Expressway-E server and Secure H323

[HARIS_HUSSAIN]

We have enabled H323 Protocol on Expressway and are concern about security of encrypting the same over TLS of using h235.

Does Expressway supports the same? Any Thoughts

[Patrick Sparkman]

Expressway supports encryption for both H323 and SIP, as along as both endpoints in the call support it, the call will be encrypted.

[Elias Sevilla Duarte]

When Expressway does IWF (Interworking Function) from SIP to H323, the Expressway is able to pass the capabilities (video, audio, encryption, etc) from H323 format to SIP format, and if encryption is required, B2BUA (BacktoBack UserAgent) is invoked to either use encryption or not, which actually depends on the endpoints.

If the endpoints (near and far end) support and offer encryption (H,235, DES/AES), the call will connect with both legs encrypted, otherwise if one endpoint offers encryption and the other endpoint does not, then B2BUA is invoked to decrypt or encrypt the media packets.

Conclusion: The use of encryption is up to the endpoints negotiation of capabilities, and the Expressways will not have problems with calls that start as SIP and ends as H323.

Hope this helps!