Application Security. Corporate Communication Solutions. IP Touch Security & Session Border Controller. André Liesenfeld - April, 2009

Size: px
Start display at page:

Download "Application Security. Corporate Communication Solutions. IP Touch Security & Session Border Controller. André Liesenfeld - April, 2009"

Transcription

1 Corporate Communication Solutions Application Security IP Touch Security & Session Border Controller André Liesenfeld - April, Security Tour Juni 2009

2 Agenda 1. IP Touch Security Lösungsübersicht 2. ICS und Teamwork Security 3. How to Quote IP Touch Security - Actis 4. How to Deploy IP Touch Security Hardware 5. Session Border Controller 2 Security Tour Juni 2009

3 Einleitung Zielsetzung von IP Telephony Security Denial of Service (DoS) Eavesdropping Verfügbarkeit Vertraulichkeit DOS Attacken Abwehr auf die Verfügbarkeit des Benutzers Wire-Speed Encryption von Sprache und Call Control Signalisierung 3 Security Tour Juni 2009

4 Einleitung Zielsetzung von IP Telephony Security Integrität von Call Control Signalisierung, Signierte IP Touch und IP Mediagateway Binaries, Schutz gegen illigalen ARP Anfragen Authentifizierung von Netzwerk Elementen ( Call Server, IP Mediagateways, IP Telefonen, Switchen ) Man-in-the Middle Spoofing Integrität Authentifizierung 4 Security Tour Juni 2009

5 Einleitung Gesetzes Vorgaben für Provider und Carrier Telekommunikationsgesetz 110 Umsetzung von Überwachungsmaßnahmen, Erteilung von Auskünften (1) Wer eine Telekommunikationsanlage betreibt, mit der Telekommunikationsdienste für die Öffentlichkeit erbracht werden, hat 1. ab dem Zeitpunkt der Betriebsaufnahme auf eigene Kosten technische Einrichtungen zur Umsetzung gesetzlich vorgesehener Maßnahmen zur Überwachung der Telekommunikation vorzuhalten und organisatorische Vorkehrungen für deren unverzügliche Umsetzung zu treffen, 2. 1a. in Fällen, in denen die Überwachbarkeit nur durch das Zusammenwirken von zwei oder mehreren Telekommunikationsanlagen sichergestellt werden kann, die dazu erforderlichen automatischen Steuerungsmöglichkeiten zur Erfassung und Ausleitung der zu überwachenden Telekommunikation in seiner Telekommunikationsanlage bereitzustellen sowie eine derartige Steuerung zu ermöglichen, 5 Security Tour Juni 2009

6 1 IP Touch Security Lösungsübersicht 6 Security Tour Juni 2009

7 IP Touch Security Lösung Security module IP Touch Technologische Patnerschaft zw. Alcatel-Lucent und Thales und Wind River Server Security Module (SSM) und Media Security Module (MSM) Spezialisterte Verschlüsselungshardware (Thales Mistral) Schutz vor Deaktivierung der Verschlüsselung Sichere Download-Konfigurationsdaten durch Digitale Signatur Ermöglicht auch unverschlüsselte Kommunikation zw. IPTouch und e-reflexes, SIP, H.323 Secured IP Touch from Alcatel-Lucent Integierte IPTouch Security Firmware (sowohl für Verschlüssung und unverschlüsselte Gespräche) 7 Security Tour Juni 2009

8 IP Touch-Encryption Display-Anzeige Um die Verschlüsselung während des Gesprächs anzuzeigen gibt es bei den IP Touch 4028/4038/4068 und bei den Softphones eine Verschlüsselungs-Anzeige im Display 4008 & ALU Softphones* No Padlock icon Padlock icon when the communication is secure * MyIC Softphone (4980 IP Softphone und Websoftphone) und IP Desktop Softphone (Emulation des 4068) 8 Security Tour Juni 2009

9 Sichere IP Touch-Encryption Symmetrical-Key s Einzel- Key für jede Richtung (Kv1 und Kv2) (ankommende und abgehende Daten mit verschiedenen Schlüsseln) Schlüssel-Vergabe über ESP (Encrypted Signaling Protocol) Neue Schlüssel für jedes Gespräch Com Server SSM-RM IP Network Kv1 IP Touch Kv2 SRTP MSM-box IP Touch 9 Security Tour Juni 2009

10 IP Touch Security Solution Einfache Security Struktur Hardware components: dedicated modules SSM (Server Security Module) Media Gateway Protects the Communication Server MSM (Media Security Module) Protects the IP Media Gateways Signaling call control and Voice encryption Encrypted Communication Servers SSM-RM Signaling Main Standby SSM-RM IP corporate network MSM-RM SRTP MSM-box Media Gateway Secure softphone Remote Site WAN MSM-box Secure IP Touch IPSec VPN 10 Security Tour Juni 2009

11 IP Touch Security Solution Einfache Security Struktur auch im Mixbetrieb TDM set C Communication Server TDM set A SSM-RM TDM set B (Unsecure) IPMG 2 GD Secure IP Touch IP corporate network MSM-box Unsecured RTP GD (Secure) IPMG 1 Gesicherte und nicht gesicherte IP Mediagateways können kommunizieren eine Verschlüsselung findet nicht statt, wenn TDM set A das TDM set C anruft 11 Security Tour Juni 2009

12 IP Touch Security Solution Einfache Security Struktur im Netzwerk OmniPCX Enterprise Node to Node Encryption Proprietary inter-node signaling protocol ABC is encrypted SSM of CALLED PARTY issues media encryption keys Node 1 Voice media keys used for encryption are generated by CS managing called party Comm. Server 1 SSM-RM MSM-box MSM-box SSM-RM Comm. Server 2 IP corporate network ABC Hybrid Link SRTP IP corporate network Node 2 Alice Bob 12 Security Tour Juni 2009

13 IP Touch Security Solution Hardware > Box model 1 clear port > MSM-box Secure Media Gateway and PCS Up to 120 simultaneous calls MSM-box Encryption MSM-box hardware will be phased out in May > Rack Mounted model 4 clear ports > SSM-RM Secure the Communication Server Up to IP Phones/Softphones Up to 300 MSM managed SSM/MSM-RM Encryption > MSM-RM Secure Media Gateway, PCS, OTUC servers, 3rd party media servers (eg voice logger) Up to 250 simultaneous calls Clear port 4 Clear ports Encrypted port IP corporate network 13 Security Tour Juni 2009

14 IP Touch Security Solution Integrity of Configuration File The initialization process protects against deactivation 1) SSM receives lanpbx.cfg and configbt.cfg files from Comm. Server 2) Signed lanpbx.cfg is sent back to CS with security parameters from SSM 3) Secure lanpbx.cfg is then distributed by TFTP to SSM and MSM Com Server Lanpbx.cfg 3 Signed lanpbx 2 Signed lanpbx During Init Signed lanpbx 3 1 lanpbx SSM-RM During Init Trying to bypass the SSM/MSM would result in configuration inconsistencies, and failed communications. Forcing reboot has no affect on security, since configuration files must be loaded prior to gateway use. All configuration files are digitally signed in order to assure validity. IPMG MSM-box IP Touch 14 Security Tour Juni 2009

15 IP Touch Security Solution MGSec: encryption of signaling Call Control in IP Media Gateway Alternative to MSM module to secure signaling flows between CS and IPMG. A VPN client based on IPSec standard protocol is embedded in the IPMG. Voice flows (RTP) are not encrypted. Communication Server SSM-RM Encrypted Signaling WAN Encrypted Signaling Thales VPN client embedded in IPMG - IPSec/IKE negociation based on PSK - HMAC/SHA1 for packets integrity check - AES 128bits for encryption of packets payload SRTP RTP IPMG IP Touch IP Touch PSTN 15 Security Tour Juni 2009

16 Demo eines ungesicherten Gesprächs - die Benutzung des gezeigen Tools ist Illegal und wird nur zum Demo Zweck verwendet 16 Security Tour Juni 2009

