Cisco TelePresence Administrator's Manual page 309

You can now configure CRL distribution points and schedule the VCS to perform automatic CRL updates.
This ensures the latest CRLs are available for certificate validation. Previously CRL updates had to be
uploaded manually.
Cisco AM GW available on VCS Expressway
Cisco AM GW features are now available on both VCS Control and VCS Expressway platforms.
Movi ClearPath provisioning
The Cisco VCS Starter Pack now supports the provisioning of ClearPath to Movi.
Improved cluster set-up process
The process for setting-up a cluster has been simplified such that the replication of configuration and FindMe
information is set up automatically when a new peer is added into a cluster via the web interface.
Presence configuration
The Subscription expiration time and Publication expiration time settings can no longer be configured
on the Presence page. They can still be modified via the CLI.
X6
Enhanced authentication policy
Authentication policy can now be applied at the zone and subzone levels. It controls how the VCS
authenticates incoming messages from that zone or subzone and whether those messages are rejected or
are subsequently treated as authenticated or unauthenticated within the VCS.
This provides increased flexibility and allows system administrators to:
control registrations via subzones; this allows, if required, a combination of authenticated and
n
unauthenticated endpoints to register to the same VCS
limit the services available to unregistered or unauthenticated endpoints and devices
n
cater for endpoints from third-party suppliers that do not support authentication within their registration
n
mechanism through a "treat as authenticated" setting
External policy services
The VCS can be configured to use external policy services to manage its registration and call policies.
This is particularly suitable for large-scale deployments where policy decisions can be managed through an
external, centralized service rather than by configuring policy rules on the VCS itself.
Secure communication between cluster peers
The VCS uses IPsec (Internet Protocol Security) to enable secure communication between each cluster
peer. Authentication is carried out through the use of a pre-shared access key (configured on the
page).
View registrations and calls across a cluster
You can now view all of the registrations and calls across a cluster from any one of the peers in the cluster. A
Peer column on the registrations and calls status pages identifies the relevant peer.
Client-initiated connection management
Cisco VCS Administrator Guide (X7.1)
Reference material
Clustering
Page 309 of 479