diff --git a/src/switch_core_media.c b/src/switch_core_media.c
index 5167ea534f..56c3662840 100644
--- a/src/switch_core_media.c
+++ b/src/switch_core_media.c
@@ -2840,7 +2840,7 @@ SWITCH_DECLARE(uint8_t) switch_core_media_negotiate_sdp(switch_core_session_t *s
 	}
 
 	if (!switch_channel_test_flag(session->channel, CF_DTLS) && (var = switch_channel_get_variable(session->channel, "rtp_secure_media"))) {
-		if (strcasecmp(var, "optional")) {
+		if (!(switch_false(var) || !strcasecmp(var, "optional"))) {
 			needs_crypto = 1;
 
 			switch_channel_set_variable(session->channel, "rtp_crypto_mandatory", "true");