diff --git a/resources/templates/conf/sip_profiles/internal.xml.noload b/resources/templates/conf/sip_profiles/internal.xml.noload
index e58c0e26bb..96b60b5538 100644
--- a/resources/templates/conf/sip_profiles/internal.xml.noload
+++ b/resources/templates/conf/sip_profiles/internal.xml.noload
@@ -238,6 +238,7 @@
 		<!-- add a ;received="<ip>:<port>" to the contact when replying to register for nat handling -->
 		<param name="NDLB-received-in-nat-reg-contact" value="true" enabled="false"/>
 		<param name="auth-calls" value="true"/>
+		<param name="auth-subscriptions" value="true"/>
 		<!-- Force the user and auth-user to match. -->
 		<param name="inbound-reg-force-matching-username" value="true"/>
 		<!-- on authed calls, authenticate *all* the packets not just invite -->