Configuring the Ethical Wall for Cisco Collaboration

Overview

The Verba Ethical Wall for Cisco Collaboration solution uses the following connections to the Cisco platform:

• Cisco EventBroker API - Jabber IM blocking, filtering and disclaimers
• Cisco CURRI API - Session blocking for Voice and Video

Configuring Cisco components

To use the Verba solution for Voice and Video overwatch, you need to set the service as a compliance server in Cisco Unified Communication Manager.
For IM, Presence, Screen Share and File Transfer you need to configure the Cisco IM & Presence Server.

Compliance for Voice and Video

Step 1 - In the CUCM menu navigate to Call Routing > External Call Control Profile

Step 2 - Click on the Add New button

Step 3 - Set configuration

Set the URL that you want the service to use for communication with the Verba compliance server.
Under the Configuring Verba components section, you will see how to adjust Verba to listen on this address.
With the Call Treatment on Failures option, you can define what the call manager should do if it cannot reach the compliance server. (Network failure for example)

Step 4 - Click Save

Step 5 - In the CUCM menu navigate to Device > Phone

Step 6 - Select the device, then select the line.

Step 7 - Select the External Call Control Profile created previously.

Compliance for IM, Presence, Screen Share and File Transfer

Step 1 - In the Cisco IM & Presence Server menu navigate to Messaging > External Server Setup > Third-Party Compliance Servers

Step 2 - Click on the Add New button

Step 3 - Set your Verba Compliance Server's parameters here

This is the Name you will be referring to your compliance server in the Cisco IM & Presence Server
Set the Hostname, Port and choose a Password 

Step 4 - In the Cisco IM & Presence Server menu navigate to Messaging > Compliance > Compliance Profiles

Step 5 - Click on the Add New button

Step 6 - Set configuration

You can configure the events for which you want the IM & Presence server to call the Verba compliance service.
If you want your Communication Policies to apply to all communication on your network, then the recommended configuration is as shown above.

Step 7 - Click Save

Step 8 - In the Cisco IM & Presence Server menu navigate to Messaging > Compliance > Compliance Settings

Step 9 - Under Compliance Server Selection, select Third-Party Compliance Server

Step 10 - Assign the Compliance Profiles to your Compliance server

Compliance Server is the server that your Verba compliance service runs on.
Select the Cisco Node and the Profile that you set up in Step 3.

Step 11 - Click Save

Restarting the XCP Router Service

For the Compliance server settings to take effect, the XCP Router Service has to be restarted. To do that, follow the steps below:

Step 1 From the list in the top right corner of the CUPS management interface select Cisco Unified IM and Presence Serviceability and click Go.

Step 2 From the top menu select Tools > Control Center > Network Services

Step 3 From the server list select CUCM IM and Presence and click Go.

Step 4 Select the Cisco XCP Router service and click Restart. The process can take several minutes to complete.

Configuring Verba components

Step 1 - In the Verba Web Application menu navigate to Administration > Verba Servers

Step 2 - Click on the server that the Verba compliance service will run on

Step 3 - Click on the Service Activation tab, and activate the Verba Cisco Compliance Service, using the  button at the end of the line

Step 4 - Click on the Change Configuration tab, and look for the Cisco Compliance Service section

Step 5 - Set configuration

• Cisco IM&P Server Version - Set the Cisco IM&P Server Version. The General section does not need to be configured if the Ethical Wall is only used for voice and video traffic.

• Cisco Unified CM IM&P Connections -  To configure a connection, in the next line click on the  icon. At the right panel, set the Component Name setting. The component name will be the Open-port Component Name that is shown in the IM&P servers under Messaging \ Compliance \ Compliance Settings menu. The Port and Password should be the same as what previously set in the Compliance Profile that is assigned to this node in the IM&P servers.

• Enable Ethical Wall - Set to Yes to turn the function on

• Cisco CURRI Context - You set this parameter in the previous section (Configuring Cisco Components > Compliance for Voice and Video > Step 3) This only needs to be configured if the Ethical Wall is used for voice and video traffic

• Cisco CURRI HTTP Port - You set this parameter in the previous section (Configuring Cisco Components > Compliance for Voice and Video > Step 3)

  
  

• Compliance Profile (only IM&P 9.x and below) - If you have Cisco IM & Presence server 9.x or earlier, then you cannot set Compliance Profiles on the IM&P server. You have to define which messages the IM&P server should send to the Verba Compliance Service for processing.
  For standard cases set all 4 types of events (es_OUT, es_IN, es_END, e_SESSION), with all packet types (IM, Presence, File Transfer, Screen Share).
  Fire and Forget - Leave the checkbox unchecked if the IM and Presence Service node must wait for a response from the compliance server before it continues to process the event. Check the checkbox if the IM and Presence Service node does not require a response from the compliance server before it continues to process the event further. (For the Verba Ethical Wall to fully function, leave this unchecked)
  Handling - Select bounce if errors returned from the compliance server should be bounced back to the originating party or component, select pass if they should be discarded. The Handling setting is ignored if Fire and Forget is not chosen.
  To configure these settings, click on the  button, then click on the  button at the end of the line. The right-hand panel changes, set the message types one by one here, as shown above. Click on the Save button at the bottom of the panel.
  

Step 6 - Save the Configuration

At the top-right corner of the panel click on Save, to save the whole configuration.