17 Demo Hallo André Wie du weißt, fahre ich morgen für ein paar Tage weg. Könntest Du bitte jeden Tag meine Mails lesen. Mein Passwort bei Freecryptomail ist alles frei. Kannst du außerdem morgen meine Blumen gießen? Der Wohungsschlüssel liegt unter der Fußmatte. Falls Du meine Bankkarte suchst, die liegt im Wohnzimmer, die Geheimnummer ist Solltest du im Netz was schönes als Geburtstagsgeschenk für meine Oma sehen, kauf es doch gleich. Kannst direkt mit meiner Kreditkarte bezahlen, die Nummer lautet und ist Gültig bis Juli 2010 Danke Dir Bis in zwei Wochen 17 Security Tour Juni 2009

18 2 ICS und Teamwork Security 18 Security Tour Juni 2009

19 IP Touch Security Solution Protection of applications OmniTouch Unified Communication Encryption of signaling and voice media stream for OTUC applications is integrated in our solution since OXE R8 and OTUC R5. MyIC Softphone Com server SSM-RM ICS/OTUC servers MSM-RM Teamwork server MSM-RM MSM IPMG PSTN 19 Security Tour Juni 2009

20 OTUC/ICS service : Encryption Encryption of voice media flows (1/2) Voice flows encryption (example 1) Keys are transmitted in the UA connection messages ComServer Secured signaling link Voice keys SSM Voice keys CSTA make call OTUC/ICS MSM New call IP network IP Touch (B) OR ALU softphone (B) ALU softphone (A) Secured RTP voice flow establishment 20 Security Tour Juni 2009

21 OTUC/ICS service : Encryption Encryption of voice media flows (2/2) Voice flows encryption (example 2) Keys are transmitted in the UA connection messages ComServer UA set (B) Voice keys SSM Secured signaling link Voice keys CSTA make call OTUC/ICS MSM IPMG New call MSM IP network IPMG transmits the key to the MSM ALU softphone (A) Secured RTP voice flow establishment 21 Security Tour Juni 2009

22 Encryption with OmniTouch UC R5 OmniTouch UC R5 Telephony service IP Web Softphone Or MyIC HTTPS flow UA sig & Key exch Com server SSM-RM UC servers UC Media servers SIP sig MSM-RM UC Application servers UC Middleware (OTS /ACAPI) VXML/ control sig HTTP MSM-RM MSM-RM CSTA/ACAPI ATAPI IPMG MSM-box SRTP (TUI Access) Initialization sig Mandatory for softphone encryption Encrypted RTP Non Encrypted Signaling HTTPS flow IP 4980 Softphone Encrypted Signaling 22 Security Tour Juni 2009

23 Encryption with OmniTouch UC R5 OmniTouch UC R5 Messaging service Com server UC servers UC Media servers UC Application servers Mail server (Domino/Exchange) SSM-RM SIP sig MSM-RM VXML/ control sig HTTP MSM-RM Proprietary or IMAP4 sig SRTP (TUI Access) Encrypted RTP Encrypted Signaling Non Encrypted flows 23 Security Tour Juni 2009

24 Encryption with OmniTouch UC R5 OmniTouch UC R5 Teamwork service IP Web Softphone or MyIC Com server UC servers My Teamwork server SSM-RM MSM-RM HTTPS flow SIP sig HTTPS flow MSM-box SRTP (TUI Access) IPMG Encrypted RTP IP 4980 Softphone HTTPS flow Encrypted Signaling 24 Security Tour Juni 2009

25 Encryption with OmniTouch UC R5 OmniTouch UC R5 One Number service IP Web Softphone Or MyIC Com server UC servers UC Media Server UC Application Server SSM-RM SIP sig MSM-RM VXML/ control sig HTTP MSM-RM HTTPS flow MSM-box SRTP (TUI Access) HTTPS flow IPMG Encrypted RTP HTTPS flow IP 4980 Softphone Encrypted Signaling 25 Security Tour Juni 2009

26 Zusammenfassung 26 Security Tour Juni 2009

27 IP Touch Security Solution Zusammenfassung OTUC/ICS server Authentication der Netzwerkelemente Calculated PSK/IKE Media Security Module IP ( unsecure ) corporate network IPMG Com server Server Security Module + Authentication Authority SRTP/AES IPSec/AES IP Touch Confidentiality Verschlüsselung der Sprache und der Signalisierung ALU Softphones Integrity Signierte Binaries und Call Control HMAC/SHA1 27 Security Tour Juni 2009

28 Supported RFC s in Release 9.0 SIP 2543 (obsolete by RFC 3261,3262, 3263,3264, 3265) :SIP: Session Initiation Protocol 2782:A DNS RR for specifying the location of services (DNS SRV) 2822: Internet Message Format 3261: SIP: Session Initiation Protocol 3262: Reliability of Provisional Responses in SIP (PRACK) 3263: SIP: Locating SIP Servers 3264: An Offer / Answer model with SDP 3265: SIP-Specific Event Notification 3323: Privacy Mechanism for the Session Initiation Protocol (SIP) 3324: Short term requirements for network asserted identity 3325: Private Extensions to the Session Initiation Protocol (SIP) for Asserted Identity within Trusted Networks 28 Security Tour Juni 2009

29 Supported RFC s in Release 9.0 (cont d) SIP 3515: The Session Initiation Protocol (SIP) refer method 3891/3892: The Session Initiation Protocol (SIP) 'Replaces' Header/ Referred-By Mechanism 4497: Inter-working between SIP and QSIG MMUSIC (Multiparty Multimedia Session Control) 2327: SDP: Session Description protocol IP Telephony 2617: HTTP Authentication : Basic and Digest Access Authentication 1321: Authentication for Outgoing calls 2833/4733: DTMF Transparency. RFC 2833 replaced by RFC : A message Summary and Message Waiting Indication Event Package 4028: The session timers int the Session Initiation Protocol 29 Security Tour Juni 2009

30 Supportesd RFC s in Release 9.0 (cont d) IP Telephony 3725: Best current practices for Third party Call Control (3 pcc) in SIP (scenario 1). Invite w/o SDP. 3960: Early Media (partial) AFT (Audio fax Transmission) 1889/1890: RTP : A transport protocol for Real-Time applications 2198: RTP Payload for Redundant Audio data 3550: RTP: A Transport Protocol for Real-Time application (audio only) 3551: RTP Profile for Audio and Video Conferences with Minimal Control (audio only) 3711: The Secure Real Time. Supported on A-LU IP Phone and Softphone 3362: T38 ITU-T Procedures for real time Group3 Fax Relay / communications over IP 30 Security Tour Juni 2009

31 Supported RFC s in Release 9.0 (cont d) SIP third party minimum pre-requisites : Support of SIP RFC3261, RFC2782, RFC3264, RFC3325, RFC3515, RFC3891, RFC3892, RFC4028, TCP-IP/UDP Voic indicators: RFC3265, RFC3842 Voice stream RTP/RTCP Codecs G711, G729, G723.1, RFC2833 or RFC4733 DHCP client, TFTP client SNMP agent PoE 802.3af Authentication TLS SIP Server fail over SIP stack compliant IP V6 31 Security Tour Juni 2009

32 Q & A 32 Security Tour Juni 2009

33 3 How to Quote IP Touch Security - Actis 33 Security Tour Juni 2009

34 ACTIS/IP Touch Security Licences Hardware SSM-RM 3BA27698AA SERVER SECURITY MODULE RM (SSM-RM) MSM-RM 3BA27699AA MEDIA SECURITY MODULE RM (MSM-RM) Software Licences: MSM-box 3BA27680AA MEDIA SECURITY MODULE BOX (MSM-BOX) Server SWL base (3BA09078JA ENCRYPTION SERVER BASE) No user Server SWL 500 IP user package (3BA09079JA ENCRYPTION SERVER 500 IP USERS) (up to 30 packages to reach IP users) MSM-box hardware will be phased out in May IPMG SWL:(3BA09973AA ENCRYPTION MEDIA GATEWAY) Required if more than 32 phones (Common Hardware), but mandatory in any case on Crystal. 34 Security Tour Juni 2009

