Versions Compared

Old Version 1

changes.mady.by.user Ribbon Communications

Saved on

compared with

New Version Current

changes.mady.by.user Ribbon Communications

Saved on

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.
CSS Stylesheet
img.confluence-embedded-image { display: inline-block !important; }

Add_docset_workflow
AUTH1UserResourceIdentifier{userKey=8a00a0c85b2726c2015b58aa779d0003, userName='null'}
DEV1UserResourceIdentifier{userKey=8a00a02355cd1c2f0155cd26cc5207f0, userName='null'}
LDEV1UserResourceIdentifier{userKey=8a00a0c85b2726c2015b58aa779d0003, userName='null'}
SVT1UserResourceIdentifier{userKey=8a00a02355cd1c2f0155cd26cef30cd0, userName='null'}
LSVT1UserResourceIdentifier{userKey=8a00a0c85b2726c2015b58aa779d0003, userName='null'}
AUTHJIDSYM-20206

Overview

After the

Spacevars
0company
Spacevars
0longproduct
After the Sonus SBC 1000/2000 obtains the required certificates, configuration of several options/attributes on both the server and client is necessary before TLS can employ the certificate(s) in establishing a secure connection. The attributes are configured in TLS profiles. Attributes include, but are not limited to, items such things as Client Ciphers, and inactivity timeouts.

TLS Profiles are used by SIP Signaling Groups when the TLS transport type is selected for incoming and outgoing SIP trunks (Listen Ports), and in SIP Server Tables when TLS is selected as the Server Host protocol.

Sonus The SBC 1000/2000 supports only TLS 1.0 , SSL Only, TLS 1.2 Only, and TLS 1.0-1.2. SSL 3.0 and SSL 2.0 are not supported due to security risks and vulnerabilities.

TLS 1.2 Only Requirements

The table below lists requirements, such as client, cumulative updates, etc. that are required for using TLS 1.2.

Div
classpdf6pttext

Caption
0Figure
1TLS 1.2 Requirements
TLS 1.2Required
Skype for Business On Premises SBA(tick)
WS2012R2 ASM(tick)

Valid with Clients:

  • Lync 2013 (Skype for Business) Desktop Client, MSI and C2R, including Basic 15.0.5023.1000 and higher
  • Skype for Business 2016 Desktop Client, MSI 16.0.4678.1000 and higher, including Basic
  • Skype for Business 2016 Click to Run Require the April 2018 Updates:
    • Monthly and Semi-Annual Targeted – 16.0.9126.2152 and higher
    • Semi-Annual and Deferred Channel – 16.0.8431.2242 and higher
(tick)
Cumulative Updates - Skype for Business - March 2018 or Higher(tick)
ASM Roll-up - June 2018. Apply the Security Template after applying the ASM RollUp.(tick)

Before enabling TLS 1.2 Only on SBA, prepare the Skype for Business environment.

Refer to:  https://blogs.technet.microsoft.com/nexthop/2018/04/18/disabling-tls-1-01-1-in-skype-for-business-server-2015-part-1

(tick)

 

Working with TLS Profiles

Excerpt
  1. In the WebUI, click the Settings tab.

  2. In the left navigation pane, go to Security > TLS Profiles.

    Image Removed
    Panel
    borderStylenone

    Caption
    0Figure
    1TLS Profile

     Image Added

To view a TLS Profile's properties:

Include Page
_View_Entry_Values
_View_Entry_Values
nopaneltrue
Include Page
_Delete_Entry_Procedure
_Delete_Entry_Procedure
nopaneltrue
Children Display
depth3
styleh5

Pagebreak