BroadWorks voice platform

Security patching

From December 2022 to February 2024 (84 hours) I worked through the BroadWorks security patch programme.

• Patched all 10 production XSP servers, pair by pair, after patching pre-production first.
• Applied the fix for CVE-2016-2183 on the XSP tier.
• One pair needed a re-attempt, which was planned and completed as a follow-up change.

The path to R25

R25 was a staged programme, not a single night (108 hours, January 2024 to February 2026).

1. Added the dependent patches to pre-production first.
2. Patched the production profile servers and both application server clusters.
3. Upgraded the network servers to R25 in early 2026.

Media server upgrade

Tested and signed off the upgrade of the media servers to RI 2021.11 (31 hours), which fixed a call-control defect. Testing covered the conversational IVR, and the change carried a rollback path.

Keeping the platform healthy

• Application server licence updates and a patch for an abnormal call termination trap.
• Repaired replication on the messaging server pair by re-importing its database.
• Removed obsolete releases to free disk space, and updated routing tables on the application servers.
• Patched the UMS pair and rebooted media servers under planned changes.

Devices and clients

• Certified a DECT phone firmware through UAT, then rolled it out (2023).
• Ran UAT for the Webex desktop client (2021).
• Added a shared-line call reject feature for desk phones through planned changes (2021).

Stack