Hello,
My mustomer has made a Pentest with its UC equipements and has noticed CUCM still accept connections with SSL2 and 3 encryptions and has requested to disable these encryptions methods. For now, nothing is encrypted with this customer (IP phones, trunks,...), then I think it's better to set hightest security encryption method before switching IP phones and SIP trunks with encrypted security profiles.
I have made some searches and it's true that in the "HTTPS Ciphers" field under Enterprise parameters, there is no choice that exclude SSL incoming connections. According to the TLS 1.2 Compatibility Matrix from Cisco, I have understood if I set the minimum TLS version to 1.2, SSL and TLS1.0/1.1 should be disabled as well, but it looks TLS1.2 is not fully compatible with CUCM 11.5 SU2.
Do you know witch features are not compatible with TLS1.2 with CUCM 11.5 SU2 ??
What's the risk to set the minimum TLS version to 1.2 with this CUCM version ?
Thanks