35 ACTIS/IP Touch Security Licences (cont) Migration to Rel 9.0 from an earlier Rel ( ) Free migration of former Server SWL IP users (10 «500 licence package» free) MSM-box modules can still be ordered using calculated mode in Common Hardware and also in Crystal Hardware (peripheral Crystal only), but MSM-box cannot be used with application servers (UC, MyTeamwork, IP voice logger). RM modules and Box modules can be mixed in the same OXE node for different Media Gateways with no problem of interoperability. When doing migration from previous release to Rel 9.0, existing SSM-box are automatically replaced by SSM-RM modules as SSM-box is no more supported in latest release. ACTIS will help determining the correct configuration to apply 35 Security Tour Juni 2009

36 ACTIS/IP Touch Security Licences (cont) Software Licences a) Encryption Server Base: Caution: there is no IPT user licence associated. b) Encryption Server 500 IP User: Up to 30 packages to reach IP Users Example: 4400 IP users on the node 4400 divided by 500 = 9 packages to be ordered. c) Encryption Server Migration 500 IP Users that is a free software licence ordered in case of migration to OXE R9.0 (from a R6.2 up to R7.1 configuration already having IP Touch Security). 36 Security Tour Juni 2009

37 ACTIS/IP Touch Security Central Area Common Hardware (Central) Calculated mode The first checkbox enables Secure IP Touch for the ACTIS offer. This provides the core engine license and the initial SSM hardware. The second checkbox indicates whether UPS units should be provided for all SSM/MSM in the central area. The third checkbox allows either to force a SSM/MSM-RM choice or to select the calculated mode (MSM box ability if relevant) Unless LAN switches are provided, a LANX16 may be required. Crystal Hardware (Central) No Calculated mode Central area based on Crystal Hardware offers the ability to control whether MSM in the central area will each support 1 or several INTIP, but at the same time forces a SSM/MSM-RM configuration. 37 Security Tour Juni 2009

38 ACTIS/IP Touch Security Communication Server Redundant Communication Servers can be supported by a single SSM, but this introduces a single point of failure. In most cases, it is recommended that duplicated SSM be used for redundant CS configs. 38 Security Tour Juni 2009

39 ACTIS/IP Touch Security 4645 To provide encryption resources for A4645 proposed on Dedicated Hardware (MR1 or Appliance Server), the MSM for 4645 checkbox must be selected. 39 Security Tour Juni 2009

40 ACTIS/IP Touch Security Peripheral Area Common Hardware (Peripheral) Calculated mode If encryption is desired for Common Hardware IPMG, then you must select the Secure IP Touch feature and decide whether or not to provide the UPS power option. SSM/MSM-RM forced mode or calculated mode (MSM box ability if relevant) Again; unless LAN switches are provided, a LANX16 may be required. Crystal Hardware (Peripheral) Calculated mode If encryption is desired for Crystal Hardware, then you must select the Secure IP Touch feature and decide whether or not to provide the UPS power option. Peripheral area based on Crystal Hardware offers the ability to control whether MSM in the peripheral area will each support 1 or several INTIP. SSM/MSM-RM forced mode or calculated mode (MSM box ability if relevant) 40 Security Tour Juni 2009

41 ACTIS/IP Touch Security Peripheral Area Configuration of Signaling encryption in IPMG (instead of a MSM hardware module) 41 Security Tour Juni 2009

42 ACTIS/IP Touch Security Peripheral Area Limitations with Encryption of Signaling in IPMG (MGSec): Voice and Fax flows managed by the IPMG are not encrypted Max number of connected equipments (fax, phone) = 50 Max number of VoIP channels = 20 Max BHCC = 300 calls/hour Design rules with Encryption of Signaling in IPMG (MGSec): Available only in a peripheral Area Available only on Common Hardware NOT Crystal Hardware Limitations will be checked by ACTIS and in case the configuration is refused because of one of the limitations then a MSM module must be proposed. If a PCS is used to secure the IPMG and PCS must be able to encrypt communications then a MSM module must be proposed. 42 Security Tour Juni 2009

43 ACTIS/IP Touch Security ICS Check the box for encryption and enter the number of needed MSM module considering that one OTUC server requires one MSM module. MSM-RM is configured in any case as MSM-box is not supported for OTUC server. 43 Security Tour Juni 2009

44 4 How to Deploy IP Touch Security - Hardware 44 Security Tour Juni 2009

45 Deployment Topologies: Information For more details and latest updated rules please refer to the document Product Limits OXE R9.0. MSM-box hardware will be phased out in May Security Tour Juni 2009

46 Deployment Topologies: CS (Com Server) in Common Hardware Com Server CS + GD IPMG MSM-box SSM-RM Small configuration without SSM duplication and up to 1500 IP Touch Main CS Standby CS CS CS SSM-RM Possible but Not recommended (Single Point of Failure) Up to 1500 IP Touch 1 GD and up to 4 GA (MSM-box) MSM-RM Main CS Standby CS SSM-RM Main CS Standby CS SSM-RM Up to 2 GDs and 8 GAs (MSM-RM) 46 Security Tour Juni 2009

47 Deployment Topologies: CS (Com Server) in Crystal Com Server CPU + INTIP Main CPU CPU INTIP SSM-RM SSM-RM Small configuration without CS redundancy and up to 1500 IP Touch IPMG INTIP INTIP INTIP INTIP INTIP INTIP MSM-box MSM-box Warning: MSM-boxes are only supported on Peripheral Crystal (in the limit of 2 INTIPs) MSM-RM MSM-RM MSM-RM MSM-RM Configuration if «1 MSM per INTIP card» is selected Standby CPU Main SSM-RM SSM-RM INTIP MSM-RM A MSM-RM can handle up to 4 INTIP cards (IOIP/INTIP-A/INTIP-B). ACTIS requires 2 MSM-RM as soon as 2 INTIP-B are configured. Standby SSM-RM 47 Security Tour Juni 2009

48 Deployment Topologies: PCS (Passive Com Server) in Common Harware MSM shared between PCS and GD PCS + GD MSM-box MSM dedicated to PCS MSM-box PCS PCS Up to 500 IP Touch sets Up to 1500 IP Touch sets GD MSM-RM MSM-RM PCS PCS PCS Up to 1500 IP Touch sets Up to IP Touch sets 48 Security Tour Juni 2009

49 Deployment Topologies: PCS (Passive Com Server) in Crystal MSM shared between PCS and INTIP MSM dedicated to PCS PCS Crystal MG MSM-box External Switch (not provided by ACTIS) Up to 500 IP Touch sets PCS MSM-box Up to 1500 IP Touch sets Crystal MG PCS Up to 1500 IP Touch sets MSM-RM PCS MSM-RM Up to IP Touch sets 49 Security Tour Juni 2009

50 Deployment Topologies: Blade Center Com Server Main CS SSM-RM MAIN & Standby Com Servers are in the same Blade chassis Standby CS SSM-RM Main CS SSM-RM Standby CS MAIN & Standby Com Servers are in separate Blade chassis SSM-RM 50 Security Tour Juni 2009

51 5 Session Border Controller 51 Security Tour Juni 2009

52 Session Border Controller - was ist das? Ein Session Border Controller ist ein Verbindungsglied zwischen zwei VoIP Netzen und steuert den Signalisierungs- und Medienstrom hinsichtlich Sicherheit, Quality of Service und Unternehmensgrundsätzen. Session : Gespräch, inklusive Signalisierung und Medienstrom Border : Übergangspunkt eines IP-Netzes zu einem anderen IP-Netz Control : Funktionen zur Durchsetzung von Sicherheit, Servicegarantien und Richtlinien Medientransportproxy (MP) Internet Media Signalling Voice, Video Data SIP, H.323, MGCP, UA Basisfunktionen: - SIP Hosted NAT Traversal (HNAT) - Schutz vor DoS, IP Spoofing, Integrity Check, Statefull Inspection - Firewall mit Dynamic Pinholing (SIP based) - Beachtung von Echtzeitbedingungen (Delay, Jitter) Signalisierungsproxy (ALG) Session Border Controller (SBC) 52 Security Tour Juni 2009

53 Wozu Enterprise Session Border Conroller? Session Control: SIP Security auf Applikationsebene (SIP Proxy) Border: das grenzenlose Unternehmen benötigt Steuerung zw. Vertrauenswürdiger und nicht-vertrauenswürdigen Umgebungen Trusted area Com Server DMZ SBC functions Un-trusted areas SIP Carrier Gateway VoIP Carrier s network OXE Public SIP Trunking Data FW/VPN Internet Home or hotspot WLAN SIP Mobile Worker corporate network SIP Remote Office VLAN 1 VLAN 2 VLAN 3 Hosted OXE Services 53 Security Tour Juni 2009

54 Home Worker Nat Traversal: Umsetzung einer Öffentlichen IP Adresse in eine Private IP Adresse, damit der RTP Strom zum CallServer gelangen kann NOE CS: RTP SIP RTP Dynamic IP SIP WAN WAN User: IP Address: Mask: Gateway: SIP Registrar: SIP Proxy: SIP-ALG Softswitch: : Security Tour Juni 2009

55 Home Worker mit encryption Thales Unterstützung: Secure Unterstützung der Signalisierung von SIP zu SIP/TLS und der Verschlüsselung der Sprache mit SRTP NOE CS: SIP NOE/IPSec SIP/TLS SRTP Dynamic IP SIP/TLS WAN WAN SRTP User: IP Address: Mask: Gateway: SIP Registrar: SIP Proxy: SIP-ALG Softswitch: : Security Tour Juni 2009

56 Public SIP Trunking Trunking Unterstützung: Der SBC als Secure Element zur Unterstützung des SBC beim SIP Carrier durch Standard RFC s SIP Ext Gateway SIP Remote Domain: kt.co.kr SIP Port Number: 5060 SIP Outbound Proxy: Trunk Group Number: 26 Outgoing user name: Outgoing password: SIP Carrier NOE CS: RTP SIP WAN WAN RTP SIP Softswitch PSTN PSTN SIP-ALG Softswitch: :5060 Gateway 56 Security Tour Juni 2009

57 Public SIP Trunking with encryption Secure Trunking Unterstützung: Der SBC dient als Verschlüsselungsorgan zum SIP Carrier. Hierbei wird das Gespräch bis zum Carrier verschlüsselt. SIP Ext Gateway SIP Remote Domain: kt.co.kr SIP Port Number: 5060 SIP Outbound Proxy: Trunk Group Number: 26 Outgoing user name: Outgoing password: NOE CS: SIP NOE/IPSec SIP Carrier SIP/TLS SRTP SIP/TLS WAN WAN SRTP Softswitch PSTN PSTN SIP-ALG Softswitch: :5060 Gateway Im Öffentlichen Netz wird nicht Verschlüsselt!!! 57 Security Tour Juni 2009

58 Encryption standards in use 58 Security Tour Juni 2009

59 Encryption standards in use 59 Security Tour Juni 2009

60 Q & A 60 Security Tour Juni 2009

61 61 Security Tour Juni 2009

Alcatel OmniPCX Enterprise R11 Supported SIP RFCs

Alcatel OmniPCX Enterprise R11 Supported SIP RFCs Alcatel OmniPCX Enterprise R11 Supported SIP RFCs Product & Offer Large & Medium Enterprise Ref: 8AL020033225TCASA ed3 ESD/ Mid & Large Enterprise Product Line Management October 2013 OmniPCX Enterprise

More information

Recommended IP Telephony Architecture

Recommended IP Telephony Architecture Report Number: I332-009R-2006 Recommended IP Telephony Architecture Systems and Network Attack Center (SNAC) Updated: 1 May 2006 Version 1.0 SNAC.Guides@nsa.gov This Page Intentionally Left Blank ii Warnings

More information

Business integrated Communication Solution Release 2.2

Business integrated Communication Solution Release 2.2 Please be environment conscious and print this document only if necessary Alcatel-Lucent Business integrated Communication Solution Release 2.2 Questions & Answers May 2010 8AL020033582DRARA Version 1

More information

SIP A Technology Deep Dive

SIP A Technology Deep Dive SIP A Technology Deep Dive Anshu Prasad Product Line Manager, Mitel June 2010 Laith Zalzalah Director, Mitel NetSolutions What is SIP? Session Initiation Protocol (SIP) is a signaling protocol for establishing

More information

OpenScape Session Border Controller Delivering security, interoperability and cost savings to the enterprise network border

OpenScape Session Border Controller Delivering security, interoperability and cost savings to the enterprise network border Siemens Enterprise Communications Session Border Controller Delivering security, interoperability and cost savings to the enterprise network border April 2011 Agenda 1 Industry Trends 2 Customer Initiatives

More information

SIP Trunking Manual 05.15. Technical Support Web Site: http://ws1.necii.com (registration is required)

SIP Trunking Manual 05.15. Technical Support Web Site: http://ws1.necii.com (registration is required) SIP Trunking Manual 05.15 Technical Support Web Site: http://ws1.necii.com (registration is required) This manual has been developed by NEC Unified Solutions, Inc. It is intended for the use of its customers

More information

Securing SIP Trunks APPLICATION NOTE. www.sipera.com

Securing SIP Trunks APPLICATION NOTE. www.sipera.com APPLICATION NOTE Securing SIP Trunks SIP Trunks are offered by Internet Telephony Service Providers (ITSPs) to connect an enterprise s IP PBX to the traditional Public Switched Telephone Network (PSTN)

More information

Business integrated Communication Solution (BiCS) Release 2.2 What s New? Solution Presentation

Business integrated Communication Solution (BiCS) Release 2.2 What s New? Solution Presentation Business integrated Communication Solution (BiCS) Release 2.2 What s New? Solution Presentation Application Softare Group Apr 2010 Edition 2 Ref. 8AL020033581DRARA All rights reserved 2007, Alcatel-Lucent

More information

Why a Reverse Proxy with My Instant Communicator for mobiles??

Why a Reverse Proxy with My Instant Communicator for mobiles?? Why a Reverse Proxy with My Instant Communicator for mobiles?? INTEGRATED COMMUNICATION SYSTEMS 8AL020043359DRARA, February 2010 What is OmniTouch 8600 My Instant Communicator? Is an aggregator of all

More information

BROADSOFT PARTNER CONFIGURATION GUIDE VEGASTREAM VEGA 100

BROADSOFT PARTNER CONFIGURATION GUIDE VEGASTREAM VEGA 100 BROADSOFT PARTNER CONFIGURATION GUIDE VEGASTREAM VEGA 100 JULY 2005 Version 1.0 BroadWorks Guide Copyright Notice Copyright 2005 BroadSoft, Inc. All rights reserved. Any technical documentation that is

More information

Application Notes for Avaya IP Office 7.0 Integration with Skype Connect R2.0 Issue 1.0

Application Notes for Avaya IP Office 7.0 Integration with Skype Connect R2.0 Issue 1.0 Avaya Solution & Interoperability Test Lab Application Notes for Avaya IP Office 7.0 Integration with Skype Connect R2.0 Issue 1.0 Abstract These Application Notes describe the steps to configure an Avaya

More information

This specification this document to get an official version of this User Network Interface Specification

This specification this document to get an official version of this User Network Interface Specification This specification describes the situation of the Proximus network and services. It will be subject to modifications for corrections or when the network or the services will be modified. Please take into

More information

SIP Trunking Service Configuration Guide for Broadvox Fusion

SIP Trunking Service Configuration Guide for Broadvox Fusion Notice Note that when converting this document from its original format to a.pdf file, some minor font and format changes may occur. When viewing and printing this document, we cannot guarantee that your

More information

Session Border Controllers in Enterprise

Session Border Controllers in Enterprise A Light Reading Webinar Session Border Controllers in Enterprise Thursday, October 7, 2010 Hosted by Jim Hodges Senior Analyst Heavy Reading Sponsored by: Speakers Natasha Tamaskar VP Product Marketing

More information

AV@ANZA Formación en Tecnologías Avanzadas

AV@ANZA Formación en Tecnologías Avanzadas SISTEMAS DE SEÑALIZACION SIP I & II (@-SIP1&2) Contenido 1. Why SIP? Gain an understanding of why SIP is a valuable protocol despite competing technologies like ISDN, SS7, H.323, MEGACO, SGCP, MGCP, and

More information

SIP Essentials Training

SIP Essentials Training SIP Essentials Training 5 Day Course Lecture & Labs COURSE DESCRIPTION Learn Session Initiation Protocol and important protocols related to SIP implementations. Thoroughly study the SIP protocol through

More information

Avaya IP Office 8.1 Configuration Guide

Avaya IP Office 8.1 Configuration Guide Avaya IP Office 8.1 Configuration Guide Performed By tekvizion PVS, Inc. Contact: 214-242-5900 www.tekvizion.com Revision: 1.1 Date: 10/14/2013 Copyright 2013 by tekvizion PVS, Inc. All Rights Reserved.

More information

MITEL SIP CoE. Technical. Configuration Notes. Configure the Mitel 3300 MCD 4.1 for use with Paetec Broadworks Softswitch. SIP CoE 08-4940-00035

MITEL SIP CoE. Technical. Configuration Notes. Configure the Mitel 3300 MCD 4.1 for use with Paetec Broadworks Softswitch. SIP CoE 08-4940-00035 MITEL SIP CoE Technical Configuration Notes Configure the Mitel 3300 MCD 4.1 for use with Broadworks Softswitch SIP CoE 08-4940-00035 NOTICE The information contained in this document is believed to be

More information

SIP Trunking Service Configuration Guide for Skype

SIP Trunking Service Configuration Guide for Skype SIP Trunking Service Configuration Guide for Skype NDA-31154 Issue 1.0 NEC Corporation of America reserves the right to change the specifications, functions, or features at any time without notice. NEC

More information

EarthLink Business SIP Trunking. NEC SV8300 IP PBX Customer Configuration Guide

EarthLink Business SIP Trunking. NEC SV8300 IP PBX Customer Configuration Guide EarthLink Business SIP Trunking NEC SV8300 IP PBX Customer Configuration Guide Publication History First Release: Version 1.0 May 18, 2012 CHANGE HISTORY Version Date Change Details Changed By 1.0 5/18/2012

More information

1 ABSTRACT 3 2 CORAL IP INFRASTRUCTURE 4

1 ABSTRACT 3 2 CORAL IP INFRASTRUCTURE 4 Coral IP Solutions TABLE OF CONTENTS 1 ABSTRACT 3 2 CORAL IP INFRASTRUCTURE 4 2.1 UGW 4 2.2 IPG 4 2.3 FLEXSET IP 5 2.4 FLEXIP SOFTPHONE 6 2.5 TELEPORT FXS/FXO GATEWAYS 7 2.6 CORAL SENTINEL 7 3 CORAL IP

More information

IP Touch 4088 EE/4018 EE SIP Phone installation manual

IP Touch 4088 EE/4018 EE SIP Phone installation manual IP Touch 4088 EE/4018 EE SIP Phone installation manual 8AL90824AAAAed01 October, 2009 Alcatel-Lucent All Rights Reserved Alcatel-Lucent 2009 1. Overview... 3 2. SIP Stand-Alone Mode... 3 2.1. Initializing

More information

Voice over IP Basics for IT Technicians

Voice over IP Basics for IT Technicians Voice over IP Basics for IT Technicians White Paper Executive summary The IP phone is coming or has arrived on desk near you. The IP phone is not a PC, but does have a number of hardware and software elements

More information

Voice over IP. VoIP (In) Security. Presented by Darren Bilby NZISF 14 July 2005

Voice over IP. VoIP (In) Security. Presented by Darren Bilby NZISF 14 July 2005 Voice over IP VoIP (In) Security Presented by Darren Bilby NZISF 14 July 2005 Security-Assessment.com Who We Are NZ s only pure-play security firm Largest team of security professionals in NZ Offices in

More information

SIP Trunking Service Configuration Guide for Time Warner Cable Business Class

SIP Trunking Service Configuration Guide for Time Warner Cable Business Class SIP Trunking Service Configuration Guide for Time Warner Cable Business Class NDA-31669 Issue 1.0 NEC Corporation of America reserves the right to change the specifications, functions, or features at

More information

Proximus can't be held responsible for any damages due to the use of an outdated version of this specification.

Proximus can't be held responsible for any damages due to the use of an outdated version of this specification. This specification describes the situation of the Proximus network and services. It will be subject to modifications for corrections or when the network or the services will be modified. Please take into

More information

VoIP Application Note:

VoIP Application Note: VoIP Application Note: Configure NEC UX5000 w/ BroadVox SIP Trunking Service P/N 0913226 Date: 8/12/09 Table of Contents: GOAL... 3 PREREQUISITES... 3 SIP TRUNKING INFORMATION PROVIDED BY BROADVOX:...

More information

SIP Trunking Service Configuration Guide for PAETEC (Broadsoft Platform)

SIP Trunking Service Configuration Guide for PAETEC (Broadsoft Platform) Notice Note that when converting this document from its original format to a.pdf file, some minor font and format changes may occur. When viewing and printing this document, we cannot guarantee that your

More information

IP PBX. SD Card Slot. FXO Ports. PBX WAN port. FXO Ports LED, RED means online

IP PBX. SD Card Slot. FXO Ports. PBX WAN port. FXO Ports LED, RED means online 1 IP PBX SD Card Slot FXO Ports PBX LAN port PBX WAN port FXO Ports LED, RED means online 2 Connect the IP PBX to Your LAN Internet PSTN Router Ethernet Switch FXO Ports 3 Access the PBX s WEB GUI The

More information

6.40A AudioCodes Mediant 800 MSBG

6.40A AudioCodes Mediant 800 MSBG AudioCodes Mediant 800 MSBG Page 1 of 66 6.40A AudioCodes Mediant 800 MSBG 1. Important Notes Check the SIP 3 rd Party Validation Website for current validation status. The SIP 3 rd party Validation Website

More information

MITEL SIP CoE. Technical. Configuration Notes. Configure MCD 4.1 for use with SKYPE SIP Trunking. SIP CoE 10-4940-00120

MITEL SIP CoE. Technical. Configuration Notes. Configure MCD 4.1 for use with SKYPE SIP Trunking. SIP CoE 10-4940-00120 MITEL SIP CoE Technical Configuration Notes Configure MCD 4.1 for use with SKYPE SIP Trunking SIP CoE 10-4940-00120 NOTICE The information contained in this document is believed to be accurate in all respects

More information

Voice over IP (VoIP) Basics for IT Technicians

Voice over IP (VoIP) Basics for IT Technicians Voice over IP (VoIP) Basics for IT Technicians VoIP brings a new environment to the network technician that requires expanded knowledge and tools to deploy and troubleshoot IP phones. This paper provides

More information

MyIC setup and configuration (with sample configuration for Alcatel Lucent test environment)

MyIC setup and configuration (with sample configuration for Alcatel Lucent test environment) MyIC setup and configuration (with sample configuration for Alcatel Lucent test environment) N.B. Goto MyIC Preferences in the System Toolbar. Description: this may be any appropriate description of the

More information

Interactive Intelligence CIC 2015 R4 Patch1 Configuration Guide

Interactive Intelligence CIC 2015 R4 Patch1 Configuration Guide Interactive Intelligence CIC 2015 R4 Patch1 Configuration Guide Performed By tekvizion PVS, Inc. Contact: 214-242-5900 www.tekvizion.com Copyright 2015 by tekvizion PVS, Inc. All Rights Reserved. Confidential

More information

SIP Trunking Service Configuration Guide for MegaPath

SIP Trunking Service Configuration Guide for MegaPath Notice Note that when converting this document from its original format to a.pdf file, some minor font and format changes may occur. When viewing and printing this document, we cannot guarantee that your

More information

TLS and SRTP for Skype Connect. Technical Datasheet

TLS and SRTP for Skype Connect. Technical Datasheet TLS and SRTP for Skype Connect Technical Datasheet Copyright Skype Limited 2011 Introducing TLS and SRTP Protocols help protect enterprise communications Skype Connect now provides Transport Layer Security

