CounterPath Bria Professional 2.5 Administrator Guide - Manual (Page 28)

CounterPath Corporation
24
3.8 SIP Account Properties – Security
You can set up Bria Professional for the type of security (encryption) you want for incoming and outgoing calls.
Bria Professional supports:
• Signaling encryption using TLS
• Media encryption using SRTP.
Setting up for Security outside of Bria Professional
When using TLS, you must have the root certificate that signs the proxy's chain of certificates. In most cases,
the root certification will already be installed. Procedures for the exchange of certificates are outside the scope
of this documentation. The certificates must be stored on the Bria Professional computer, in the root certificate
store.
Setting up the root certificate on your computer ensures that the connection to the proxy is TLS secure (the first
hop). Any proxy in the chain (between you and the caller) that does not support TLS may cause an insecure link
Table 7: SIP Account Properties – Security
Field Description
Signaling Transport • Automatic: Bria Professional sets up the transport based on the capabilities of the
network and the Bria Professional computer. Choose this option if you do not care which
transport is used.
• TCP: This transport provides no signaling security.
• UDP: This transport provides no signaling security.
• TLS: Choose this option to request signaling encryption or both signaling and media
encryption.
Media Encryption See Table 8 on page 25.
The factory setting is Make unencrypted calls, accept all calls.