SIP Security on AWC / Mitel 3300

[jdfoxmicro]

Hello,

With AWC 3.8 connecting to a Mitel 3300 ICP, there is no way to enter a SIP password for it to use when registering with the ICP. The documentation for configuring AWC simply describes creating new generic IP devices on the ICP and then entering those extension numbers into the AWC for it to register, and doesn't mention passwords or any suggestions about how to secure the system from someone registering his own device on those extensions.

My ICP is behind a firewall and port 5060 is not accessible via the Internet, but it still seems strange that the option to password-protect a SIP registration isn't there.

Anyone have any comments on this?

Jeffrey Fox

[johnp]

Current AWC is in the v6.3 range, I know you can assign a password in this version

[jdfoxmicro]

Interesting. Well, the point of my post was to learn whether there was something about SIP security strategy I was missing from people who have more practical experience dealing with this. If passwords were added in later versions, then it seems like this was an oversight in version 3.8.  But, it doesn't seem like SIP security was that unsophisticated as late as 2010?

Looking forward to any additional thoughts.

[acejavelin]

AWC Ports are registered inside the firewall and are completely within the internal LAN, and since they would not be connected/authorized through an MBG, they are relatively safe.

And I can attest that for at least the last 3-4 years (could be longer, but I have not really done AWC prior to that), a password is required for AWC ports.

[johnp]

I would really matter if you had internal hackers, IMHO

[jdfoxmicro]

Thanks everyone.