Voip security encryption

[omahrez]

Hi,

It seems like the Cisco voip solution supports the voice encryption via SRTP protocol.

At this point, this solution has never been deployed in the Canadian market. I asked Cisco Canada (Montreal), they said that no Canadian client has deployed such solution.

I HAVE 3 QUESTIONS:

1- If you have heard about any Canadian company or government that have deployed this solution, please let me know.

2- I am wondering if any Cisco client has deployed this solution? if so, what about passive listening in Call Centers? How Can a Call Center manager listen to an encrypted conversation?

3- I've heard about eVoip (asctelecom.com) solution that records encrypted conversations, Has this product been approved by Cisco?

thanks.

Heloma.

[Cedric Van Labeke · Accepted solution]

Hi Heloma,

There are many customers around the globe using the security features in CUCM for both authentication and encryption.

Please refer to your CUCM's security guide.

Here's the one for 7.1(2) explaining how media encryption is being achieved:

http://www.cisco.com/en/US/docs/voice_ip_comm/cucm/security/7_1_2/secugd/secuview.html#wp1039127

Silently listening along is in most deployments done by conferencing/barging in on the call. This also works:

http://www.cisco.com/en/US/docs/voice_ip_comm/cucm/security/7_1_2/secugd/secuconf.html#wpxref84137

See if reading this document helps you understanding how everything works. If you're worried about how it all works, I can assure that after you have read this guide, and you have a played a bit with in a lab, you will find it quite easy to understand.

Your account team should be able to help you out with this too, even if they state that no customer in Canada has deployed this. They and ASCTelecom are the ones that should be able to confirm you if the solution is Cisco Certified or not.

Hope this helps!

/Cedric

[gogasca · Accepted solution]

For question 1, I suggest going to your Cisco AM, as we dont want to make public that information.

For question 2, Nice, Witness, Verint, KnoahSof, eTalk, and many others can record sRTP
calls using R/SPAN today.
Question 3.

I have seen this integration working via SIP  with CUCM 7.1X and Evoip 8.0, it required some changes at Evoip side, you may contact them directly for questions about the CUCM version support, as they are the best contact to know which are latest versions they have tested.

cisco@asctelecomuk.com

http://www.cisco.com/web/partners/sell/industry/ispn/industry_companies/asc.html

[omahrez]

Thank you guys,

Well, my client doesn't want to be the first Canadian cobail of this technology, even if it is required for a secure and confidential communication.

Our Cisco account team said that no Canadian client has deployed encryption with voip... I am curious, how these guys could confirm such thing, I worked for Cisco between 2003 and 2005, and I remember at that time at Cisco Montreal,  it was impossible to check information regarding  other Cisco clients (i.e  Toronto or Vancouver ).

All I need is a simple example (deployment success story) in order to help my client make a right decision, which is voice encryption.

thank you again.

heloma.