Receiving Answer SDP

When the Oracle® Enterprise Session Border Controller receives answer SDP with the accepted session parameter, the value for the same session parameters that the Oracle® Enterprise Session Border Controller uses might or might not be the same as the incoming value. Configuration of the outbound media security profile controls the value used because the Oracle® Enterprise Session Border Controller makes offer SDP, which cannot be changed, with the session parameters based on the outgoing media security profile.

Consider this example: An SDES profile is applied for incoming direction for a media security policy configured with the srtcp-encrypt value set to enabled, so the cryptographic attributes in the SDP the Oracle® Enterprise Session Border Controller sends do not have the UNENCRYPTED_SRTCP session parameters. If the UNENCRYPTED_SRTCP appears in the corresponding answer SDP it receives, the Oracle® Enterprise Session Border Controller accepts it if the srtcp-encrypt value appears in the use-ingress-session-params parameter. But the Oracle® Enterprise Session Border Controller still performs SRTCP encryption. When the call connects, the Oracle® Enterprise Session Border Controller encrypts outgoing SRTCP packets but does not decrypt incoming SRTCP packets. So if the UA (receiving the Oracle® Enterprise Session Border Controller’s offer SDP) does not support SRTCP decryption, it will likely reject the offer SDP.