Konftel 300IP Installation Manual page 23

SETTINGS
 Even if Transport is set to TLS or SIPS, the Konftel 300IP still accepts incoming UDP
or TCP signalling.
On phone: MENU > SETTINGS > ADVANCED > (PIN) > ACCOUNTS > TRANSPORT (6,2,1,3).
TLS Settings
If you select TLS or SIPS under the transport setting, this additional setting appears on
the page.
It may be possible to use secure communication without a certificate and make changes
to these settings. In some cases, if you choose TLS or SIPS, the SIP server requires a
certificate for user/client verification. This should be specified in the account information.
Youcan further increase security by requiring verification of the server, or the client when
the Konftel 300IP acts as a server for incoming calls.
Method
Negotiation timeout
Verify client
SIPS (Secure SIP) is a security measure that uses TLS to provide
an encrypted end-to-end channel for the SIP messages. To use
SIPS, however, both VoIP devices and the SIP server must support
it.
The TLS includes a variety of security measures. The methods are
defined in the versions of the standard (SSL, SSL v2, SSL v3, TLS
v1, TLS v2). The default method is SSLv23, which accepts both
SSL v2 and v3.
The TLS settings are negotiated during a call setup (both incoming
and outgoing). If this negotiation does not succeed within the
specified time (seconds) the negotiation is aborted. Timeout is
disabled with 0 (zero).
When set to On, the Konftel 300IP will activate peer verification
for incoming secure SIP connections (TLS or SIPS).
21