Configuring Encryption Settings For Svc Calls - Polycom RealPresence Group 550 Administrator's Manual

Administrator's Guide for the Polycom RealPresence Group Series
To enable encryption:
1 Do one of the following:
 In the local interface, go to Settings > Administration > Security > Settings.
 In the web interface, go to Admin Settings > Security > Global Security > Encryption.
2 Configure these settings.
Setting
Require AES Encryption for
Calls
Require
FIPS 140 Cryptography
(web interface only)

Configuring Encryption Settings for SVC Calls

You must complete two quick tasks to enable encryption for SVC calls:
● Set the transport protocol.
● Set AES encryption.
To set the transport protocol:
1 In the web interface, go to Admin Settings > Network > IP Network.
2 Click SIP to expand the section.
3 In the Transport Protocol list, select TLS.
4 Click Save.
To set AES encryption:
1 In the web interface, go to Admin Settings > Security > Global Security.
2 Click Encryption to expand the section.
Polycom, Inc.
Description
Specifies how to encrypt calls with other sites that support AES encryption.
• Off — AES encryption is disabled.
• When Available — AES encryption is used in calls with systems that
support it. Calls without encryption are allowed when connecting to
systems that don't support it. For multipoint calls, this means that some
systems might be connected with AES encryption while others are
connected without it.
• Required for Video Calls Only — AES encryption is used in all video
calls. Calls with systems that do not support it are disconnected. Audio
calls using an attached SoundStation IP 7000 are allowed to connect.
• Required for All Calls — AES encryption is used in all calls. Calls with
systems that do not support it are disconnected. Audio calls using an
attached SoundStation IP 7000 are not allowed to connect, since these
calls are not encrypted.
Enables the exclusive use of the FIPS 140-2-validated software cryptography
module for cryptographic functions. Also disables all "weak" protocols and
ciphers, including:
• SSLv2
• SSLv3
• Non-FIPS 140-2 approved TLS cipher suites
Security
116