Secure and Non-Secure Flows in the Same Realm

To simplify deployments, the E-SBC allows secure and non-secure flows in the same realm.This broadened set of capabilities means the E-SBC can support RTP and SRTP flows, and it can support a larger group of UAs that might have varying SRTP abilities. Prior to this release, when a cryptographic session arrived at the E-SBC and failed to match an applicable media security profile, it was rejected.

This broadened support for secure and non-secure flows and for UAs with various SRTP abilities is established throughout the OS, residing in these configurations:

• media-sec-policy
• sdes-profile

While configurations reside there, you should also note special considerations for the security-policy configuration and implications for security associations.