Masking sensitive data in SIP messages

[Iteration 107. Approved]

FDS: https://intranet.genesys.com/pages/viewpage.action?spaceKey=RDSIPS&title=%5BFDS%5D+Mask+Sensitive+Data+in+SIP+Server

Starting with version 8.1.102.51, SIP Server can mask sensitive data in SIP messages contained in SIP Server logs. When enabled, SIP Server replaces:

• All private SIP header values with a single asterisk
• SIP message body content with the phrase CONTENT FILTERED

SIP Server does not replace the content of type application/sdp, and it replaces application/vnd.radisys.msml+xml in the SIP message body only when it contains user data.

Feature Configuration

Set the x-sip-mask-sensitive-data configuration option to true in the [log] section of the SIP Server Application.

Configuration Options

x-sip-mask-sensitive-data

Setting: [log] section, Application level
Default Value: false
Valid Values: true, false
Changes Take Effect: Immediately

Specifies whether SIP Server masks sensitive data in SIP messages contained in SIP Server logs.

• If set to true, SIP Server masks all private SIP header values and SIP message body content of all types, except for application/sdp and application/vnd.radisys.msml+xml. If the message contains application/vnd.radisys.msml+xml, SIP Server masks it only when it contains user data.
• If set to false, SIP Server does not mask sensitive data in SIP messages contained in SIP Server logs.