# What's New for this Release

## Introduction of Security Tab

Beginning with MiVoice Border Gateway Release 12.1, there is a new Security tab. The Security tab contains:

- Trust Store: Prior to MiVoice Border Gateway Release 12.1, Trust Store used to be found under the System tab.

- IP Blocking: Prior to MiVoice Border Gateway Release 12.1, IP Blocking used to be found under the Network tab.

- SIP user-agent filtering: This is new to MiVoice Border Gateway Release 12.1. The IP Blocking feature monitors network activities in real-time and blocks or allows connections between MBG and specific network blocks of IP addresses (netblocks) in CIDR format.

## CloudLink Daemon Support

Beginning with MiVoice Border Gateway Release 12.1, MBG provides support for CloudLink in the MSL standard installation.

## MPA Integration - New settings

Beginning with MiVoice Border Gateway Release 12.1, under Teleworking > Application Integration prior to MBG 12.1 there was a section called Voice Quality Statistics Integration. This section has been renamed MPA Integration to reflect the VQ Statistics reporter Mitel recommends. MPA stands for Mitel Performance Analytics.

Three MPA Integration payload types can be programmed on MiVoice Border Gateway:

- JSON: MBG will generate JSON RTCP data for MiNet Teleworker set calls and SIP Trunk calls that flow through MBG. MBG will send the JSON RTCP data to the MPA Probe. JSON forces a UDP transport

- SIP PUBLISH: MBG will forward RTCP Summary reports it receives (e.g., MiCollab Client Softphones in Teleworker mode) on its SIP Signaling connections to the MPA Probe. SIP Publish allows UDP, TCP or TLS transport.

- JSON + SIP Publish: This option combines the two payload types and enforces TLS transport. Additionally, it requires an SSL out profile. While SSL out profiles are pre-configured with the server, additional profiles can be added through the Trust store, accessible under the Security menu.

## Network Profile – Server-Gateway changes

Beginning with MiVoice Border Gateway Release 12.1, the Network > Profiles page for Server-Gateway now has a Behind Nat checkbox. This checkbox is introduced to indicate that the box is behind a NAT firewall, behaves in DMZ mode and automatically set the set side address to the public IP address.

## System Tab - Congestion and load shedding

Beginning with MiVoice Border Gateway Release 12.1, under System a new section called Congestion and load shedding is introduced. This page allows MiVoice Border Gateway Release Administrators to set some expected performance actions should the MBG reach certain performance limits.
Note:

Emergency Calls (for example, 911) are prioritized and would NOT be rejected due to these settings.

## System Tab - SIP settings default to SRTP only

Beginning with MiVoice Border Gateway Release 12.1, the default settings for SIP Options found under System > Settings on a new installation will be "SRTP only".
Note: The default settings for SIP profiles and devices (that is, Set-side RTP security and ICP-side RTP security) under Teleworking > Manage is "User global setting". This means System > Setting SIP Options will be used.

## Remote Proxy Tab

Beginning with MiVoice Border Gateway Release 12.1, the Remote Proxy > Domain list page has been improved in MiVoice Border Gateway Release 12.1.

## System - Settings Warnings

Beginning with MiVoice Border Gateway Release 12.1, if you are enabling UDP or TCP in System > Settings there is now a warning that UDP and TCP settings are not secure. The example below is for SIP options, but the same warning is also provided for MiNet options if TCP is selected.

↑