More information

Voice over IP Fundamentals

Voice over IP Fundamentals Voice over IP Fundamentals Duration: 5 Days Course Code: GK3277 Overview: The aim of this course is for delegates to gain essential data networking and Voice over IP (VoIP) knowledge in a single, week-long

More information

MITEL SIP CoE. Technical. Configuration Notes. Configure MCD 6.X for use with babytel SIP trunks. SIP CoE 13-4940-00266

MITEL SIP CoE. Technical. Configuration Notes. Configure MCD 6.X for use with babytel SIP trunks. SIP CoE 13-4940-00266 MITEL SIP CoE Technical Configuration Notes Configure MCD 6.X for use with babytel SIP trunks SIP CoE 13-4940-00266 NOTICE The information contained in this document is believed to be accurate in all respects

More information

Application Notes for Configuring SIP Trunking between Metaswitch MetaSphere CFS and Avaya IP Office Issue 1.0

Application Notes for Configuring SIP Trunking between Metaswitch MetaSphere CFS and Avaya IP Office Issue 1.0 Avaya Solution & Interoperability Test Lab Application Notes for Configuring SIP Trunking between Metaswitch MetaSphere CFS and Avaya IP Office Issue 1.0 Abstract These Application Notes describe the steps

More information

Security Guidance for Deploying IP Telephony Systems

Security Guidance for Deploying IP Telephony Systems Report Number: I332-016R-2005 Security Guidance for Deploying IP Telephony Systems Systems and Network Attack Center (SNAC) Released: 14 February 2006 Version 1.01 SNAC.Guides@nsa.gov ii This Page Intentionally

More information

Abstract. Avaya Solution & Interoperability Test Lab

Abstract. Avaya Solution & Interoperability Test Lab Avaya Solution & Interoperability Test Lab Application Notes for Configuring SIP Trunking between the Verizon Business VoIP Service with IP Trunking and Avaya Communication Manager Branch Edition Issue

More information

IAC-BOX Network Integration. IAC-BOX Network Integration IACBOX.COM. Version 2.0.1 English 24.07.2014

IAC-BOX Network Integration. IAC-BOX Network Integration IACBOX.COM. Version 2.0.1 English 24.07.2014 IAC-BOX Network Integration Version 2.0.1 English 24.07.2014 In this HOWTO the basic network infrastructure of the IAC-BOX is described. IAC-BOX Network Integration TITLE Contents Contents... 1 1. Hints...

More information

District of Columbia Courts Attachment 1 Video Conference Bridge Infrastructure Equipment Performance Specification

District of Columbia Courts Attachment 1 Video Conference Bridge Infrastructure Equipment Performance Specification 1.1 Multipoint Control Unit (MCU) A. The MCU shall be capable of supporting (20) continuous presence HD Video Ports at 720P/30Hz resolution and (40) continuous presence ports at 480P/30Hz resolution. B.

More information

How to Configure the NEC SV8100 for use with Integra Telecom SIP Solutions

How to Configure the NEC SV8100 for use with Integra Telecom SIP Solutions How to Configure the NEC SV8100 for use with Integra Telecom SIP Solutions Overview: This document provides a reference for configuration of the NEC SV8100 IP PBX to connect to Integra Telecom SIP trunks.

More information

Remote Access & Security. Technology Overview. Markus Feeß Netze / Sicherheit SGK 2. Medizinische Technik Erlangen

Remote Access & Security. Technology Overview. Markus Feeß Netze / Sicherheit SGK 2. Medizinische Technik Erlangen Remote Access & Security Technology Overview Medizinische Technik Erlangen Markus Feeß Netze / Sicherheit SGK 2 1 John and the broken leg - Part I Archiv A? B C 2 WAN Technologies GSM Global System for

More information

ENTERPRISE SESSION BORDER CONTROLLERS: SAFEGUARDING TODAY S AND TOMORROW S UNIFIED COMMUNICATIONS

ENTERPRISE SESSION BORDER CONTROLLERS: SAFEGUARDING TODAY S AND TOMORROW S UNIFIED COMMUNICATIONS ENTERPRISE SESSION BORDER CONTROLLERS: SAFEGUARDING TODAY S AND TOMORROW S UNIFIED COMMUNICATIONS ALCATEL-LUCENT OPENTOUCH SESSION BORDER CONTROLLER A SECURE SOLUTION FOR BORDERLESS CONVERSATIONS APPLICATION

More information

BroadCloud PBX Customer Minimum Requirements

BroadCloud PBX Customer Minimum Requirements BroadCloud PBX Customer Minimum Requirements Service Guide Version 2.0 1009 Pruitt Road The Woodlands, TX 77380 Tel +1 281.465.3320 WWW.BROADSOFT.COM BroadCloud PBX Customer Minimum Requirements Service

More information

Ingate Firewall/SIParator SIP Security for the Enterprise

Ingate Firewall/SIParator SIP Security for the Enterprise Ingate Firewall/SIParator SIP Security for the Enterprise Ingate Systems February, 2013 Ingate Systems AB (publ) Tel: +46 8 600 77 50 BACKGROUND... 1 1 NETWORK SECURITY... 2 2 WHY IS VOIP SECURITY IMPORTANT?...

More information

NetComm V90 VoIP Phone Quick Start Guide Draft Release 0.1

NetComm V90 VoIP Phone Quick Start Guide Draft Release 0.1 NetComm V90 VoIP Phone Quick Start Guide Draft Release 0.1 Copyright NetComm Ltd Overview NetComm V90 SIP VoIP Phone User Guide Table of Contents Overview... 3 V90 VoIP Phone Specification...4 Shipping

More information

Voice over IP (VoIP) for Telephony. Advantages of VoIP Migration for SMBs BLACK BOX. 724-746-5500 blackbox.com

Voice over IP (VoIP) for Telephony. Advantages of VoIP Migration for SMBs BLACK BOX. 724-746-5500 blackbox.com Voice over IP (VoIP) for Telephony Advantages of VoIP Migration for SMBs BLACK BOX Hybrid PBX VoIP Gateways SIP Phones Headsets 724-746-5500 blackbox.com Table of Contents Introduction...3 About Voice

More information

Configuring the Edgewater 4550 for use with the Bluestone Hosted PBX

Configuring the Edgewater 4550 for use with the Bluestone Hosted PBX Configuring the Edgewater 4550 for use with the Bluestone Hosted PBX NOTE: This is an advisory document to be used as an aid to resellers and IT staff looking to use the Edgewater 4550 in conjunction with

More information

OmniTouch Unified Communication 3.0

OmniTouch Unified Communication 3.0 OmniTouch Unified Communication 3.0 Troubleshooting Guide for IP Softphone Release R3.0.0 or higher Revised Edition 3 25 th of July 2005 Summary Troubleshooting guide for IP Softphone applications (4980

More information

SV9100 SIP Trunking Service Configuration Guide for Time Warner Cable Business Class

SV9100 SIP Trunking Service Configuration Guide for Time Warner Cable Business Class SV9100 SIP Trunking Service Configuration Guide for Time Warner Cable Business Class NDA-31660 Issue 1.0 NEC Corporation of America reserves the right to change the specifications, functions, or features

More information

SIP Trunking Quick Reference Document

SIP Trunking Quick Reference Document SIP Trunking Quick Reference Document Publication Information SAMSUNG TELECOMMUNICATIONS AMERICA reserves the right without prior notice to revise information in this publication for any reason. SAMSUNG

More information

SIP Trunking. Cisco Press. Christina Hattingh Darryl Sladden ATM Zakaria Swapan. 800 East 96th Street Indianapolis, IN 46240

SIP Trunking. Cisco Press. Christina Hattingh Darryl Sladden ATM Zakaria Swapan. 800 East 96th Street Indianapolis, IN 46240 SIP Trunking Christina Hattingh Darryl Sladden ATM Zakaria Swapan Cisco Press 800 East 96th Street Indianapolis, IN 46240 SIP Trunking Contents Introduction xix Part I: From TDM Trunking to SIP Trunking

