Avaya XT Series Deployment Manual page 252

Securing your XT Series
Table 62: Configuring settings for securing calls
Field Name
Accept protected calls
Enable Encryption
Enable Encryption MCU
Unprotected calls
Length of AES Key
Minimum Key Size for DH
SIP Propriety Encryption
Audio Alert
4. From the web interface only, select Save.
5. Access the IP settings. From the XT Series web interface, select Administrator
Settings > Calls > Preferences > IP. From the endpoint's main menu, select Configure >
Advanced > Calls > Preferences > IP.
6. Set RTP Firewall to Yes to check the source of the received audio video and presentation
(RTP packets) to verify it matches the remote endpoint's IP address.
August 2020
Description
If encryption is enabled, the system automatically encrypts incoming calls and
this field is read-only. If encryption is disabled, set to Yes to allow the system to
use encryption when receiving an encrypted call.
Select Yes to encrypt point to point calls.
Select Yes to encrypt videoconferences hosted on the local built-in MCU. If you
select Yes, the maximum number of video conference participants is reduced to
four.
Select the policy to apply when a remote endpoint does not support protected
calls:
• Show Status displays a small notification message on the GUI (bottom area);
the web interface shows that there are unprotected calls.
• Disconnect automatically disconnects the call.
• Ask Confirmation asks you if you want to have an unprotected call.
• Inform displays a warning message on the GUI; the web interface shows that
there are unprotected calls.
Information about the encryption status and algorithms used in each call is
displayed in the Statistics page (on the Endpoint and Web interface) and in the
call detail records.
You can select from:
• 128, 256 bits
• 128 bits
• 256 bits
Select the level for the minimum key size accepted for Diffie-Hellman encryption:
• Very High Security ensures that 2048 bits and upper key sizes are accepted.
• High Security ensures that 1024 bits and upper key sizes are accepted.
Select Yes to ensure that encryption is always used. When SIP Propriety
Encryption is disabled, SIP calls on XT Series terminals which do not support
TLS or on which TLS is not enabled, will not be encrypted.
Select Yes to enable an audio alert. When Audio Alert is disabled, participants
in a meeting are no longer alerted with an audio jingle regarding the encryption
status of the call or of the meeting.
Deployment Guide for Avaya XT Series
Comments on this document? infodev@avaya.com
252