Restrict IP Phone Service access to Cisco IP Phone Only

Version 1
    This document was generated from CDN thread

    Created by: Mayank Sharma on 29-10-2009 02:17:05 PM
    Is there a way to restrict an IP Phone Service to be accessed from an IP Phone only? I do not want users to be able to get to the service from a desktop browser.
     
    I thought of getting the browser type in my code but it returns "Unknown" when the service is requested from an IP Phone.
     
    Thanks,
    Max

    Subject: RE: Restrict IP Phone Service access to Cisco IP Phone Only
    Replied by: Mayank Sharma on 29-10-2009 02:28:39 PM
    I found out that if the service is requested from a Cisco IP Phone, the user agent would be "Allegro-Software-WebClient".
     
    Will that always be the case because I can use that information to restrict access, or please let me know if there's a better solution.
     
    Thanks,
    Max

    Subject: RE: Restrict IP Phone Service access to Cisco IP Phone Only
    Replied by: David Staudt on 29-10-2009 03:41:40 PM
    I'm not sure you can count on the user-agent, as it may change depending on the HTTP stack incorporated into various models.
     
    Also available and probably more reliable are the x-CiscoIPPhone* headers, like x-CiscoIPPhoneModelName.

    Subject: RE: Restrict IP Phone Service access to Cisco IP Phone Only
    Replied by: Mayank Sharma on 29-10-2009 05:11:49 PM
    Thanks for the tip David. So if I use this method, I would need to know all the models and keep a track of when the new models are available, right?

    Subject: RE: Restrict IP Phone Service access to Cisco IP Phone Only
    Replied by: Mayank Sharma on 29-10-2009 06:35:57 PM
    Good one David.
     
    Thanks very much,
    Max

    Subject: RE: Restrict IP Phone Service access to Cisco IP Phone Only
    Replied by: David Staudt on 29-10-2009 05:51:32 PM
    I guess just the presence of the header, regardless of the value, would indicate it's a Cisco phone..?