Sure, you could fence them off if creating an isolated or appropriately gapped network is in your wheelhouse. Since the devices are usually used with pass through, they’re potentially exposed to some issues regardless of how well you try and secure the address space of the phones.
In my case I ran into issues with 79x1 series devices exposed to either some type of traffic or too high of a volume, which caused the phones to become unusable. It is not fixed and never will be as there is no longer support. If that were to happen to someone else, it becomes I think a problem to try and patch around phones where cabling isn’t present, replace devices rapidly, etc. But, yes absolutely you could bolt a 7940 to the wall on a private network by itself with the PC Port off, only allowed to speak to the UCM and maybe relayed to gateways or other devices, and then it could be okay. Best, Adam From: cisco-voip <cisco-voip-boun...@puck.nether.net> On Behalf Of James Buchanan Sent: Thursday, September 24, 2020 10:39 AM To: James Andrewartha <jandrewar...@ccgs.wa.edu.au> Cc: voyp list, cisco-voip (cisco-voip@puck.nether.net) <cisco-voip@puck.nether.net> Subject: Re: [cisco-voip] Deprecated phones in CUCM 14 Hello, I know the security argument is valid in some respects. But, if I have an insecure IoT device on the network, like a temperature control system, I don't have the option of replacing it. So, I ring fence it. I isolate it so that it can't be exploited, etc. Maybe I'm missing something, but isn't that what we can do to workaround the security issues? Thanks, James On Thu, Sep 24, 2020 at 3:36 PM James Andrewartha <jandrewar...@ccgs.wa.edu.au<mailto:jandrewar...@ccgs.wa.edu.au>> wrote: We’re still running 10 year old 79x5s (despite their cold boot RAM failure issue) and won’t be replacing them until next year at the earliest, I think most organisations would want to sweat at least 10 years out of their handsets. I mean what features does an 8800 have over an old 7940 if all you want is dialtone? Yes security etc, but why pay for new handsets when you get nothing for it? Plus I bet COVID is making business reconsider upgrading handsets in empty offices. -- James Andrewartha Network & Projects Engineer Christ Church Grammar School Claremont, Western Australia Ph. (08) 9442 1757 Mob. 0424 160 877 From: cisco-voip <cisco-voip-boun...@puck.nether.net<mailto:cisco-voip-boun...@puck.nether.net>> On Behalf Of Anthony Holloway Sent: Thursday, 24 September 2020 10:30 PM To: Lelio Fulgenzi <le...@uoguelph.ca<mailto:le...@uoguelph.ca>> Cc: voyp list, cisco-voip (cisco-voip@puck.nether.net<mailto:cisco-voip@puck.nether.net>) <cisco-voip@puck.nether.net<mailto:cisco-voip@puck.nether.net>> Subject: Re: [cisco-voip] Deprecated phones in CUCM 14 This statement from the link is interesting to me: "...opportunity to move to newer phone models and clients at a pace that is reasonable." * 8800 series was released 8 years ago * 7940's have been end of support since 5 years ago On Thu, Sep 24, 2020 at 8:20 AM Lelio Fulgenzi <le...@uoguelph.ca<mailto:le...@uoguelph.ca>> wrote: Yeah, there was some talk about this in the forums. Someone from Cisco said, “watch the page for some changes we think you’ll like”. Wish they would update the “updated” date. Lelio From: cisco-voip <cisco-voip-boun...@puck.nether.net<mailto:cisco-voip-boun...@puck.nether.net>> On Behalf Of James Buchanan Sent: Thursday, September 24, 2020 7:49 AM To: voyp list, cisco-voip (cisco-voip@puck.nether.net<mailto:cisco-voip@puck.nether.net>) <cisco-voip@puck.nether.net<mailto:cisco-voip@puck.nether.net>> Subject: [cisco-voip] Deprecated phones in CUCM 14 CAUTION: This email originated from outside of the University of Guelph. Do not click links or open attachments unless you recognize the sender and know the content is safe. If in doubt, forward suspicious emails to ith...@uoguelph.ca<mailto:ith...@uoguelph.ca> Hello, So, Cisco changed their mind for now: https://www.cisco.com/c/en/us/td/docs/voice_ip_comm/cucm/trouble/14_0_1/fieldNotices/cucm_b_deprecated-phones-14.html Thanks, James _______________________________________________ cisco-voip mailing list cisco-voip@puck.nether.net<mailto:cisco-voip@puck.nether.net> https://puck.nether.net/mailman/listinfo/cisco-voip _______________________________________________ cisco-voip mailing list cisco-voip@puck.nether.net<mailto:cisco-voip@puck.nether.net> https://puck.nether.net/mailman/listinfo/cisco-voip
_______________________________________________ cisco-voip mailing list cisco-voip@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-voip
