Hi! I've found that on the Fa0/1 (WAN) address are opened port 2002, 4002, 6002 (eventually 9002 but now I don't remember) which are DIRECT telnet to the CUE!

For security reasons you may wish to disable the PC port on an IP phone and the Settings button.

A good example of this would be a lobby phone where we don't want the visitors to be able to discover any properties of our network. As a default on CME and the UC500 depressing the settings button gives access to DHCP info and connecting a PC to the PC port on the back of a phone may give access to your data network.  You may not want this behavior for some phones.

To accomplish this we need to use an ephone template an example follows: