CounterPath Bria 3.0 for Mac User Guide - Retail Deployments - Manual (Page 54)

CounterPath Corporation
50
SIP Accounts – Transport
You can set up Bria for the type of security (encryption) you want for incoming and outgoing calls.
Bria supports:
• Signaling encryption using TLS
• Media encryption using SRTP.
Setting up for Security outside of Bria
When using TLS, you must have the root certificate that signs the proxy's chain of certificates. In most cases,
the root certification will already be installed. Procedures for the exchange of certificates are outside the scope
of this documentation. The certificates must be stored on the Bria computer, in the root certificate store.
Setting up the root certificate on your computer ensures that the connection to the proxy is TLS secure (the first
hop). Any proxy in the chain (between you and the caller) that does not support TLS may cause an insecure link
Table 7: SIP Accounts – Transport
Field Description
Signaling Transport Contact your VoIP service provider to identify the types of transport that are supported.
Then choose a supported transport:
• Automatic: Bria sets up the transport based on the capabilities of the network and the
Bria computer. Choose this option if you do not care which transport is used.
• TCP: This transport provides no signaling security.
• UDP: This transport provides no signaling security.
• TLS: Choose this option to request signaling encryption or both signaling and media
encryption.
Encryption See the description below for more information.