Phone security profiles allow us to group security-related settings for a phone type and protocol that we can then assign to a device. The device will then be required to enforce those settings.
To configure a phone security profile, perform the following:
First navigate to the phone security profile page (System | Security | Phone Security Profile).
Click on Add New.
From the Product Type drop-down, select the appropriate device type.
Click on Next.
Select the appropriate protocol from the drop-down.
Click on Next.
Specify a Name.
From the Device Security Mode drop-down, select the desired mode.
If desired, check TFTP Encrypted Config.
Specify the Authentication Mode.
If desired, change the Key Size:
For SIP devices:
Specify the Transport Type.
If desired, check Enable Digest Authentication.
If using digest authentication and if desired, check Exclude Digest Credentials in Configuration File.
If necessary, change the SIP Phone Port.
Click on Save.