More information

SIP Trunking with Microsoft Office Communication Server 2007 R2

SIP Trunking with Microsoft Office Communication Server 2007 R2 SIP Trunking with Microsoft Office Communication Server 2007 R2 A Dell Technical White Paper By Farrukh Noman Dell Product Group - Enterprise THIS WHITE PAPER IS FOR INFORMATIONAL PURPOSES ONLY, AND MAY

More information

4-Port SIP VoIP Gateway (4 FXO)

4-Port SIP VoIP Gateway (4 FXO) 4-Port SIP VoIP Gateway (4 FXO) Highlights Supports SIP 2.0 (RFC 326) Supports IPv6 and IPv4 simultaneously Up to 4 SIP service domains and Caller ID Supports auto HTTP provision and fax feature Cost-effective,

More information

SIP Security Controllers. Product Overview

SIP Security Controllers. Product Overview SIP Security Controllers Product Overview Document Version: V1.1 Date: October 2008 1. Introduction UM Labs have developed a range of perimeter security gateways for VoIP and other applications running

More information

White paper. SIP An introduction

White paper. SIP An introduction White paper An introduction Table of contents 1 Introducing 3 2 How does it work? 3 3 Inside a normal call 4 4 DTMF sending commands in sip calls 6 5 Complex environments and higher security 6 6 Summary

More information

Welltel - Session Border Controller SBC 120

Welltel - Session Border Controller SBC 120 SBC 120 Appliance Welltel - Session Border Controller SBC 120 enhanced performance, increased security Welltel s Session Border Controllers (SBCs) help enterprises to reduce communications costs, enable

More information

Hardware Features Voicemail message waiting indicator light Voicemail message retrieval button Volume control Redial Button Flash Button Standard

Hardware Features Voicemail message waiting indicator light Voicemail message retrieval button Volume control Redial Button Flash Button Standard Hardware Features Voicemail message waiting indicator light Voicemail message retrieval button Volume control Redial Button Flash Button Standard 12-button dialing pad High-quality handset One Ethernet

More information

Technical Configuration Notes

Technical Configuration Notes MITEL SIP CoE Technical Configuration Notes Configure MCD for use with OpenIP SIP Trunking service SIP CoE 11-4940-00186 NOTICE The information contained in this document is believed to be accurate in

More information

Cisco SPA 301 1-Line IP Phone Cisco Small Business Pro IP Phones

Cisco SPA 301 1-Line IP Phone Cisco Small Business Pro IP Phones Cisco SPA 301 1-Line IP Phone Cisco Small Business Pro IP Phones Basic, Affordable, IP Phone for Business or Home Office Highlights Basic 1-line business-class IP phone Connects directly to an Internet

More information

VOICE OVER IP (VOIP) TO ENTERPRISE USERS GIOTIS KONSTANTINOS

VOICE OVER IP (VOIP) TO ENTERPRISE USERS GIOTIS KONSTANTINOS VOICE OVER IP (VOIP) TO ENTERPRISE USERS GIOTIS KONSTANTINOS Master of Science in Networking and Data Communications THESIS Thesis Title Voice over IP (VoIP) to Enterprise Users Dissertation submitted

More information

VOIP-211RS/210RS/220RS/440S. SIP VoIP Router. User s Guide

VOIP-211RS/210RS/220RS/440S. SIP VoIP Router. User s Guide VOIP-211RS/210RS/220RS/440S SIP VoIP Router User s Guide Trademarks Contents are subject to revise without prior notice. All trademarks belong to their respective owners. FCC Warning This equipment has

More information

Upgrade-Preisliste. Upgrade Price List

Upgrade-Preisliste. Upgrade Price List Upgrade-Preisliste Mit Firmware Features With list of firmware features Stand/As at: 10.09.2014 Änderungen und Irrtümer vorbehalten. This document is subject to changes. copyright: 2014 by NovaTec Kommunikationstechnik

More information

Genesys Application Note. CounterPath Bria SIP Phones With Genesys SIP Server. Version 1.5

Genesys Application Note. CounterPath Bria SIP Phones With Genesys SIP Server. Version 1.5 Genesys Application Note CounterPath Bria SIP Phones With Genesys SIP Server Version 1.5 The information contained herein is proprietary and confidential and cannot be disclosed or duplicated without the

More information

Voice over IP Security

Voice over IP Security Voice over IP Security Patrick Park Cisco Press Cisco Press 800 East 96th Street Indianapolis, Indiana 46240 USA vii Contents Introduction xvii Part I VoIP Security Fundamentals 3 Chapter 1 Working with

More information

UX5000 with CommPartners SIP Trunks

UX5000 with CommPartners SIP Trunks UX5000 with CommPartners SIP Trunks SECTION 1 NEC S UX5000 AND CommPartners SETUP GUIDE This guide provides example entries for the required fields. The actual data will be e- mailed to you in the following

More information

SIP Trunking Configuration with

SIP Trunking Configuration with SIP Trunking Configuration with Microsoft Office Communication Server 2007 R2 A Dell Technical White Paper End-to-End Solutions Team Dell Product Group - Enterprise THIS WHITE PAPER IS FOR INFORMATIONAL

More information

OpenScape Session Border Controller V7

OpenScape Session Border Controller V7 Session Border Controller V7 Start with the right platform. SBC is a next generation session border controller that enables SIP-based communication and applications to be securely extended beyond the boundaries

More information

Cisco Unified Communications 500 Series

Cisco Unified Communications 500 Series Cisco Unified Communications 500 Series IP PBX Provisioning Guide Version 1.0 Last Update: 02/14/2011 Page 1 DISCLAIMER The attached document is provided as a basic guideline for setup and configuration

More information

Cisco SPA 301 1-Line IP Phone Cisco Small Business

Cisco SPA 301 1-Line IP Phone Cisco Small Business Cisco SPA 301 1-Line IP Phone Cisco Small Business Basic, Affordable, IP Phone for Business or Home Office Highlights Basic 1-line business-class IP phone Connects directly to an Internet telephone service

More information

Cconducted at the Cisco facility and Miercom lab. Specific areas examined

Cconducted at the Cisco facility and Miercom lab. Specific areas examined Lab Testing Summary Report July 2009 Report 090708 Product Category: Unified Communications Vendor Tested: Key findings and conclusions: Cisco Unified Communications solution uses multilayered security

More information

SBC WHITE PAPER. The Critical Component

SBC WHITE PAPER. The Critical Component SBC WHITE PAPER The Critical Component Table of Contents of your VoIP Infrastructure... 3 Enter the SBC... 4 Functions... 5 Security... 5 Denial of Service... 5 Toll Fraud... 6 Encryption... 6 Policy...

More information

SPIRENT ABACUS SIP FOR VOIP AND IMS ABACUS 5000 IP TELEPHONY SIGNALING AND TRAFFIC GENERATOR

SPIRENT ABACUS SIP FOR VOIP AND IMS ABACUS 5000 IP TELEPHONY SIGNALING AND TRAFFIC GENERATOR SIP FOR VOIP AND IMS ABACUS 5000 IP TELEPHONY SIGNALING AND TRAFFIC GENERATOR The convergence of PSTN, VoIP over Fixed and Wireless Broadband, and Mobile networks to an all IP infrastructure enables service

More information

The Next generation Network Management solution

The Next generation Network Management solution The Next generation Network Management solution August 2012 AGENDA 1. The Problem: IT is struggling to cope 2. The Solution: Automating Unified Management 3. 8770 Application Suite Overview 4. Ordering

More information

Basic Vulnerability Issues for SIP Security

Basic Vulnerability Issues for SIP Security Introduction Basic Vulnerability Issues for SIP Security By Mark Collier Chief Technology Officer SecureLogix Corporation mark.collier@securelogix.com The Session Initiation Protocol (SIP) is the future

More information

Technical Configuration Notes

Technical Configuration Notes MITEL SIPCoE Technical Configuration Notes Configure Mitel UC360 SIP Phone and Mitel MCD for use with VidyoWay SIP CoE 13-4940-00228 NOTICE The information contained in this document is believed to be

More information

BroadSoft Partner Configuration Guide

BroadSoft Partner Configuration Guide BroadSoft Partner Configuration Guide Aastra Clearspan TM April 2011 Document Version 1.4 2811 Internet Blvd. Frisco, TX 75034, U.S.A Tel: 469-365-3237 Fax: 469-365-3071 WWW.AASTRA.COM BroadWorks Guide

More information

Security and the Mitel Teleworker Solution

Security and the Mitel Teleworker Solution Security and the Mitel Teleworker Solution White Paper July 2007 Copyright Copyright 2007 Mitel Networks Corporation. This document is unpublished and the following notice is affixed to protect Mitel Networks

More information

Cisco Multiservice IP-to-IP Gateway the Cisco IOS Session Border Controller

Cisco Multiservice IP-to-IP Gateway the Cisco IOS Session Border Controller Cisco Multiservice IP-to-IP Gateway the Cisco IOS Session Border Controller Cisco Unified Communications is a comprehensive IP communications system of voice, video, data, and mobility products and applications.

