diff --git a/app/switch/resources/conf/sip_profiles/external-ipv6.xml.noload b/app/switch/resources/conf/sip_profiles/external-ipv6.xml.noload
index a680e18086..b607b65bc1 100644
--- a/app/switch/resources/conf/sip_profiles/external-ipv6.xml.noload
+++ b/app/switch/resources/conf/sip_profiles/external-ipv6.xml.noload
@@ -60,8 +60,7 @@
 		<param name="apply-register-acl" value="providers" enabled="false"/>
 		<param name="dtmf-type" value="rfc2833"/>
 		<param name="auth-subscriptions" value="true"/>
-		<param name="inbound-late-negotiation" value="true"/>
-		<param name="inbound-zrtp-passthru" value="true"/> <!-- (also enables late negotiation) -->
+		<param name="inbound-late-negotiation" value="true" enabled="false"/>
 		<!--
 		DO NOT USE HOSTNAMES, ONLY IP ADDRESSES IN THESE SETTINGS!
 		-->
diff --git a/app/switch/resources/conf/sip_profiles/external.xml.noload b/app/switch/resources/conf/sip_profiles/external.xml.noload
index a97d13d833..96055d7e71 100644
--- a/app/switch/resources/conf/sip_profiles/external.xml.noload
+++ b/app/switch/resources/conf/sip_profiles/external.xml.noload
@@ -59,8 +59,7 @@
 		<param name="nonce-ttl" value="60"/>
 		<param name="auth-calls" value="true"/>
 		<param name="auth-subscriptions" value="true"/>
-		<param name="inbound-late-negotiation" value="true"/>
-		<param name="inbound-zrtp-passthru" value="true"/> <!-- (also enables late negotiation) -->
+		<param name="inbound-late-negotiation" value="true" enabled="false"/>
 		<!--
 		DO NOT USE HOSTNAMES, ONLY IP ADDRESSES IN THESE SETTINGS!
 		-->
diff --git a/app/switch/resources/conf/sip_profiles/internal.xml.noload b/app/switch/resources/conf/sip_profiles/internal.xml.noload
index 5861602d6a..872de9f47c 100644
--- a/app/switch/resources/conf/sip_profiles/internal.xml.noload
+++ b/app/switch/resources/conf/sip_profiles/internal.xml.noload
@@ -238,10 +238,7 @@
 		<param name="inbound-proxy-media" value="true" enabled="false"/>
 
 		<!-- Let calls hit the dialplan before selecting codec for the a-leg -->
-		<param name="inbound-late-negotiation" value="true"/>
-
-		<!-- Allow ZRTP clients to negotiate end-to-end security associations (also enables late negotiation) -->
-		<param name="inbound-zrtp-passthru" value="true"/>
+		<param name="inbound-late-negotiation" value="true" enabled="false"/>
 
 		<!-- this lets anything register -->
 		<!--  comment the next line and uncomment one or both of the other 2 lines for call authentication -->