• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 827
  • Last Modified:

Voip voicemail passwords cisco IP phones

Can I ask - how could/would you go about auditing your entire IP phone estate for weak corresponding voicemail passwords, the phones are predominantly cisco IP phones many of which are 7791 .

Are the passwords encrypted in some sort of central database? Or how does an admin reset the password on behalf of a user? Also any way to identify which of the devices are voicemail enabled, and which arent? I assume there must be some sort of central asset mgmt app for voip phones?
0
pma111
Asked:
pma111
  • 6
  • 5
1 Solution
 
Ken BooneNetwork ConsultantCommented:
So first you need to idenfity what the the voicemail system is.  Are you using unity, unity connection or some other 3rd party voicemail system?
0
 
pma111Author Commented:
Will check, was just asking in general terms really, would the vm password be in some central place/database for the above systems you mention? What are the most common vm systems based on the model of device mentioned, or isnt there really a common tool....
0
 
Ken BooneNetwork ConsultantCommented:
Well you said you have cisco phones but thats it... There are too many assumptions behind that.  If you are using Unity or Unity Connection then yes the VM passwords are stored on the vm servers.  Depending on the version of the VM software, you might be able to change the policy to enforce strict passwords.  And yes you would use the management software for the VM server to do all of these things.
0
Ultimate Tool Kit for Technology Solution Provider

Broken down into practical pointers and step-by-step instructions, the IT Service Excellence Tool Kit delivers expert advice for technology solution providers. Get your free copy now.

 
pma111Author Commented:
On the assumption its Unity or Unity Connection

>>then yes the VM passwords are stored on the vm servers

In a database of sorts? or any specific format/file? Not plain text i hope?!
0
 
Ken BooneNetwork ConsultantCommented:
Yea it would be in a database, but you would go through a GUI to make any changes.
0
 
pma111Author Commented:
As a general rule are voicemail systems and config databases hosted internally to the company (that owns the cisco phones), or externally hosted? Do they have to be internally hosted?
0
 
pma111Author Commented:
Its unity we use
0
 
Ken BooneNetwork ConsultantCommented:
So that is unity and not unity connection right?  Also what version of unity are you using?
0
 
pma111Author Commented:
Just unity not unity connection, will get version
0
 
pma111Author Commented:
v7.1
0
 
Ken BooneNetwork ConsultantCommented:
Here is a link to a document that will give you the information you need:
http://www.cisco.com/en/US/docs/voice_ip_comm/unity/5x/administration/guide/ex/5xcusagex.html

I know it says version 5.x but they did not upgrade this doc for 7.x as it still applied.

This link shows you specifically about the security stuff with Unity.  Here is the part that deals with the passwords:
http://www.cisco.com/en/US/docs/voice_ip_comm/unity/5x/security/guide/ex/5xcusec090e.html
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Free Tool: IP Lookup

Get more info about an IP address or domain name, such as organization, abuse contacts and geolocation.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

  • 6
  • 5
Tackle projects and never again get stuck behind a technical roadblock.
Join Now