Table 62: Configuring settings for securing calls
Field Name Description
Accept protected calls If encryption is enabled, the system automatically encrypts incoming calls and
this field is read-only. If encryption is disabled, set to Yes to allow the system to
use encryption when receiving an encrypted call.
Enable Encryption Select Yes to encrypt point to point calls.
Enable Encryption MCU Select Yes to encrypt videoconferences hosted on the local built-in MCU. If you
select Yes, the maximum number of video conference participants is reduced to
four.
Unprotected calls Select the policy to apply when a remote endpoint does not support protected
calls:
• Show Status displays a small notification message on the GUI (bottom area);
the web interface shows that there are unprotected calls.
• Disconnect automatically disconnects the call.
• Ask Confirmation asks you if you want to have an unprotected call.
• Inform displays a warning message on the GUI; the web interface shows that
there are unprotected calls.
Information about the encryption status and algorithms used in each call is
displayed in the Statistics page (on the Endpoint and Web interface) and in the
call detail records.
Length of AES Key You can select from:
• 128, 256 bits
• 128 bits
• 256 bits
Minimum Key Size for DH Select the level for the minimum key size accepted for Diffie-Hellman encryption:
• Very High Security ensures that 2048 bits and upper key sizes are accepted.
• High Security ensures that 1024 bits and upper key sizes are accepted.
SIP Propriety Encryption Select Yes to ensure that encryption is always used. When SIP Propriety
Encryption is disabled, SIP calls on XT Series terminals which do not support
TLS or on which TLS is not enabled, will not be encrypted.
Audio Alert Select Yes to enable an audio alert. When Audio Alert is disabled, participants
in a meeting are no longer alerted with an audio jingle regarding the encryption
status of the call or of the meeting.
4. From the web interface only, select Save.
5. Access the IP settings. From the XT Series web interface, select Administrator
Settings > Calls > Preferences > IP. From the endpoint's main menu, select Configure >
Advanced > Calls > Preferences > IP.
6. Set RTP Firewall to Yes to check the source of the received audio video and presentation
(RTP packets) to verify it matches the remote endpoint's IP address.
Securing your XT Series
August 2020 Deployment Guide for Avaya XT Series 252
Comments on this document? infodev@avaya.com
To Next Page
Loading...
