How to protect the security on OS level of cucm

[yuexp0929]

Hello 

      The security department asked install the anti-virus software on OS level of CUCM.  I told them that CUCM is a customized application,so customer isn't allowed to install third-party anti-virus.  The security department ask me provide a document from Cisco. 

       Do you know where I can find the document?

[Mike_Brezicky · Accepted solution]

CUCM is a closed Linux (Redhat, or 12.x - CentOS) build. I always considered it a virtual appliance, much like many other vendors with proprietary software installed. Most if not all of them dont follow a traditional OS / Anti Virus configuration.

They of course heavily follow any known vulnerabilities from PSIRT and any Security Advisories.

You can look over the Security documentation here - (version 11.5)
https://www.cisco.com/c/en/us/td/docs/voice_ip_comm/cucm/security/11_5_1/secugd/CUCM_BK_SEE2CFE1_00_cucm-security-guide-1151.html

[yuexp0929]

Thanks for your answer!

[Jaime Valencia]

You can reach out to your SE and he should be able to provide you with something from the BU on that.