabe, a chinsinsi cha mauthenga osayinira sichimatsimikizirika chifukwa amatumizidwa monga mawu omveka bwino (osabisika). Kuphatikiza apo, media streams si encrypted. |
| Zosungidwa | Umphumphu ndi zinsinsi za mauthenga oimba foni zimatsimikiziridwa chifukwa zimagwirizanitsidwa ndi Cisco Unified CM kudzera pa doko lovomerezeka la TLS, ndipo mauthenga owonetsera mafoni amasungidwa. Kuphatikiza apo, mtsinje wa media ukhoza kusungidwa. Mfundo zonse ziwiri ziyenera kulembedwa mu encrypted mode kuti media streamed kuti encrypted. Komabe, pamene mapeto amodzi akhazikitsidwa kuti akhale osatetezeka kapena ovomerezeka ndipo mapeto ena akhazikitsidwa kuti azitha kubisala, zofalitsa zofalitsa sizimasungidwa. Komanso, ngati chipangizo cholowera (monga transcoder kapena gateway) sichinatsegulidwe kubisa, kuwulutsa kwapa media sikunasinthidwe. |
Njira Zabwino Kwambiri Zotetezera Kulumikizana Pakati pa Unity Connection, Cisco Unified Communications Manager, ndi Mafoni a IP
Ngati mukufuna kuyatsa kutsimikizika ndi kubisa kwa madoko a mauthenga amawu pa onse Cisco Unity Connection ndi Cisco Unified Communications Manager, onani Cisco Unified Communications Manager SCCP Integration Guide for Unity Connection Release 12.x, yomwe ikupezeka pa
https://www.cisco.com/c/en/us/td/docs/voice_ip_comm/connection/12x/integration/guide/cucm_sccp/b_12xcucintcucmskinny.html
Kuteteza Kulumikizana pakati pa Cisco Unity Connection, Cisco Unified Communications Manager, ndi Mafoni a IP
Zolemba / Zothandizira
 |
CISCO Unity Connection Unified Communications Manager [pdf] Buku Logwiritsa Ntchito Unity Connection Unified Communications Manager, Connection Unified Communications Manager, Unified Communications Manager, Communications Manager, Manager |