Cisco ASA 5505 Configuration Manual page 973

Configuring the T
Inspection
This chapter describes how to configure the adaptive security appliance for the TLS Proxy for Encrypted
Voice Inspection feature.
This chapter includes the following sections:
•
•
•
•
•
Information about the TLS Proxy for Encrypted Voice Inspection
End-to-end encryption often leaves network security appliances "blind" to media and signaling traffic,
which can compromise access control and threat prevention security functions. This lack of visibility can
result in a lack of interoperability between the firewall functions and the encrypted voice, leaving
businesses unable to satisfy both of their key security requirements.
The adaptive security appliance is able to intercept and decrypt encrypted signaling from Cisco
encrypted endpoints to the Cisco Unified Communications Manager (Cisco UCM), and apply the
required threat protection and access control. It can also ensure confidentiality by re-encrypting the
traffic onto the Cisco UCM servers.
Typically, the adaptive security appliance TLS Proxy functionality is deployed in campus unified
communications network. This solution is ideal for deployments that utilize end to end encryption and
firewalls to protect Unified Communications Manager servers.
The security appliance in
and Cisco UCM interaction.
OL-20339-01
Information about the TLS Proxy for Encrypted Voice Inspection, page 44-1
Licensing for the TLS Proxy, page 44-3
Prerequisites for the TLS Proxy for Encrypted Voice Inspection, page 44-4
Configuring the TLS Proxy for Encrypted Voice Inspection, page 44-5
Feature History for the TLS Proxy for Encrypted Voice Inspection, page 44-17
Figure 44-1
C H A P T E R
LS Proxy for Encrypted Voice
serves as a proxy for both client and server, with Cisco IP Phone
Cisco ASA 5500 Series Configuration Guide using ASDM
44
44-1