Author Topic: SIP Security on AWC / Mitel 3300  (Read 1172 times)

Offline jdfoxmicro

  • Contributer
  • *
  • Posts: 25
  • Country: us
  • Karma: +0/-0
    • View Profile
    • J.D. Fox Micro
SIP Security on AWC / Mitel 3300
« on: August 03, 2017, 06:45:16 PM »
Hello,

With AWC 3.8 connecting to a Mitel 3300 ICP, there is no way to enter a SIP password for it to use when registering with the ICP. The documentation for configuring AWC simply describes creating new generic IP devices on the ICP and then entering those extension numbers into the AWC for it to register, and doesn't mention passwords or any suggestions about how to secure the system from someone registering his own device on those extensions.

My ICP is behind a firewall and port 5060 is not accessible via the Internet, but it still seems strange that the option to password-protect a SIP registration isn't there.

Anyone have any comments on this?

Jeffrey Fox



Offline johnp

  • Global Moderator
  • Hero Member
  • *****
  • Posts: 2201
  • Country: us
  • Karma: +66/-0
    • View Profile
Re: SIP Security on AWC / Mitel 3300
« Reply #1 on: August 03, 2017, 08:37:10 PM »
Current AWC is in the v6.3 range, I know you can assign a password in this version

Offline jdfoxmicro

  • Contributer
  • *
  • Posts: 25
  • Country: us
  • Karma: +0/-0
    • View Profile
    • J.D. Fox Micro
Re: SIP Security on AWC / Mitel 3300
« Reply #2 on: August 03, 2017, 09:09:04 PM »
Interesting. Well, the point of my post was to learn whether there was something about SIP security strategy I was missing from people who have more practical experience dealing with this. If passwords were added in later versions, then it seems like this was an oversight in version 3.8.  But, it doesn't seem like SIP security was that unsophisticated as late as 2010?

Looking forward to any additional thoughts.

Offline acejavelin

  • Global Moderator
  • Hero Member
  • *****
  • Posts: 4099
  • Country: us
  • Karma: +133/-0
  • High-tech, heavy metal redneck!
    • View Profile
    • Like what I do and wanna help out? Send me a donation!
Re: SIP Security on AWC / Mitel 3300
« Reply #3 on: August 03, 2017, 09:39:04 PM »
AWC Ports are registered inside the firewall and are completely within the internal LAN, and since they would not be connected/authorized through an MBG, they are relatively safe.

And I can attest that for at least the last 3-4 years (could be longer, but I have not really done AWC prior to that), a password is required for AWC ports.

Offline johnp

  • Global Moderator
  • Hero Member
  • *****
  • Posts: 2201
  • Country: us
  • Karma: +66/-0
    • View Profile
Re: SIP Security on AWC / Mitel 3300
« Reply #4 on: August 03, 2017, 10:12:59 PM »
I would really matter if you had internal hackers, IMHO

Offline jdfoxmicro

  • Contributer
  • *
  • Posts: 25
  • Country: us
  • Karma: +0/-0
    • View Profile
    • J.D. Fox Micro
Re: SIP Security on AWC / Mitel 3300
« Reply #5 on: August 04, 2017, 12:47:00 PM »
Thanks everyone.


 

Sitemap 1 2 3 4 5 6 7 8 9 10