[wpseo_breadcrumb]
With spam/fraud call indication, you can keep your business more secure. Administrators can set organization policies to automatically block suspicious calls.
A robocall is a call that delivers pre-recorded messages through auto dialing software. Fraudsters use robocalls with spoofed caller ID to acquire something of value from the victims.
To protect against spam calls, service providers are implementing STIR/SHAKEN in their network to help verify caller-IDs. This helps to identify suspect calls, giving users confidence in answering calls from unknown numbers.
Understanding the STIR/SHAKEN Standard
Secure Telephone Identity Revisited (STIR) and Signature-based Handling of Asserted Information Using toKENs (SHAKEN) is a framework of interconnected standards. This ensures that calls traveling through interconnected phone networks have their caller ID signed as legitimate by the originating service provider and validated by the receiving service provider before reaching the consumers. For details about the STIR/SHAKEN standard and how it validates calls, you can learn more here.
Supported Devices
Spam detection is supported on the following Cisco endpoints:
- Webex App—Desktop and Mobile version 42.5 or higher.
- MPP phones—Supports 6800, 7800 and 8800 MPP devices with firmware version 11.3.7 or higher.
Provision User Notification
An administrator can configure sending the user indication for unverified callers as well as block calls that have failed STIR/SHAKEN validation. This ensures that potential fraud calls are not sent to the user's endpoint.
To configure the notification settings at the organization-level, follow these steps:
- Navigate to https://admin.webex.com and go to Services > Calling.
- Go to Service settings and scroll down to Caller ID Validation.
- Use the toggle to activate the following options:
- Block calls that failed Caller ID validation: If enabled, all calls that failed validation as per STIR/SHAKEN validation are blocked. These calls are not routed to the user's endpoints. However, the calling number is added to the called user’s call history. By default, this value is disabled.
- Present calls from unverified callers as normal calls: This option is enabled by default. Any calls from unverified callers are sent to endpoints without indication.
If the PSTN service provider for an organization has enabled STIR/SHAKEN in their network, then they can disable this setting. When disabled, calls from unverified callers display as Possible Spam at the user’s endpoint.
Configure CUBE for Spam Indication
To pass the verstat information to Webex Calling, organizations in the United States and Canada that use on-premises PSTN connected to Webex Calling using Local Gateway or CUBE must configure these settings on CUBE.
For calls from PSTN, where the service provider supports STIR/SHAKEN:
Configure CUBE, if the PSTN service provider sends verstat parameter during new call setup:
- The tags referenced here are based on the Local Gateway Configuration Guide.
- Doing this configuration even when the service provider is not sending the verstat parameter will not affect calls.
voice class sip-copylist 300
sip-header From
sip-header P-Asserted-Identity
sip-header P-Attestation-Indicator
voice class tenant 300
copy-list 300
voice class sip-profiles 200
rule 50 request INVITE peer-header sip P-Asserted-Identity copy "(;verstat=[A-Z|a-z|-]+)" u01
rule 51 request INVITE peer-header sip From copy "(;verstat=[A-Z|a-z|-]+)" u02
rule 52 request INVITE sip-header P-Asserted-Identity modify "@" "\u01@"
rule 53 request INVITE sip-header From modify "@" "\u02@"
rule 54 request INVITE peer-header sip P-Attestation-Indicator copy "(.)" u03
rule 55 request INVITE sip-header P-Attestation-Indicator add "P-Attestation-Indicator: Dummy Header"
rule 56 request INVITE sip-header P-Attestation-Indicator modify "." "P-Attestation-Indicator: \u03"
For calls from PSTN, where the service provider does not support STIR/SHAKEN:
If the PSTN provider does not send verstat information in the incoming call, do not change the default value of the Present calls from unverified callers as normal calls setting on Control Hub. If the setting is disabled, then users see Possible Spam indication on their clients.