Cisco TelePresence Video Communication Server Administrator's Manual page 132

other groups of users.
If the directory service allows the call, any locally-defined Call Policy is then also applied. This
enables you to apply further controls in addition to those provided by the directory service. For
example, you can use local CPL to apply restrictions based on the source of incoming requests, or
whether a request is authenticated or not.
Policy service
The Policy service option is used if you want to refer all Call Policy decisions out to an external
service.
If you select this option an extra set of configuration fields appear so that you can specify the
connection details of the external policy service:
Field Description
Protocol The protocol used to connect to the policy
service.
Certificate Controls whether the certificate presented
verification by the policy service is verified when
mode connecting over HTTPS.
HTTPS Controls certificate revocation list checking
certificate of the certificate supplied by the policy
revocation service.
list (CRL)
When enabled, the server's X.509
checking
certificate is checked against the HTTPS
certificate revocation list.
Server The IP address or Fully Qualified Domain
address 1 - Name (FQDN) of the service.
3
Path The URL of the service.
Status path The path for obtaining the remote service
status.
Username The username used by the VCS to log in
and query the service.
Password The password used by the VCS to log in and
query the service.
The maximum plaintext length is 30
characters (which is subsequently
encrypted).
Cisco VCS Administrator Guide (X6.1)
Dial plan and call processing
Usage tips
The VCS automatically supports
HTTP to HTTPS redirection when
communicating with the policy service
server.
When enabled, the value specified in
the Server address field must be
contained within the server's X.509
certificate (in either the Subject
Common Name or the Subject
Alternative Name attributes).
Use the CRL management
configure how the VCS uploads CRL
files.
For resiliency, up to three server
addresses can be supplied.
page to
Page 132 of 401