The Edge Server was designed to provide superb media quality to internet based users. Because of this, Lync traffic does not need to be routed through encryption tunnels unless your organization specifically requires dual layer encryption. SIP signaling traffic is encrypted using TLS, and all media traffic (audio, video and application sharing) is encrypted using SRTP. When considering this solution organizations should know the following:Īll Lync 2010 traffic is encrypted by default. To provide users with the best possible media quality, organizations should deploy a solution that prevents time sensitive real time media (voice/video) from traversing the VPN and simultaneously allows standard corporate network traffic to traverse the VPN.

This means that other network activity, such as a large file transfer, can potentially degrade the call experience of users. Real time media traffic is not prioritized. The issue is compounded when the VPN concentrator is busy. This configuration can create additional latency and jitter because media traffic must pass through an additional layer of encryption and decryption. When users connect to the corporate network using a VPN client, Lync media traffic is sent through the VPN tunnel. Many organizations that deploy Lync Server 2010 encounter voice quality issues associated with the usage of a client VPN solution in combination with Lync 2010.

This solution maintains a secure environment and improves the Lync 2010 user experience. This article explores this common Lync Server 2010 deployment issue, and demonstrates how to utilize the existing infrastructure to redirect media traffic to bypass the corporate client VPN Solution. This occurs because Lync traffic is already secured. VPNs have numerous security benefits, but they can actually degrade the call experience for Microsoft Lync users. Many organizations utilize Virtual Private Networks (VPNs) to secure traffic when users are outside the corporate network.

, Microsoft has released practical guidance on how to implement VPN Split Tunnel for Skype for Business Online. First published on TECHNET on Nov 14, 2011

Skype for web firewall block