A method for establishing a media path between endpoints for intercepting and decrypting media traffic between an Real Time Communication, RTC, device and an RTC service using a communication protocol, where the media traffic is protected by encryption against man in the middle attacks using a fingerprint, for monitoring, analyzing and recording purposes, comprising: providing the RTC device comprising a first media endpoint and a second media endpoint and an RTC server and an intercepting gateway, each of the RTC device, the second media endpoint, the RTC server and the intercepting gateway storing software implementing the method in a memory and a processor coupled to the memory; further comprising: integrating, with the intercepting gateway, a proxy for the communication protocol used by the RTC service and a media server, each of the proxy and the media server storing software implementing the method in a memory and a processor coupled to the memory; characterized by: establishing the RTC media path, by the RTC device, between the RTC device and the media server and, by the RTC device, between the media server and the second media endpoint, and by the proxy rewriting messages (164, 164b); arranging the fingerprint, by the proxy rewriting the messages (164, 164b), for the interception, decryption and transferring of the RTC media traffic via the media server; and configuring the RTC device to use said proxy for the communication protocol used by the RTC service; whereby media traffic is intercepted and decrypted by establishing a media path through an intercepting gateway in a telecommunication service using fingerprint to protect against man in the middle attacks. providing the RTC device comprising a first media endpoint and a second media endpoint and an RTC server and an intercepting gateway, each of the RTC device, the second media endpoint, the RTC server and the intercepting gateway storing software implementing the method in a memory and a processor coupled to the memory; further comprising: integrating, with the intercepting gateway, a proxy for the communication protocol used by the RTC service and a media server, each of the proxy and the media server storing software implementing the method in a memory and a processor coupled to the memory; characterized by: establishing the RTC media path, by the RTC device, between the RTC device and the media server and, by the RTC device, between the media server and the second media endpoint, and by the proxy rewriting messages (164, 164b); arranging the fingerprint, by the proxy rewriting the messages (164, 164b), for the interception, decryption and transferring of the RTC media traffic via the media server; and configuring the RTC device to use said proxy for the communication protocol used by the RTC service; whereby media traffic is intercepted and decrypted by establishing a media path through an intercepting gateway in a telecommunication service using fingerprint to protect against man in the middle attacks. integrating, with the intercepting gateway, a proxy for the communication protocol used by the RTC service and a media server, each of the proxy and the media server storing software implementing the method in a memory and a processor coupled to the memory; characterized by: establishing the RTC media path, by the RTC device, between the RTC device and the media server and, by the RTC device, between the media server and the second media endpoint, and by the proxy rewriting messages (164, 164b); arranging the fingerprint, by the proxy rewriting the messages (164, 164b), for the interception, decryption and transferring of the RTC media traffic via the media server; and configuring the RTC device to use said proxy for the communication protocol used by the RTC service; whereby media traffic is intercepted and decrypted by establishing a media path through an intercepting gateway in a telecommunication service using fingerprint to protect against man in the middle attacks. establishing the RTC media path, by the RTC device, between the RTC device and the media server and, by the RTC device, between the media server and the second media endpoint, and by the proxy rewriting messages (164, 164b); arranging the fingerprint, by the proxy rewriting the messages (164, 164b), for the interception, decryption and transferring of the RTC media traffic via the media server; and configuring the RTC device to use said proxy for the communication protocol used by the RTC service; whereby media traffic is intercepted and decrypted by establishing a media path through an intercepting gateway in a telecommunication service using fingerprint to protect against man in the middle attacks.