Firmware management policy for VoIP devices

Regarding the firmware versions installed on mobile devices, SBK uses two approaches:

1- For devices that SBK sells, has sold in the past, or whose popularity (quantity) among our customers justifies managing them (notably Polycom and Yealink):

• SBK manages the versions via an automated update system.
• SBK selects and thoroughly tests the version to be deployed.
• SBK coordinates with manufacturers to correct any failures during the device's lifecycle support period. Note that SBK assumes no liability if an update causes permanent damage to a device due to a deficiency in the firmware or device.
• SBK implements configurations that harden the devices' security posture, such as disabling the web interface.
• If a new version is released, SBK assesses the update's impact on profits. This may explain why some devices are not running the latest version. (For example, if the device has significant malfunctions and the fixes are not applicable to our configuration.)
• When a device reaches end-of-life with the manufacturer, SBK strives to maintain the device's security and functionality for as long as possible. However, it is the customer's responsibility to initiate a replacement if they have any concerns about the device's security or operation.

2- For devices from a brand or series that SBK does not sell:

• Firmware management is generally not performed by SBK, and the device remains on the version it had when it was added to the platform. It is the customer's responsibility to ensure the device's firmware is updated and, in some cases, its configuration.
• SBK is nonetheless making a reasonable effort to implement a secure configuration, insofar as the device offers centralized configuration management supported by our platform, and the security settings are provided by the device.
• If SBK becomes aware that a firmware version contains a major security vulnerability, or that older versions are incompatible with the SBK Voice platform, and if it is possible for us to obtain and deploy a suitable firmware version, we will do so on a "best effort" basis.

In any case, if the customer desires a specific version to be deployed to their devices, they implicitly absolve SBK of all responsibility for any issues caused by this update and may even be required to deploy the update themselves. 

Why isn't my SBK-managed device running the latest firmware version?

For one or more of the following reasons:

• Your device's hardware does not meet the manufacturer's requirements to run the latest versions.
• Recent firmware versions have software flaws deemed unacceptable.
• Recent firmware versions have compatibility issues with the SBK Voice platform.
• Recent firmware versions cause significant slowdowns, making the device inefficient to use.
• The bugs and/or security vulnerabilities fixed by newer versions do not affect your device, given the default configuration choices made by SBK. (For example, disabling the device's web interface.)
• The bugs fixed by newer versions have minimal impact on your device, and this impact does not justify the risk of upgrading.
• SBK simply hasn't had time to fully test and apply the update to all devices yet.