CounterPath Bria 3.5 Administrator Guide - Manual (Page 40)

CounterPath Corporation
36
3.9 SIP Account Properties – Transport
You can set up Bria for the type of security (encryption) you want for incoming and outgoing calls.
Bria supports:
• Signaling encryption using TLS
• Media encryption using SRTP.
Setting up for Security outside of Bria
When using TLS, you must have the root certificate that signs the proxy's chain of certificates. In most cases,
the root certification will already be installed. Procedures for the exchange of certificates are outside the scope
of this documentation. The certificates must be stored on the Bria computer, in the root certificate store.
Setting up the root certificate on your computer ensures that the connection to the proxy is TLS secure (the first
hop). Any proxy in the chain (between you and the caller) that does not support TLS may cause an insecure link
in the chain. Therefore, if the other party is outside your domain, you cannot be completely sure that the call is
secured at the signaling level, which means that you cannot be sure that it is secured at the media level.
Table 8: SIP Account Properties – Security
Field Description
Signaling Transport • Automatic: Bria sets up the transport based on the capabilities of the network and the
Bria computer. Choose this option if you do not care which transport is used.
• TCP: This transport provides no signaling security.
• UDP: This transport provides no signaling security.
• TLS: Choose this option to request signaling encryption or both signaling and media
encryption.
Media Encryption over TLS See Table 9 on page 37.
The factory setting is Do not allow encrypted call.
Enable IPv6 Generally, leave this field enabled to allow Bria to use IPv6 for phone calls and IMs. You
may want to disable this field if you are currently upgrading your network to support IPv6,
and you do not want your users to interfere with your test plans.