Security
Polycom, Inc.
144
●
AES encryption is not supported on systems registered to an Avaya H.323 gatekeeper.
●
For Polycom RealPresence Group systems with a maximum speed of 6 Mbps for unencrypted calls,
the maximum speed for encrypted SIP calls is 4 Mbps.
RealPresence Group systems provide the following AES cryptographic algorithms to ensure flexibility when
negotiating secure media transport:
●
H.323 (per H.235.6)
AES-CBC-128 / DH-1024
AES-CBC-256 / DH-2048
●
SIP (per RFCs 3711, 4568, 6188)
AES_CM_128_HMAC_SHA1_32
AES_CM_128_HMAC_SHA1_80
AES_CM_256_HMAC_SHA1_32
AES_CM_256_HMAC_SHA1_80
RealPresence Group systems also support the use of FIPS 140 validated cryptography, which is required
in some instances, such as when used by the U.S. federal government. When the Require FIPS 140
Cryptography setting is enabled, all cryptography used on the system comes from a software module that
has been validated to FIPS 140-2 standards. You can find its FIPS 140-2 validation certificate here:
http://csrc.nist.gov/groups/STM/cmvp/documents/140-1/140val-all.htm#1747
.
To enable encryption:
1
Do one of the following:
In the local interface, go to Settings > Administration > Security > Settings.
In the web interface, go to Admin Settings > Security > Global Security > Encryption.
2
Configure these settings.
