Limit Cisco Expressway Access

[Joel Jackson]

Is there a way to limit what users are allowed to register via Expressway? Currently as it stands, anyone who has valid AD creds in our domain could take a phone home or install the jabber app and get phone (CUCM, Unity), and IM services.

[Jaime Valencia · Accepted solution]

That would require CUCM 12.x+ and it also needs a version of Jabber that has yet to be released.

https://www.cisco.com/c/en/us/td/docs/voice_ip_comm/cucm/rel_notes/12_0_1/cucm_b_release-notes-for-cucm-imp-1201/cucm_b_release-notes-for-cucm-imp-1201_chapter_00.html#reference_63D95D7B21BED927157EEBCB42D815A2

[Joel Jackson]

Thanks! One more question. The document you linked seems to mention only Jabber clients via MRA. Do you know if these user policies can be used against users with physical phones registering via MRA too?

[Jaime Valencia]

Doesn't seem like it, they're tagged as Jabber policies, it's certainly a lot harder for someone to just get their hands on a phone which they can use via MRA, or to walk out of the office with their phone and then use it.