Legacy Dev Forum Posts

 View Only

Sign Up

Back to discussions
Expand all | Collapse all

Secure SIP trunk with TLS but leave RTP Media unencrypted

  • 1.  Secure SIP trunk with TLS but leave RTP Media unencrypted

    Posted 06-05-2025 19:19

    patrik | 2018-08-02 14:59:35 UTC | #1

    Hi,

    We're trying to deploy secure SIP trunk for one of our Purecloud clients where the SIP communication will be encrypted using TLS (TCP), but RTP media we need to be unencrypted and can be send either via TCP or UDP.

    The problem we came across is that as soon as I select Trunk configuration > Protocol TLS it seems to enabled TLS for both SIP packets and RTM media packets. Both are being send via TCP as well.

    Is there a way to only enable TLS encryption for the SIP traffic and leave RTM media traffic unencrypted on SIP trunk?

    Thanks,

    Patrik

    tim.smith | 2018-08-02 13:25:06 UTC | #2

    This is a better question for the PureCloud Community or opening a case with PureCloud Care as your question is about base product configuration, not customization or API use.

    patrik | 2018-08-02 14:55:00 UTC | #3

    Hi Tim,

    Exactly my thoughts. I have th ecase open with PureCloud Care, but they have directed me to open the case with Developer forum for some reason, even though it's obviously configuration question about External Trunks.

    Thanks for your reply. I'll get back to Purecloud Care and count days wasted on not getting any useful response from the support care team...

    Patrik

    richard.neidermyer | 2018-08-08 19:52:01 UTC | #4

    Hi Patrik, I apologize for the runaround. As Tim mentioned the PureCloud Resource Center and PureCloud Care are good options for this type of question. But, I would be more than happy to provide the information here as well.

    PureCloud currently does not support split media and signaling concerning IP interfaces, as well for security as is the case with your question. Both features have been requested for enhancement and are being evaluated for consideration. Being able to provide non-encrypted RTP with TLS is actively being reviewed by our development group.

    If possible please follow up with a Product Management or Sales representative to give another thumbs up for your request. Note that I have also taken in this information and provided it to our Product Management team.

    Thank You

    system | 2018-09-08 19:52:01 UTC | #5

    This topic was automatically closed 31 days after the last reply. New replies are no longer allowed.

    This post was migrated from the old Developer Forum.

    ref: 3312



Related Content