Sure, you could fence them off if creating an isolated or appropriately gapped network is in your wheelhouse. Since the devices are usually used with pass through, they’re potentially exposed to some issues regardless of how well you try and secure the address space of the phones.
In my case I ran into issues with 79x1 series devices exposed to either some type of traffic or too high of a volume, which caused the phones to become unusable. It is not fixed and never will be as there is no longer support. If that were to happen to someone else, it becomes I think a problem to try and patch around phones where cabling isn’t present, replace devices rapidly, etc.
But, yes absolutely you could bolt a 7940 to the wall on a private network by itself with the PC Port off, only allowed to speak to the UCM and maybe relayed to gateways or other devices, and then it could be okay.
Best,
Adam
From: cisco-voip <cisco-voip-bounces@puck.nether.net> On Behalf Of James Buchanan
Sent: Thursday, September 24, 2020 10:39 AM
To: James Andrewartha <jandrewartha@ccgs.wa.edu.au>
Cc: voyp list, cisco-voip (cisco-voip@puck.nether.net) <cisco-voip@puck.nether.net>
Subject: Re: [cisco-voip] Deprecated phones in CUCM 14
Hello,
I know the security argument is valid in some respects. But, if I have an insecure IoT device on the network, like a temperature control system, I don't have the option of replacing it. So, I ring fence it. I isolate it so that it can't be exploited, etc. Maybe I'm missing something, but isn't that what we can do to workaround the security issues?
Thanks,
James
On Thu, Sep 24, 2020 at 3:36 PM James Andrewartha <jandrewartha@ccgs.wa.edu.au<mailto:jandrewartha@ccgs.wa.edu.au>> wrote:
We’re still running 10 year old 79x5s (despite their cold boot RAM failure issue) and won’t be replacing them until next year at the earliest, I think most organisations would want to sweat at least 10 years out of their handsets. I mean what features does an 8800 have over an old 7940 if all you want is dialtone? Yes security etc, but why pay for new handsets when you get nothing for it? Plus I bet COVID is making business reconsider upgrading handsets in empty offices.
--
James Andrewartha
Network & Projects Engineer
Christ Church Grammar School
Claremont, Western Australia
Ph. (08) 9442 1757
Mob. 0424 160 877
From: cisco-voip <cisco-voip-bounces@puck.nether.net<mailto:cisco-voip-bounces@puck.nether.net>> On Behalf Of Anthony Holloway
Sent: Thursday, 24 September 2020 10:30 PM
To: Lelio Fulgenzi <lelio@uoguelph.ca<mailto:lelio@uoguelph.ca>>
Cc: voyp list, cisco-voip (cisco-voip@puck.nether.net<mailto:cisco-voip@puck.nether.net>) <cisco-voip@puck.nether.net<mailto:cisco-voip@puck.nether.net>>
Subject: Re: [cisco-voip] Deprecated phones in CUCM 14
This statement from the link is interesting to me:
"...opportunity to move to newer phone models and clients at a pace that is reasonable."
* 8800 series was released 8 years ago
* 7940's have been end of support since 5 years ago
On Thu, Sep 24, 2020 at 8:20 AM Lelio Fulgenzi <lelio@uoguelph.ca<mailto:lelio@uoguelph.ca>> wrote:
Yeah, there was some talk about this in the forums. Someone from Cisco said, “watch the page for some changes we think you’ll like”.
Wish they would update the “updated” date.
Lelio
From: cisco-voip <cisco-voip-bounces@puck.nether.net<mailto:cisco-voip-bounces@puck.nether.net>> On Behalf Of James Buchanan
Sent: Thursday, September 24, 2020 7:49 AM
To: voyp list, cisco-voip (cisco-voip@puck.nether.net<mailto:cisco-voip@puck.nether.net>) <cisco-voip@puck.nether.net<mailto:cisco-voip@puck.nether.net>>
Subject: [cisco-voip] Deprecated phones in CUCM 14
CAUTION: This email originated from outside of the University of Guelph. Do not click links or open attachments unless you recognize the sender and know the content is safe. If in doubt, forward suspicious emails to IThelp@uoguelph.ca<mailto:IThelp@uoguelph.ca>
Hello,
So, Cisco changed their mind for now:
https://www.cisco.com/c/en/us/td/docs/voice_ip_comm/cucm/trouble/14_0_1/fieldNotices/cucm_b_deprecated-phones-14.html Thanks,
James
_______________________________________________
cisco-voip mailing list
cisco-voip@puck.nether.net<mailto:cisco-voip@puck.nether.net>
https://puck.nether.net/mailman/listinfo/cisco-voip _______________________________________________
cisco-voip mailing list
cisco-voip@puck.nether.net<mailto:cisco-voip@puck.nether.net>
https://puck.nether.net/mailman/listinfo/cisco-voip