What changed
Genesys Cloud no longer supports TLS_RSA_WITH_AES_256_CBC_SHA256 and TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384 for BYOC Cloud. Customers whose BYOC Cloud trunks are configured to use only one or both of these ciphers must update the configuration to include at least one supported cipher. Configurations that already include another supported cipher need no change.
Vendor documentation (opens in a new tab)Why it matters
A trunk whose TLS negotiation depends only on a removed cipher is a carrier-connectivity risk rather than a cosmetic change. The check is quick, but it usually spans the Genesys trunk settings and the carrier or SBC side, so it needs an owner.
CxCave practical context
Who should care
- Telephony administrators
- CX architects
Implementation considerations
ACTION REQUIREDReview the TLS cipher list on every BYOC Cloud trunk and the matching carrier or SBC configuration. Where only the two removed ciphers are allowed, add a supported cipher and test a call over each trunk.
CxCave recommendation, not a vendor mandate unless explicitly stated.