Help teleworkers and cisco jabber mobile users work more effectively on their device of. Therefore, we can say that the cisco expressway solution is architecture that includes vcs expressway, but it is not vcs expressway alone indeed. The terms and conditions provided govern your use of that software. A vulnerability in the cluster database cdb management component of cisco expressway series software, cisco telepresence video communication server vcs software, and cisco telepresence conductor software could allow an authenticated, remote attacker to cause the cdb process on an affected system to restart unexpectedly, resulting in a temporary denial of service dos condition.
The c60ex90etc devices that run the tc series software are linux based you can check this if you look in the logs when logged in as root ie, on a tc7. Cisco expressway offers users outside your firewall simple, highly secure access to all collaboration workloads, including video, voice, content, im, and presence. This vulnerability affects cisco expressway series software and cisco telepresence video communication server vcs software. The vcs video communication server server is an appliance that comes in two flavours the vcs expressway and vcs control, commonly know as the vcse and vcsc. For cisco expressway series and cisco telepresence vcs, cisco fixed this vulnerability in releases x12. Data sheets 3 endoflife and endofsale notices 6 design. Collaborate with people who are on thirdparty systems and endpoints or in other companies. Getting a new cisco expressway release key youtube. Cisco telepresence video communication server expressway. Cisco expressway series some links below may open a new browser. They are often used together to provide a firewall traversal solution for traditional videoconferencing h. Cisco telepresence video communication server vcs models in this series.
Vulnerability in gnu glibc affecting cisco products. Hi all, our customers are reporting more and more hack attempts on their vcs expressways, untill now unsuccessfull. Share software upgrade procedure for vcs and expressway on facebook. Access product specifications, documents, downloads. Backup and restore procedure for vcs and expressway cisco. Software multitenancy with organizations and crosssite management cisco tech talk. Cisco expresswayedge is another name for vcsexpressway. But to be on the extra safe side i would like to check every installation if its still secure.
If the cisco vcs expressway is in the dmz, the outside ip address of the cisco vcs expressway must be a public ip address, or if static nat mode is enabled, the static nat address must be publicly accessible. For information about affected software releases, consult. There is a license file actually changes the title to say expresswaye when it is loaded. Unified communications cisco expressway series cisco. Through this video, ill show you how to upgrade vcs server, this procedure works for vcsc, vcse, expc and expe. A vulnerability in the received packet parser of cisco expressway series and cisco telepresence video communication server vcs software could allow an unauthenticated, remote attacker to cause a reload of the affected system, resulting in a denial of service dos condition. Supported versions of expressway for cisco webex hybrid. Cisco telepresence video communication server expressway cisco. Cisco telepresence video communication server expressway facilitates secure businesstobusiness telepresence and video communications. Cisco expressway series install and upgrade guides cisco. In each guide, follow the steps in register expresswayc connector hosts to the cisco webex cloud. Cisco unified communication manager integration with cisco telepresence vcs duration.
Telepresence video communication server expressway. This video demostrates how to install a cisco expressway or vcs vm using esxi. I came across this bit of text, cisco expressway series virtual application software is available at no additional charge to customers who have a license and valid support contract for cisco unified communications manager 9. A vulnerability in the cisco telepresence video communication server expressway vcs could allow an unauthenticated, remote attacker to execute a man in the middle mitm attack between one or more affected devices. Integrated systems documentation 1 licensing information 45 release notes 47 data sheets and. Integrated systems documentation 1 licensing information 45 release notes 47 data sheets and literature.
