Download distribution group expansion https media

Info icon This preview shows pages 20–22. Sign up to view the full content.

View Full Document Right Arrow Icon
download, distribution group expansion HTTPS Media Encryption Media traffic is encrypted using Secure RTP (SRTP), a profile of Real-Time Transport Protocol (RTP) that provides confidentiality, authentication, and replay attack protection to RTP traffic. SRTP uses a session key generated by the media relay authentication service in response to a successful authentication of the server request (on behalf of the media participants). The session key is secured by the negotiated username and password presented to the media relay authentication service by the Front End servers, and sent to the participants over the TLS- secured SIP channel. Decrypting the secured session key with the username and password that the media relay service used, and provided in a secured manner by means of the participant’s TLS certificate and the secured SIP channel, allows the participants to decrypt the SRTP stream. In addition, media flowing in both directions between the Mediation Server and its internal next hop is also encrypted using SRTP. Media flowing in both directions between the Mediation Server and a media gateway is not encrypted. The Mediation Server can support encryption to the media gateway, but the gateway must support MTLS and storage of a certificate. Notes: Audio/Video (A/V ) is supported with the new version of Windows Live Messenger. If you are implementing A/V federation with Windows Live Messenger, you must also modify the Lync Server encryption level. By default, the encryption level is Required. You must change this setting to Supported by using the Lync Server Management Shell. For details, see Prepare for Support of Public IM Connectivity in the Deployment documentation. Audio and video media traffic is not encrypted between Microsoft Lync 2010 and Windows Live clients. FIPS Lync Server 2010 and Microsoft Exchange Server 2010 Service Pack 1 (SP1) operate with support for Federal Information Processing Standard (FIPS) 140-2 algorithms if the Windows Server 2008 Service Pack 2 (SP2) Windows Server 2008 R2 operating systems are configured to use the FIPS 140-2 algorithms for system cryptography. To implement FIPS support, you must configure each server running Lync Server 2010 to support it. For details about the use of FIPS- 16
Image of page 20

Info iconThis preview has intentionally blurred sections. Sign up to view the full version.

View Full Document Right Arrow Icon
Microsoft Lync Server 2010 Security Guide compliant algorithms and how to implement FIPS support, see Microsoft Knowledge Base article 811833, The effects of enabling the “System cryptography: Use FIPS compliant algorithms for encryption, hashing, and signing" security setting in Windows XP and in later versions of Windows at http://go.microsoft.com/fwlink/?linkid=3052&kbid=811833 . For details about FIPS 140-2 support and limitations in Exchange 2010, see Exchange 2010 SP1 and Support for FIPS Compliant Algorithms at http://go.microsoft.com/fwlink/?LinkId=205335 .
Image of page 21
Image of page 22
This is the end of the preview. Sign up to access the rest of the document.

{[ snackBarMessage ]}

What students are saying

  • Left Quote Icon

    As a current student on this bumpy collegiate pathway, I stumbled upon Course Hero, where I can find study resources for nearly all my courses, get online help from tutors 24/7, and even share my old projects, papers, and lecture notes with other students.

    Student Picture

    Kiran Temple University Fox School of Business ‘17, Course Hero Intern

  • Left Quote Icon

    I cannot even describe how much Course Hero helped me this summer. It’s truly become something I can always rely on and help me. In the end, I was not only able to survive summer classes, but I was able to thrive thanks to Course Hero.

    Student Picture

    Dana University of Pennsylvania ‘17, Course Hero Intern

  • Left Quote Icon

    The ability to access any university’s resources through Course Hero proved invaluable in my case. I was behind on Tulane coursework and actually used UCLA’s materials to help me move forward and get everything together on time.

    Student Picture

    Jill Tulane University ‘16, Course Hero Intern