<X-PRE-PROCESS cmd="set" data="rtp_secure_media=true"/>

in sip profile

            <param name="NDLB-allow-crypto-in-avp" value="true"/>