Cisco ASA 5505 Configuration Manual page 975

Chapter 44 Configuring the TLS Proxy for Encrypted Voice Inspection
proxy, the CTL file must contain the certificate that the security appliance creates for the Cisco UCMs.
To proxy calls on behalf of the Cisco IP Phone, the security appliance presents a certificate that the Cisco
UCM can verify, which is a Local Dynamic Certificate for the phone, issued by the certificate authority
on the security appliance.
TLS proxy is supported by the Cisco Unified CallManager Release 5.1 and later. You should be familiar
with the security features of the Cisco UCM. For background and detailed description of Cisco UCM
security, see the Cisco Unified CallManager document:
http://www.cisco.com/univercd/cc/td/doc/product/voice/c_callmg/5_0/sec_vir/ae/sec504/index.htm
TLS proxy applies to the encryption layer and must be configured with an application layer protocol
inspection. You should be familiar with the inspection features on the adaptive security appliance,
especially Skinny and SIP inspection.
Licensing for the TLS Proxy
The TLS proxy for encrypted voice inspection feature supported by the adaptive security appliance
require a Unified Communications Proxy license.
The following table shows the Unified Communications Proxy license details by platform:
Model License Requirement
ASA 5505 Base License and Security Plus License: 2 sessions
Optional license: 24 sessions.
ASA 5510 Base License and Security Plus License: 2 sessions
Optional licenses: 24, 50, or 100 sessions.
ASA 5520 Base License: 2 sessions
Optional licenses: 24, 50, 100, 250, 500, 750, or 1000 sessions.
ASA 5540 Base License: 2 sessions
Optional licenses: 24, 50, 100, 250, 500, 750, 1000, or 2000 sessions.
ASA 5550 Base License: 2 sessions
Optional licenses: 24, 50, 100, 250, 500, 750, 1000, 2000, or 3000 sessions.
ASA 5580 Base License: 2 sessions
Optional licenses: 24, 50, 100, 250, 500, 750, 1000, 2000, 3000, 5000, or 10,000 sessions.
OL-20339-01
1
.
1
.
1
.
1
.
Cisco ASA 5500 Series Configuration Guide using ASDM
Licensing for the TLS Proxy
1
.
1
.
2
44-3