More information

INNOMEDIA ESBC10K-MDX ENTERPRISE SESSION BORDER CONTROLLER (ESBC)

INNOMEDIA ESBC10K-MDX ENTERPRISE SESSION BORDER CONTROLLER (ESBC) INNOMEDIA ESBC10K-MDX ESBC10K-MDX ENTERPRISE SESSION BORDER CONTROLLER (ESBC) HIGH DENSITY ENTERPRISE SESSION BORDER CONTROLLER IDEAL FOR BROADBAND SERVICE PROVIDERS OFFERING SIP TRUNKING SERVICES TO MID-TO-LARGE

More information

Application Notes for Configuring Intelepeer SIP Trunking with Avaya IP Office 7.0 - Issue 1.0

Application Notes for Configuring Intelepeer SIP Trunking with Avaya IP Office 7.0 - Issue 1.0 Avaya Solution & Interoperability Test Lab Application Notes for Configuring Intelepeer SIP Trunking with Avaya IP Office 7.0 - Issue 1.0 Abstract These Application Notes describe the procedures for configuring

More information

Curso de Telefonía IP para el MTC. Sesión 1 Introducción. Mg. Antonio Ocampo Zúñiga

Curso de Telefonía IP para el MTC. Sesión 1 Introducción. Mg. Antonio Ocampo Zúñiga Curso de Telefonía IP para el MTC Sesión 1 Introducción Mg. Antonio Ocampo Zúñiga Conceptos Generales VoIP Essentials Family of technologies Carries voice calls over an IP network VoIP services convert

More information

PETER CUTLER SCOTT PAGE. November 15, 2011

PETER CUTLER SCOTT PAGE. November 15, 2011 Future of Fax: SIP Trunking PETER CUTLER SCOTT PAGE November 15, 2011 QUESTIONS AND ANSWERS TODAY S SPEAKERS Peter Cutler Vice President of Sales Instant InfoSystems Scott Page Subject Matter Expert Dialogic

More information

IP phone IP230. 4 arrow keys, 7 free programmable function keys 10 partner keys, 3 color LED 9 special control keys, volume control + and

IP phone IP230. 4 arrow keys, 7 free programmable function keys 10 partner keys, 3 color LED 9 special control keys, volume control + and Technical Specification IP phone IP230 Interfaces Ethernet: Headset: 2 x RJ 45 interface 10/100-BASE-TX (auto negotiation) with internal 2 port switch and Power over LAN, Class 1 (IEEE 802.3af) RJ-45 interface

More information

IP Ports and Protocols used by H.323 Devices

IP Ports and Protocols used by H.323 Devices IP Ports and Protocols used by H.323 Devices Overview: The purpose of this paper is to explain in greater detail the IP Ports and Protocols used by H.323 devices during Video Conferences. This is essential

More information

Extended communication server 4.1 : VoIP SIP service administration

Extended communication server 4.1 : VoIP SIP service administration Extended communication server 4.1 : VoIP SIP service administration May, 2008 Alcatel-Lucent Office Offer - All Rights Reserved Alcatel-Lucent 2007 This document explains how to configure the ECS VOIP

More information

Integrate VoIP with your existing network

Integrate VoIP with your existing network Integrate VoIP with your existing network As organisations increasingly recognise and require the benefits voice over Internet Protocol (VoIP) offers, they stop asking "Why?" and start asking "How?". A

More information

EarthLink Business SIP Trunking. ININ IC3 IP PBX Customer Configuration Guide

EarthLink Business SIP Trunking. ININ IC3 IP PBX Customer Configuration Guide EarthLink Business SIP Trunking ININ IC3 IP PBX Customer Configuration Guide Publication History First Release: Version 1.0 August 30, 2011 CHANGE HISTORY Version Date Change Details Changed By 1.0 8/30/2011

More information

Alcatel-Lucent OXO Configuration Guide. For Use with AT&T s IP Flexible Reach Service. Version 1 / Issue 1 Date July 28, 2009

Alcatel-Lucent OXO Configuration Guide. For Use with AT&T s IP Flexible Reach Service. Version 1 / Issue 1 Date July 28, 2009 Alcatel-Lucent OmniPCX Office R7.1 Configuration Guide For Use with AT&T s IP Flexible Reach Service Version 1 / Issue 1 Date July 28, 2009 www.alcatel-lucent.com AT&T IP Flexible Reach TABLE OF CONTENTS

More information

SBC - the UC-glue Security, Interoperability, Reliability. Alexander Kunzi

SBC - the UC-glue Security, Interoperability, Reliability. Alexander Kunzi SBC - the UC-glue Security, Interoperability, Reliability Alexander Kunzi Agenda SBC? Was s das? Wer ist ACME? Is das sicher? Und wie flexibel? Acme Packet Enterprise Solutions Marketing Page 2 Customer

More information

Dial91 iphone User Guide

Dial91 iphone User Guide Dial91 iphone User Guide Dial91 iphone Edition User Guide 1 About Dial91 iphone Edition Dial91 iphone Edition is a SIP-based phone for the Apple iphone mobile digital device, and ipod touch mobile digital

More information

Extend the Life of Your Legacy PBX while Benefiting from SIP Trunks. December 5, 2013

Extend the Life of Your Legacy PBX while Benefiting from SIP Trunks. December 5, 2013 Extend the Life of Your Legacy PBX while Benefiting from SIP Trunks December 5, 2013 Agenda About Sangoma VoIP Gateways Defined Sangoma Gateway Features Gateways Product Specifications Business Applications

More information

How to make free phone calls and influence people by the grugq

How to make free phone calls and influence people by the grugq VoIPhreaking How to make free phone calls and influence people by the grugq Agenda Introduction VoIP Overview Security Conclusion Voice over IP (VoIP) Good News Other News Cheap phone calls Explosive growth

More information

Provisioning and configuring the SIP Spider

Provisioning and configuring the SIP Spider Provisioning and configuring the SIP Spider Administrator Guide Table of Contents 1. Introduction... 3 2. Manual Provisioning... 4 3. Automatic Provisioning... 5 3.1 Concept... 5 3.2 Preparing the configuration

More information

ABC SBC: Securing and Flexible Trunking. FRAFOS GmbH

ABC SBC: Securing and Flexible Trunking. FRAFOS GmbH ABC SBC: Securing and Flexible Trunking FRAFOS GmbH 1. Introduction Enterprises are increasingly replacing their PBXs with VoIP PBX or are extending their PXB with a VoIP module to benefit from attractive

More information

An outline of the security threats that face SIP based VoIP and other real-time applications

An outline of the security threats that face SIP based VoIP and other real-time applications A Taxonomy of VoIP Security Threats An outline of the security threats that face SIP based VoIP and other real-time applications Peter Cox CTO Borderware Technologies Inc VoIP Security Threats VoIP Applications

More information

Lab Introduction software Voice over IP

Lab Introduction software Voice over IP Lab Introduction software Voice over IP 1 Lab Capability and Status Software used in this course installed in Engineering labs including the lab opened for students ENGR1506 - http://labs.ite.gmu.edu/

More information