Encryption

From SwyxWare 2011 on, SwyxWare supports the encryption of call data via "Secure Real Time Transport Protocol" (SRTP). The protocol, designed for real-time communication, means security for voice data transmission. The data is encrypted, making listening to calls impossible.

The following encryption modes are available:

You can specify this setting individually per user, or globally for SwyxServer. It must be remembered that the selection of SwyxServer in the global settings has an influence on the configuration options in the user and trunk properties within the "Encryption" tab:


On selection within the server properties of...	...the following selection options are available within the trunk* and user properties:
No encryption	No encryption
Encryption preferred	No encryption
	Encryption preferred
	Encryption mandatory
Encryption mandatory	Encryption mandatory

In the SwyxLink trunk, the encryption mode is taken from the server settings and cannot be changed. Only one key must be assigned.For further information please refer to The "Encryption" tab.

The setting of the encryption mode which was set within the server properties has no influence on the encryption mode within the SIP trunk. Voice data encryption on SIP trunks requires TLS as transport protocol and must be supported by the SIP provider. The corresponding configuration is defined in the properties of a SIP trunk group. For further information please refer to The "Encryption" tab of the SIP Trunk Group.

The user MobileExtensionManager supports only the settings "No encryption" or "Encryption mandatory". If your SwyxWare is set to "Encryption preferred" in the server properties, and all involved terminal devices and trunks support encryption, set the user MobileExtensionManager to "Encryption mandatory" If you are using devices and trunks which do not support encryption, set the user MobileExtensionManager to "No encryption".


	In the case of connections via the MobileExtensionManager too, the voice data is only transferred encrypted within the SwyxWare networks.


	In a new installation of SwyxWare, the encryption mode is set by default to "Encryption preferred". When an older version is updated to Version 2011, the encryption mode is preconfigured to "No encryption".