How to secure a snom against Javascript attacks

Security is one of the most important topics that IT managers face today.

Security requires that the cooperation of the end-user. As the manufacturer can only offer devices with a standard password, end-user should put their own password on the device and this way secure the phones. The following instructions give you some safety tips.

Secure Version 7

Under “Advanced Settings” you are at the “Network” Tab, scroll down to HTTP.

 

- Set “Web server connection type” to https only (beware, that after saving your phone is only accessible over https).
- Set the “Auto Logout (min)” value to 1 min.
- Save

 

Click on the QoS/Security tab.

- Switch the “Administrator mode” to off.
- Set a secure “Administrator password”.
- Set at the HTTP Server “User” and “Password”.
- Save

Secure Version 6

Click on Advanced.

- Set at the HTTP Server “User” and “Password” (use a secure password)
- Set “Webserver connection type” to https only (beware, that after saving your phone is only accessible over https).
- Set the “Auto Logout (min)” value to 1 min.
- Switch the “Administrator mode” to OFF.
- Set a secure “Administrator password”.
- Save (by clicking on save).