A vulnerability in the cluster database cdb management component of cisco expressway series software and cisco telepresence video communication server vcs software could allow an authenticated, remote attacker to cause the cdb process on an affected system to restart unexpectedly, resulting in a temporary denial of service dos condition. View and download cisco telepresence administrators manual online. Learn more about software support service for unified communications and then choose. Some links below may open a new browser window to display the document you selected. Cisco software is not sold, but is licensed to the registered end user. Learn more about cisco enterprise agreement for collaboration suite offerings and download the activation guide to get everything you need to know to get started. Cisco expressway series and telepresence video communication server crosssite scripting vulnerability 28oct2019. For information about affected software releases, consult the cisco bug ids at the top of this advisory. Secure rtp between cucm and vcs or expressway configuration example. Covenes mark turpin demonstrates how you can obtain a release key from the cisco licensing portal using your expressway virtual serial number, and. Cisco expressway series and telepresence vcs denial of. Cisco expressway series some links below may open a new browser window to display the document you selected. Collaboration edge mobile and remote access endpoint setup collaboration 11.
This video will explain the process of upgrading the cisco vcs and expressway. The vulnerability is due to insufficient size validation of usersupplied data. Cisco expressway series and cisco telepresence video communication server vcs include a version of the linux kernel that is affected by the tcp reassembly denial of service vulnerability identified by the following common vulnerability and exposures cve id. This diagram and following table apply specifically to cisco vcs deployments. Software image for expressway with encryption, version x8. They apply only to the cisco expressway series product expressway. See the cisco vcsexpressway cluster creation and maintenance deployment guide. Licensing information 35 release notes 35 data sheets and literature.
Software upgrade procedure for vcs and expressway cisco. Cisco expressway ip port usage configuration guide h. Cisco expressway series and cisco telepresence video. Cisco expressway on virtual machine installation guide x8. This software version is provided for the vcs for maintenance and bug fixing purposes only. The vulnerability is due to the use of the same default ssl certificate across all vcs expressway devices. Cisco expressway virtual machine deployment in this short video the handson stepbystep deployment of the cisco expressway version 8. Expresswayedge is a vcsexpressway that is deployed as a mobile and remote access proxy only. You can use this information to prepare an expresswaybased h. Check cisco price cisco global price list tool cisco router, switch, firewall, wireless ap, ip phone price list. Get a smart account for your organization or initiate it for someone else. The information in this document is based on these software versions. Cisco telepresence administrators manual pdf download.
Cisco telepresence video communication server vcs and expressway software before x8. Understanding and deploying cisco expressway mra jabber vpn less solution. A vulnerability in the webbased management interface of cisco expressway series and cisco telepresence video communication server vcs could allow an unauthenticated, remote attacker to conduct a crosssite scripting xss attack against a user of the webbased management interface of an affected system. Cisco expressway series and cisco telepresence video communication server denial of service vulnerability 03may2019.
Access product specifications, documents, downloads, visio stencils. This video will explain the process for properly backing up and restoring configurations for cisco vcs and expressway. This vulnerability affects cisco expressway series and cisco telepresence video communication server vcs. Cisco telepresence video communication server vcs cisco. Cisco expressway on virtual machine installation guide. Expresswaye and expresswayc are free for existing customers who own uclenhanced, cuwlstd, or cuwlpro licenses and have a current ucss subscription and accompanying esw contract. To provide this architecture, cisco will use vcs expressway solution as far as i know to allow registration from internet, that is why we have the name cisco expressway. Cisco expressway virtual machine deployment youtube.
Cisco telepresence video communication server vcs x8. Hi im new to cisco expressway solution, in the cisco site there is only one downloadable file with version x8. Login to check if you have access or click ok to go to the latest release version. See the deployment guides for calendar, call, message, and serviceability for how to register your expressway securely to the cloud, so that the expressway can host hybrid connector software. Cisco uac standardadvanced cisco expressway series server licensing cisco soft clients. Suite provisioning extension with cisco vcs deployment guide 1. How to get expresswayc and e licenses cisco collab. Video communication server expressway telepresence video communication server model. How to check the linux version of the cisco vcsexpressway.
1106 307 1350 1149 877 730 396 421 1451 802 414 178 414 1103 1275 783 908 1252 1049 904 471 731 905 425 762 857 1004 147 764 514 305 1130 41 179 1149 1177 507 715