Authorized SIP/TLS endpoints only. Unauthenticated signalling sessions are terminated by gateway policy.