API Security

Developer’s Guide SoundPoint IP / SoundStation IP

Phone State Polling Configuration Parameters

The phone state polling configuration parameters in sip.cfg must be set as followed:

•Set apps.statePolling.URL to the location where requested information should be sent.

For example, apps.statePolling.URL=http://172.24.128.85:8080 If this URL is set to Null, the requested information will not be sent.

•Set apps.statePolling.username to the appropriate username. For example, apps.statePolling.username=bob

The username and password are required to authenticate incoming polling requests to the phone.

•Set apps.statePolling.password to the appropriate password. For example, apps.statePolling.password=1234

With respect to the security of the SoundPoint IP/SoundStation IP XML API, the following should be noted:

•Authenticating remote control and monitoring— There is no support of TLS on the phone’s web server. The execution of each of each HTTP GET/POST request requires an MD5 digest authentication. All pushed URLs are relative URLs with the root specified in the sip.cfg configuration file.

•Achieving confidentiality of executed content—The phone’s HTTP client supports TLS, so any data retrieved from the URL can be protected. Make sure of the confidentiality of all traffic past the initial push request by specifying a root URL that uses https.

•Unsolicted event reporting—The confidentiality of all events reported by the phone can be also be protected by TLS in the same way that push content is.

•Direct data push—When direct data push is enabled—disabled by default— small amounts of executable content (1KB) can be sent directly to the phone by the application server. The request will still be authenticated through HTTP digest, but all content will be in clear text on the network. Polycom recommends that you only use data push for broadcast type alerts that do not pose any confidentiality risks.

Note	Both apps.push.username and apps.push.password must be set for data
	push to be enabled.

2 - 32

SIP 3.1 specifications

Polycom SIP 3.1 is an advanced session initiation protocol designed to enhance voice and video communication in various business environments. As a pivotal component of Polycom’s telecommunication solutions, SIP 3.1 offers several features and characteristics that cater to the evolving needs of modern enterprises, particularly those that rely on seamless and efficient communication.

One of the standout features of Polycom SIP 3.1 is its robust interoperability. This protocol supports a wide range of endpoints and platforms, allowing organizations to integrate their existing systems with new technologies effortlessly. This flexibility ensures that businesses can leverage their previous investments while upgrading to the latest communication tools.

Another key aspect of Polycom SIP 3.1 is its enhanced call management capabilities. The protocol facilitates efficient call handling, enabling users to manage multiple calls seamlessly. Features like call hold, transfer, and conferencing are streamlined, which enhances productivity by allowing for efficient collaboration among team members. Additionally, it is optimized for low latency and high-quality audio, ensuring that conversations are clear and free from disruptions.

Security is paramount in today’s digital landscape, and Polycom SIP 3.1 addresses this concern with advanced encryption standards. By integrating security features such as Transport Layer Security (TLS) and Secure Real-time Transport Protocol (SRTP), it protects sensitive communication from unauthorized access and ensures that data remains confidential throughout the call.

Polycom SIP 3.1 also boasts compatibility with various video codecs, making it a versatile choice for video conferencing. This compatibility ensures high-quality video streams, which is essential for effective visual communication in remote meetings. Furthermore, the support for the H.264 codec provides efficient bandwidth usage, making high-definition video conferencing accessible, even in varying network conditions.

Moreover, the protocol provides strong support for presence and instant messaging, which enhances real-time communication among users. This integration of voice, video, and messaging capabilities fosters a more connected and collaborative work environment, allowing teams to engage effectively regardless of their geographical locations.

In summary, Polycom SIP 3.1 stands out as a sophisticated solution tailored to meet the demands of modern business communication. With its emphasis on interoperability, call management, security, video quality, and real-time collaboration, it caters to companies of all sizes seeking to optimize their communication infrastructure and enhance productivity in the workplace. As businesses continue to navigate the complexities of digital communication, Polycom SIP 3.1 remains a compelling choice in the market.