Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
Created by: Janine Graves on 28-06-2013 09:19:44 AM Can anyone provide tips, best practices, links to documents regarding security and securing private data when using CVP, VXML Server, Reporting Server, Nuance ASR, UCCE? I'm sure some folks have already implemented the solution in secure environments. Right??? This is what I know can be done through Studio, I'm looking for more:1) Set 'Secure Logging' to True in the voice elements that collect input from callers.2) Ensure VXML Debug logs are turned off (duh!)3) Ensure that filters are set appropriately through the Ops Console so personal data is not sent to the Reporting Server4) PCI Compliance Link - http://www.cisco.com/en/US/netsol/ns625/index.html
Subject: RE: New Message from Janine Graves in Customer Voice Portal (CVP) - CVP - A Replied by: Hemal Mehta on 28-06-2013 01:55:58 PM One of the other challenges is securing data between gateway and CVP> When a user enters data on the phone the digits entered may not be secure. We have implemented vxml over https on port 7443. Also sometimes you need the data for debugging. However once the logs become old, you could go back and write a script to mask the data. Hemal
From: Cisco Developer Community Forums [mailto:[email protected]] Sent: Friday, June 28, 2013 9:20 AM To: [email protected] Subject: New Message from Janine Graves in Customer Voice Portal (CVP) - CVP - All Versions: CVP Security Tips
Janine Graves has created a new message in the forum "CVP - All Versions": -------------------------------------------------------------- Can anyone provide tips, best practices, links to documents regarding security and securing private data when using CVP, VXML Server, Reporting Server, Nuance ASR, UCCE? I'm sure some folks have already implemented the solution in secure environments. Right???
This is what I know can be done through Studio, I'm looking for more:1) Set 'Secure Logging' to True in the voice elements that collect input from callers.2) Ensure VXML Debug logs are turned off (duh!)3) Ensure that filters are set appropriately through the Ops Console so personal data is not sent to the Reporting Server4) PCI Compliance Link - http://www.cisco.com/en/US/netsol/ns625/index.html -- To respond to this post, please click the following link: http://developer.cisco.com/web/cvp/forums/-/message_boards/view_message/16697406 or simply reply to this email.
Subject: RE: CVP Security Tips Replied by: Koen Van Impe on 02-07-2013 06:17:45 AM Hi Janine,
There are different sides to adding security in a CVP deployment. Chapter 5 in the admin & config guide covers that. I'm currently working through the process of adding as much security as possible in my current project test environment, on version 9.0. What I'v done so far:
Securing communication between OpsConsole and other CVP components. That is explained in the admin & config guide, starting at page 181. I don't have CA signed certificates at this point, so I exchanged certificates amongst OpsConsole and all other components.
Restricting access to VXML Server: admin & config guide, page 191. On Tomcat level you can restrict access to the VXML Server to specific IP addresses (VXML gateways).
Use HTTPS on VXML Server: Had some issues there. Https doesn't seem to be activated on Tomcat initialy. The admin & config guide only mentions how to add a CA signed certificate for CallServer and VXML Server, but nothing about how to activate it. I had to go into server.xml and complete the connector for port 7443 (I took the secure OpsConsole config as an example). I think this might be a bug... Secondly, since I don't have CA signed certifs right now, I had to import the self-signed certificate on the VXML gateway (admin & config guide, p. 189).
That's all for now. It's a work in progress, I'll try to remember updating this thread when I have more info.
@Hemal, Did you have to do anything specific to make your vxml work over 7443?
Regards, Koen
Subject: RE: CVP Security Tips Replied by: Koen Van Impe on 04-07-2013 08:28:37 AM I found why CVP 9.0 is not running CallServer and VXML server secure at first. See my topic on the support forum. https://supportforums.cisco.com/message/3982071#3982071
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:
