SBC security-policy
A question about security-policy on SBC:
We have at the moment 2 separate security policies for every configured endpoint, meaning there are 20 security policies each with their own priorities and unique local-ip <-> remote-ip pairs.
as the number of endpoints will increase and there are only priorities 0....123 available, we can have up to 64 unique pairs.
If we want to assign eg 1 signalling security-policy to all endpoints, would we then need to define local-ip-addr-match and remote-ip-addr-match values as 0.0.0.0 ?
This way we can have 2 common policies, 1 for signalling and 1 for media and use those for all configured endpoints.
Does this compromise security of TLS and SRTP communications between SBC and Endpoints?