[cisco-voip] Deprecated phones in CUCM 14

[Pawlowski, Adam]

Sure, you could fence them off if creating an isolated or appropriately gapped network is in your wheelhouse. Since the devices are usually used with pass through, they’re potentially exposed to some issues regardless of how well you try and secure the address space of the phones.

In my case I ran into issues with 79x1 series devices exposed to either some type of traffic or too high of a volume, which caused the phones to become unusable. It is not fixed and never will be as there is no longer support. If that were to happen to someone else, it becomes I think a problem to try and patch around phones where cabling isn’t present, replace devices rapidly, etc.

But, yes absolutely you could bolt a 7940 to the wall on a private network by itself with the PC Port off, only allowed to speak to the UCM and maybe relayed to gateways or other devices, and then it could be okay.

Best,

Adam

From: cisco-voip <cisco-voip-bounces at puck.nether.net> On Behalf Of James Buchanan
Sent: Thursday, September 24, 2020 10:39 AM
To: James Andrewartha <jandrewartha at ccgs.wa.edu.au>
Cc: voyp list, cisco-voip (cisco-voip at puck.nether.net) <cisco-voip at puck.nether.net>
Subject: Re: [cisco-voip] Deprecated phones in CUCM 14

Hello,

I know the security argument is valid in some respects. But, if I have an insecure IoT device on the network, like a temperature control system, I don't have the option of replacing it. So, I ring fence it. I isolate it so that it can't be exploited, etc. Maybe I'm missing something, but isn't that what we can do to workaround the security issues?

Thanks,

James

On Thu, Sep 24, 2020 at 3:36 PM James Andrewartha <jandrewartha at ccgs.wa.edu.au<mailto:jandrewartha at ccgs.wa.edu.au>> wrote:
We’re still running 10 year old 79x5s (despite their cold boot RAM failure issue) and won’t be replacing them until next year at the earliest, I think most organisations would want to sweat at least 10 years out of their handsets. I mean what features does an 8800 have over an old 7940 if all you want is dialtone? Yes security etc, but why pay for new handsets when you get nothing for it? Plus I bet COVID is making business reconsider upgrading handsets in empty offices.

--
James Andrewartha
Network & Projects Engineer
Christ Church Grammar School
Claremont, Western Australia
Ph. (08) 9442 1757
Mob. 0424 160 877

From: cisco-voip <cisco-voip-bounces at puck.nether.net<mailto:cisco-voip-bounces at puck.nether.net>> On Behalf Of Anthony Holloway
Sent: Thursday, 24 September 2020 10:30 PM
To: Lelio Fulgenzi <lelio at uoguelph.ca<mailto:lelio at uoguelph.ca>>
Cc: voyp list, cisco-voip (cisco-voip at puck.nether.net<mailto:cisco-voip at puck.nether.net>) <cisco-voip at puck.nether.net<mailto:cisco-voip at puck.nether.net>>
Subject: Re: [cisco-voip] Deprecated phones in CUCM 14

This statement from the link is interesting to me:

"...opportunity to move to newer phone models and clients at a pace that is reasonable."


  *   8800 series was released 8 years ago
  *   7940's have been end of support since 5 years ago

On Thu, Sep 24, 2020 at 8:20 AM Lelio Fulgenzi <lelio at uoguelph.ca<mailto:lelio at uoguelph.ca>> wrote:
Yeah, there was some talk about this in the forums. Someone from Cisco said, “watch the page for some changes we think you’ll like”.

Wish they would update the “updated” date.

Lelio


From: cisco-voip <cisco-voip-bounces at puck.nether.net<mailto:cisco-voip-bounces at puck.nether.net>> On Behalf Of James Buchanan
Sent: Thursday, September 24, 2020 7:49 AM
To: voyp list, cisco-voip (cisco-voip at puck.nether.net<mailto:cisco-voip at puck.nether.net>) <cisco-voip at puck.nether.net<mailto:cisco-voip at puck.nether.net>>
Subject: [cisco-voip] Deprecated phones in CUCM 14

CAUTION: This email originated from outside of the University of Guelph. Do not click links or open attachments unless you recognize the sender and know the content is safe. If in doubt, forward suspicious emails to IThelp at uoguelph.ca<mailto:IThelp at uoguelph.ca>

Hello,

So, Cisco changed their mind for now:

https://www.cisco.com/c/en/us/td/docs/voice_ip_comm/cucm/trouble/14_0_1/fieldNotices/cucm_b_deprecated-phones-14.html

Thanks,

James
_______________________________________________
cisco-voip mailing list
cisco-voip at puck.nether.net<mailto:cisco-voip at puck.nether.net>
https://puck.nether.net/mailman/listinfo/cisco-voip
_______________________________________________
cisco-voip mailing list
cisco-voip at puck.nether.net<mailto:cisco-voip at puck.nether.net>
https://puck.nether.net/mailman/listinfo/cisco-voip
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://puck.nether.net/pipermail/cisco-voip/attachments/20200924/aa7883d0/attachment.htm>