Securing the System
Topics:
• Set the Encryption Mode
• Configure the Firewall/NAT
• Port Usage
Your G200 system includes features and settings to help you meet security requirements.
Set the Encryption Mode
When you enable encryption, the system automatically encrypts AVC calls to other systems that have
AES encryption enabled.
If encryption is enabled on the system, a locked padlock icon appears on the monitor when a call is
encrypted. If a call is unencrypted, an unlocked padlock appears on the monitor.
Note: When the SVC call server supports encryption, the G200 system enables encryption for the audio
and video stream by default. SVC calls automatically enables encryption if all the involved
devices and servers support encryption.
Procedure
1. In the system web interface, go to System Settings > Call Settings.
2. Configure the following AVC Encryption Mode settings and select Submit.
• On: The SIP transport protocol setting in Server Settings is automatically set to TLS,
whether you automatically or manually provision the system.
• Off
• Auto: The G200 system negotiates the encrypted call with the far end and, if failed, falls
back to an unencrypted call.
Related Links
Configuring Call Settings on page 39
Configure the Firewall/NAT
You must configure the system and the firewall to allow video conferencing traffic to pass in and out of the
network.
If your system is connected to a LAN that uses a NAT, you must enter the NAT IP Address so that your
system can communicate outside the LAN.
Procedure
1. In the system web interface, go to Admin Settings > NAT Settings.
2. Configure the following settings and select Submit.
28