Cisco TelePresence Video Communication Server Administrator's Manual page 72

Authentication Trust
policy
Check Off
credentials
On
Do not check Off
credentials
On
Cisco VCS Administrator Guide (X6.1)
In local domain
Messages are challenged for
authentication.
Messages that fail authentication are
rejected.
Messages that pass authentication
are classified as authenticated and a
P-Asserted-Identity header is inserted
into the message.
Messages with an existing P-
Asserted-Identity header are
classified as authenticated, without
further challenge. The P-Asserted-
Identity header is passed on
unchanged (keeping the originator's
asserted ID).
Messages without an existing P-
Asserted-Identity header are
challenged. If authentication passes,
the message is classified as
authenticated and a P-Asserted-
Identity header is inserted into the
message. If authentication fails, the
message is rejected.
Messages are not challenged for
authentication.
All messages are classified as
unauthenticated.
Any existing P-Asserted-Identity
headers are removed.
Messages are not challenged for
authentication.
Messages with an existing P-
Asserted-Identity header are
classified as authenticated, and the
header is passed on unchanged.
Messages without an existing P-
Asserted-Identity header are
classified as unauthenticated.
Device authentication
Outside local domain
Messages are not challenged for
authentication.
All messages are classified as
unauthenticated.
Any existing P-Asserted-Identity
headers are removed.
Messages are not challenged for
authentication.
Messages with an existing P-
Asserted-Identity header are
classified as authenticated, and the
header is passed on unchanged.
Messages without an existing P-
Asserted-Identity header are
classified as unauthenticated.
Messages are not challenged for
authentication.
All messages are classified as
unauthenticated.
Any existing P-Asserted-Identity
headers are removed.
Messages are not challenged for
authentication.
Messages with an existing P-
Asserted-Identity header are
classified as authenticated, and the
header is passed on unchanged.
Messages without an existing P-
Asserted-Identity header are
classified as unauthenticated.
Page 72 of 401