Oracle SBC Security Configuration Ed 2 — Lesson 3: TLS, SRTP, PKI, Media Security, and Interworking

Technical Scope

• TLS profiles, cipher policy, mutual authentication, and certificate chains
• SRTP negotiation, media security modes, keying, and interworking
• media anchoring, NAT traversal, topology hiding, and sensitive-header manipulation
• certificate expiry, handshake failures, media mismatch, and rollback

Instructor Demonstration

Demonstrate TLS profiles, cipher policy, mutual authentication, and certificate chains within a carrier-grade SIP border protecting enterprise voice services against signaling abuse, media threats, identity spoofing, toll fraud, and availability attacks, then capture the exact configuration, command, transaction, report, trace, or code evidence that proves the expected result.

Applied Workshop

Implement a controlled workshop covering SRTP negotiation, media security modes, keying, and interworking and media anchoring, NAT traversal, topology hiding, and sensitive-header manipulation, then test a failure, exception, or business-control scenario involving certificate expiry, handshake failures, media mismatch, and rollback.

1. Confirm the environment, identities, data, dependencies, controls, and expected result.
2. Complete the product-specific configuration, development, analysis, or business-process task.
3. Capture commands, configuration, output, logs, transactions, reports, or test evidence.
4. Explain the operational, security, performance, data-quality, or business trade-off.

Validation Standard

The TLS, SRTP, PKI, Media Security, and Interworking result must be reproducible, traceable to approved inputs, and consistent with expected Oracle product or business-process behavior.

• The intended target, scope, and ownership are verified.
• The result is supported by reproducible evidence and expected-value checks.
• Security, performance, reliability, data quality, and support impact are reviewed.
• Unexpected behavior is investigated before acceptance or release.

Failure Analysis

Diagnose issues in TLS profiles, cipher policy, mutual authentication, and certificate chains, SRTP negotiation, media security modes, keying, and interworking, media anchoring, NAT traversal, topology hiding, and sensitive-header manipulation, or certificate expiry, handshake failures, media mismatch, and rollback without making an unverified production change.

Learners isolate the smallest proven cause, apply a reversible correction, rerun validation, and record the preventive action.

Practical Outcome

Complete a validated implementation or analysis for TLS, SRTP, PKI, Media Security, and Interworking and defend the result with documented evidence.