Cisco TelePresence Administrator's Manual page 173

If Local CPL is enabled but no policy is configured or uploaded, then a default policy is applied that allows all
calls, regardless of source or destination.
Directory
The Directory option refers Call Policy decisions, in the first instance, to the
used, for example, to determine if certain groups of users are allowed to call other groups of users.
If the directory service does not return any policy then any locally-defined Call Policy (Local CPL) is applied
instead.
Policy service
The Policy service option is used if you want to refer all Call Policy decisions out to an external service.
If you select this option an extra set of configuration fields appear so that you can specify the connection
details of the external policy service:
Field Description
Protocol The protocol used to connect to the policy service. The VCS automatically supports HTTP to
Certificate Controls whether the certificate presented by the
verification policy service is verified when connecting over
mode HTTPS.
HTTPS Controls certificate revocation list checking of the
certificate certificate supplied by the policy service.
revocation list
When enabled, the server's X.509 certificate is
(CRL)
checked against the HTTPS certificate revocation
checking
list.
Server The IP address or Fully Qualified Domain Name
address 1 - 3 (FQDN) of the service. You can specify a port by
appending :<port> to the address.
Path The URL of the service.
Status path The path for obtaining the remote service status.
Username The username used by the VCS to log in and
query the service.
Password The password used by the VCS to log in and
query the service.
The maximum plaintext length is 30 characters
(which is subsequently encrypted).
Default CPL The default CPL used by the VCS if the policy
service is unavailable.
See About policy services
Cisco VCS Administrator Guide (X7.1)
for more information.
Dial plan and call processing
Directory service. This could be
Usage tips
HTTPS redirection when communicating
with the policy service server.
When enabled, the value specified in the
Server address field must be contained
within the server's X.509 certificate (in either
the Subject Common Name or the Subject
Alternative Name attributes).
Use the CRL management
configure how the VCS uploads CRL files.
For resiliency, up to three server addresses
can be supplied.
This defaults to <reject status='403'
reason='Service Unavailable'/> but
you could change it, for example, to redirect
to an answer service or recorded message.
page to
Page 173 of 479