Cisco Cisco TelePresence Management Suite (TMS) Version 15
c. Turn on TLS Verify mode.
d. In the TLS verify subject name field, enter sip.webex.com.
e. Click Create Zone.
2. Set up a search rule with a higher priority than the search rule for the existing DNS zone (lower number
priority) for the domain of WebEx.
The following configuration is required:
l
Protocol: SIP
l
Source: <Admin Defined>, default: Any
l
Mode: Alias Pattern Match
l
Pattern Type: Regex
l
Pattern String: (.*)@(.*)(\.webex\.com).*
l
Pattern Behavior: Replace
l
Replace String: \1@\2\3
l
On Successful Match: Stop
l
Target: <DNS Zone Created for WebEx>
l
State: Enabled
For details on how to create and set up search rules for a DNS zone, refer to the "Cisco TelePresence
Video Communication Server Basic Configuration (Control with Expressway) Deployment Guide" at: .
3. Configure a valid Client/Server Certificate for your company. Typically the CName of the certificate is the
routable domain to your company's Cisco VCS Expressway. It must be a CA-level certificate name
issued by a public CA that is supported by WebEx. For a list of supported public CAs, see the list below.
Note: Self-signed certificates are NOT supported.
For a list of supported certificates and details on how to configure a certificate on Cisco VCS Expressway,
Configuring Traversal Zones for MCUs with Encryption
Enabled
Enabled
This section details the configuration necessary in VCS to support MCUs that have encryption enabled (the
default setting).
If you choose not to do the following configuration, MCUs with encryption enabled will deliver the
presentation content in the main video channel, instead of a separate stream.
Cisco Collaboration Meeting Rooms (CMR) Hybrid Configuration Guide (TMS 14.6 - WebEx WBS29.11)
Page 98 of 254
Configuring Call Control
Configuring Cisco Expressway and TelePresence Video Communication Server