Expressway outbound SIP calls port 5061 only

[Mihkel Laur]

Hello

I have an issue where some of my SIP calls fail because the other side only accepts calls on port 5060 using TCP. 

When I look at my outbound calls, I see Expressway only trying with port 5061 using TLS. 

No attempts are made with TCP port 5060.

Is there something I missed in the configuration? Been at this for 2 days now and cannot find anything. 

Expressway (C and E) are Version: X12.6.2, call control is done by exp-c and device is SX20 (ce9.9.2)

[Roger Kallberg]

As you use internet as the bearer of traffic do you really want to to send calls unencrypted? I would argue that the other side that you tried to call should make changes to not allow calls over TCP, and to allow TLS.

If you anyway think that it is a good idea to use no encryption for calls on internet there are settings in Expressway that affects this. Look at SIP protocol and zone settings.

[Mihkel Laur]

I completely agree on this. They should open port 5061 and allow TLS. I did ask about this but did not receive a reply yet. 

[Mihkel Laur]

Issue was TLS handshake failure which is why 5061 connection failed. 
Did not resort to use of 5060.