VCS Expressway security

[Steve Deslandes]

One of my customers is concerned with Security for his VCS Expressway and would like to know if there is a document available from Cisco that I could forward him to address some of his concerns. Is there such a document out there?

[Tomonori Taniguchi]

VCS is with Linux as base operation system and running Cisco VCS operation application on it.

Unnecessary feature codes has removed from kernel level to improve robustness and proactively working with 3rd party and partners to review security concerning.

You may find more information from https://www.icsalabs.com/product/video-communication-server as additional reference information.

- Cisco Video Communication Server Certification Report:

     https://www.icsalabs.com/sites/default/files/CTXX-CISCOXXXXX-2011-1005-01_0.pdf

- Cisco Video Communication Server Certification Summary:

     https://www.icsalabs.com/sites/default/files/CTXX-CISCOXXXXX-2011-1005-01-S_0.pdf

[Tomonori Taniguchi]

As additional security improvement, plan to support basic firewall capability as embedded feature from next software release.

This feature allow configuring allow and deny rule based on IP address, port ranges/service and protocol.

So for example, customer may add firewall rule for define which PC (network) allow to access Web GUI (common access control feature on firewall router/switch) or/and ssh remote access.

[s7pizzi]

Hi Tomonori,

This additional security improvement will be in release 7.2?

thanks

Sent from Cisco Technical Support iPad App

[Tomonori Taniguchi]

Yes, plan to be supported from X7.2 software release.