SX10 Encrypted cannot connect to other SX10 encrypted internall

[AV-Telemed]

Hello All,

I have 2 SX10s and cannot figure out how the encryption works for these. They are both registered to our VCS-C, and cannot connect with one another. Both systems have Encryption turned on and not to "Best Effort". I am thinking that this might have to do with our VCS or our security engineering team. Please help...

Thanks.

[Patrick Sparkman]

What happens if you try to make a call with them set to Best Effort?

For the zone that each SX10 is registered to, what is the "Media encryption mode" under SIP set to?

Does anything in the endpoint logs standout as to why the call fails to connect?

[AV-Telemed]

When both are set to Best Effort they will connect. But we need them to be turned On, for HIPPA purposes. For the zone they are registered to, Media Encryption Mode is set to auto. The only thing I see is the cause of the disconnection; when I go to call history under diagnostics is insufficient security. Could this be a setting in our VCS or firewall?

[Jens Didriksen]

Would also be good if you could include the software versions of the SX10 and the VCS-C.

Also, what happens if you set the VCS to "Force encryption" instead of "Auto" ?

Do they have appropriate certificates installed, and have SIP certificate been turned on - see "Managing the video system's certificates" section in the admin guide.

/jens

Please rate replies and mark question(s) as "answered" if applicable.

[Randy Valverde Rojas · Accepted solution]

Hello,

Might be small but had to check, are the units registered on TLS? if not can you try to do so? Certificates shouldn't be necessary unless TLS verify is checked.

[AV-Telemed]

Thanks Randy! 

Changing it to TLS in our VCS worked. Made the call go through. 

[Randy Valverde Rojas]

Awesome, glad to help out. Keep in mind that for everything that includes encryption (media or signaling) TLS is most like needed. At least for sip.