Switching from CUCM Non-Secure Mode to Mixed Mode

[dbraggs107]

We are considering switching to CUCM mixed mode to utilize call encryption between our end points registered to CUCM.

Has anyone switched from CUCM non-secure mode to mixed mode that can comment on the experience? This is a large multicluster environment with many services and applications integrated with CUCM.

Any thoughts if this could be an issue with MediaSense call recording? I'm in the process of labbing this up, but thought I'd reach out to others to get their feedback as well. 

Doc I'm following and would start at: From Non-Secure Mode to Mixed Mode (Tokenless CTL)

http://www.cisco.com/c/en/us/support/docs/unified-communications/unified-communications-manager-callmanager/118893-technote-cucm-00.html

Versions:

Cisco MediaSense 

System Version: 10.5.1.12001-136

CUCM:

System version: 10.5.2.12901-1

[Manish Gogna]

Hi,

The doc you are following is the correct one. Regarding MediaSense , the Design guide for 11.5 says:

MediaSense supports secured communication through secured SIP and SRTP (Secure Real-time Transport Protocol). At the MediaSense end, secured SIP ensures that the signaling used to set up recording sessions is encrypted. Secured SIP signaling is achieved over TLS transport layer for SIP messages. Next, MediaSense negotiates SRTP streams over signaling channels, and receives and decrypts the encrypted RTP messages. The received media streams are stored in the MediaSense server in a decrypted form and are accessible through all available channels.

Note: MediaSense supports SRTP for BiB audio call recordings only.

http://www.cisco.com/c/en/us/td/docs/voice_ip_comm/cust_contact/contact_center/mediasense/115/Design_Guide/CUMS_BK_MC36D963_00_mediasense-srnd_115/CUMS_BK_MC36D963_00_mediasense-srnd_10-5_chapter_010.html#id_26981

HTH

Manish

[dbraggs107]

Would this mean if we enabled mixed mode on the CUCM cluster but did not upgrade media sense that media sense would no longer be able to record calls between CUCM end points?

[Deepak Rawat]

sRTP with MS is only supported starting version 11.5 so that might be a problem. Refer below:

http://www.cisco.com/c/en/us/td/docs/voice_ip_comm/cust_contact/contact_center/mediasense/115/Release_Notes/CUMS_BK_M3A89C32_00_ms-release-notes-115.html

Regards

Deepak