ViciDial TLS/SRTP Secure Setup

Замовник: AI | Опубліковано: 18.01.2026

I need a fresh ViciDial installation hardened for production-grade call center operations (10 seats). Core: end-to-end encryption with TLS SIP signalling + SRTP media. SIP trunk from provider already committed—must register/route encrypted. Production-ready: initial campaign configured with uploaded leads/audio files I provide. Scope - Install latest stable Vicibox/ViciDial (Asterisk 18/20) on clean Linux server I provide. Secure initial setup (change root pw, firewall basics, disable unused services). - Generate/deploy SSL certs (Let’s Encrypt preferred) + enable TLS transport (PJSIP 5061). Secure web UI (HTTPS redirect, Dynamic Portal hardening). - Compile/enable SRTP (libsrtp), enforce media_encryption=sdes (no RTP fallback), confirm encrypted audio in sngrep both directions. - Configure trunk + outbound dialplan rules. AMD enabled/tuned for outbound. Upload IVR audio files + leads I provide. Create initial progressive campaign (10 agents, standard hours). - Optimize for 10 seats: Codecs (allow=alaw; disallow=all else), max dial level 3-4, ulimit tweaks, recording/monitoring/reports verified working. Create 10 agent accounts + manager accounts (listen/whisper/barge). - Basic production hardening—firewall whitelist (SSH/web/RTP ports), database security (mysql remote deny), fail2ban. Acceptance Job complete when: - Test calls to/from trunk show TLS/SRTP in SIP traces (sngrep screenshots). - 10 agents login (MicroSip), place calls via campaign, AMD/IVR flows work recording/monitoring/reports functional. - Campaign ready to start with uploaded leads. - Hardening verified (no open ports, web secure). - Hand-off doc TO APPLY - ANSWER THESE 5 QUESTIONS IMMEDIATELY: What is your exact time estimate to complete this full scope? (hours) Vicibox 12 + Asterisk 20 experience? (yes/no + projects) TLS+SRTP PJSIP projects completed? (# of similar jobs) Fixed price for this exact scope? Time estimate REQUIRED in first reply - filters serious experts only. Server access ready NOW.