Hi,
The headers x-CiscoIPPhoneModelName, x-CiscoIPPhoneDisplay and x-CiscoIPPhoneSDKVersion are present in the HTTP request from the phone when used by for example an XML application or a PSK but not for the HTTP request done for Profile_Rule. On the SPA50x-series it's present in all cases. This is tested on a SPA525G2 with firmware version 7.4.6.
Thanks!