When you install Cisco Unity Connection, a local certificate is automatically created and installed to secure communication between the Cisco PCA and Connection, and between IMAP e-mail clients and Connection. This means that all network traffic (including user names, passwords, other text data, and voice messages) between the Cisco PCA and Connection is automatically encrypted, and network traffic between IMAP e-mail clients and Connection is automatically encrypted if you enable encryption in the IMAP clients. However, if you want to reduce the risk of man-in-the-middle attacks, do the procedures in this chapter.

The Cisco PCA website provides access to the web tools that users use to manage messages and personal preferences with Cisco Unity Connection. Note that IMAP client access to Connection voice messages is a licensed feature.

http://www.cisco.com/en/US/docs/voice_ip_comm/connection/2x/administration/guide/2xcucsag215.html#wp1040314