41-3
Cisco ASA 5500 Series Configuration Guide using ASDM
OL-20339-01
Chapter 41 Information About Cisco Unified Communications Proxy Features
TLS Proxy Applications in Cisco Unified Communications
There are three components to a Cisco Intercompany Media Engine deployment within an enterprise: a
Cisco Intercompany Media Engine server, a call agent (the Cisco Unified Communications Manager)
and an adaptive security appliance running the Cisco Intercompany Media Engine Proxy.
The adaptive security appliance provides perimeter security by encrypting signaling connections
between enterprises and preventing unathorized calls. An adaptive security appliance running the Cisco
Intercompany Media Engine Proxy can either be deployed as an Internet firewall or be designated as a
Cisco Intercompany Media Engine Proxy and placed in the DMZ, off the path of the regular Internet
traffic.
TLS Proxy Applications in Cisco Unified Communications
Table 41-1 shows the Cisco Unified Communications applications that utilize the TLS proxy on the
adaptive security appliance.
The adaptive security appliance supports TLS proxy for various voice applications. For the phone proxy,
the TLS proxy running on the adaptive security appliance has the following key features:
• The adaptive security appliance forces remote IP phones connecting to the phone proxy through the
Internet to be in secured mode even when the Cisco UCM cluster is in non-secure mode.
• The TLS proxy is implemented on the adaptive security appliance to intercept the TLS signaling
from IP phones.
Table 41-1 TLS Proxy Applications and the Security Appliance
Application TLS Client TLS Server
Client
Authentication
Security
Appliance
Server Role
Security
Appliance
Client Role
Phone Proxy
and TLS Proxy
IP phone Cisco UCM Yes Proxy
certificate,
self-signed or
by internal CA
Local dynamic
certificate
signed by the
adaptive
security
appliance CA
(might not need
certificate for
phone proxy
application)
Mobility Proxy Cisco UMC Cisco UMA No Using the
Cisco UMA
private key or
certificate
impersonation
Any static
configured
certificate
Presence
Federation
Proxy
Cisco UP or
MS LCS/OCS
Cisco UP or
MS LCS/OCS
Yes P roxy
certificate,
self-signed or
by internal CA
Using the
Cisco UP
private key or
certificate
impersonation
To Next Page
Loading...
Need help?
General
