SBC - the UC-glue Security, Interoperability, Reliability. Alexander Kunzi

Transcription

1 SBC - the UC-glue Security, Interoperability, Reliability Alexander Kunzi

2 Agenda SBC? Was s das? Wer ist ACME? Is das sicher? Und wie flexibel? Acme Packet Enterprise Solutions Marketing Page 2

3 Customer challenges with IP communications Security, Interoperability and reliability Acme Packet Enterprise Overview 3

4 Security against communications threats Session layer attacks can disrupt communications and reduce business productivity DoS/DDoS attacks Service fraud Voice spam Privacy breaches can result in loss of business information and compliance violations Identity theft Eavesdropping Data-centric security solutions are not designed to protect session-based, real-time IP communications Acme Packet Page

5 Choice drives interoperability issues Choice Fixed/Mobile clients Application software Network infrastructure Service providers Service offerings SIP protocols Addressing schemes User identity Audio and video codecs QoS schemes Session routing Interoperability More Choice implies less Interoperability Acme Packet Beta footer test Page 5

6 Key SIP interoperability challenges Broad protocol implementation options lead to interoperability Session Initiation Protocol issues IETF standard Simple and Service providers typically require lightweight customer to fix interoperability problems Non-SIP signaling interworking Need to adapt H.323 and other protocols Universally adopted Endpoint devices Telephony and multimedia systems Enables new applications Network services SIP network trunking Unified What works today can break with communications future software updates Hosted voice and video services Web facing customer interfaces SIP SIP Acme Packet Beta footer test Page 6

7 Reliability challenges for interactive communications High quality user experience Enforce QoS Monitor SLA performance Business continuity Protect against signaling overloads Gracefully recover from service provider network outages Ensure high availability enterprise network operation End-Users expect ISDN Quality Acme Packet Page

8 Managing costs and compliance Routing to optimize service costs Session-based accounting for cost center management Service Provider SIP Trunk Provider Features to ensure regulatory compliance Call recording Emergency calling Enterprise Enterprise 2 CUG Enterprise 3 SBC=One and only Border for real-time UC Acme Packet Page

9 Enterprise session border controllers Ensuring security, interoperability and reliability for IP communications

10 Acme Packet at a glance Session Border Control (SBC) category creator and leader with 50 60% market share 1280 customers in 105 countries, many with multiple applications/projects Over 937 service providers Fixed line, cable, mobile & over the top/asp 189 tier 1 service providers 92 of top of top 15 worldwide MSOs Over 336 enterprise & contact centers 11 of Fortune 25 Premier distribution & integration partners 100+ worldwide Experienced, long standing leadership team 620 employees in 31 countries, $116 Bedford, MA headquarters Public company (NASDAQ: APKT) with strong financials Revenue ($M) $142 Founding team $231 $0,27 EPS (non-gaap) $0,35 $ Acme Packet Page 10

11 Acme Packet E-SBCs connect IP islands and deliver trusted 1 st class IP communications Service Provider Networks Enterprise Strong security Network border protection Privacy Easy interoperability SIP interoperability Protocol interworking Assured reliability Quality user experience e Resilient services Acme Packet Acme Packet Enterprise Overview Page 11

12 What is an E-SBC? Session real-time, interactive communications over IP Voice, video, unified communications, collaboration SIP or H.323 signaling Border between IP networks SIP trunks Hosted services Internet t connections Control manage signaling and media exchanges Security, interoperability, reliability Cost management, regulatory compliance Enterprise SIP Trunk Services SIP B2BTrunk Provider Services Remote Workers Acme Packet Page

13 Acme Packet solves interop problems Interoperability features simplify deployment and protect investments Multivendor interoperability between the broadest range of PBX and UC platforms Interoperability between een platforms and 100% of service provider networks, worldwide SIP or H.323 SIP and H.323 protocol interworking Media transcoding and DTMF SIP SIP Trunk Services Provider interworking Signaling transport and media encryption interworking Multivendor Interoperability Acme Packet Page 13

14 Acme Packet ensures reliable communications High quality user experience Interactive communications requires low latency and packet loss Mechanisms for QoS enforcement and SLA assurance Business continuity Protect against non-malicious signaling overloads Gracefully recover from sudden network outages High availability system configurations Measure and improve SLA Acme Packet Page

15 Acme Packet SBCs complement firewall security SBCs protect against session Session Layer Security Firewall SBC layer vulnerabilities SIP DoS/DDoS prevention Firewall limitations: Security for layers 2-4 Reduce QoS No session fail-over Limited scalability Dynamic access control Topology hiding VPN separation Voice spam protection Fraud prevention Encryption Deploy SBC parallel to Firewalls Acme Packet Acme Packet company overview Page 15

16 Acme Packet delivers strong security Robust protection for IP borders ensures availability of communications services and applications Industry-leading protection from session-layer attacks Strong privacy features protect t end-to-end d communications integrity it Strong protection while delivering real-time QoS Attacks Service Provider Network Strongest real-time security in the Market Acme Packet Page 16

17 E-SBC according to BSI BSI Technische Leitlinie Bezeichnung: Technische Leitlinie Sichere TK-Anlagen Teil 1: Gefährdungen, Maßnahmen und Konzepte Kürzel: BSI TL Version: 1.0 Stand: Page 38 Empfohlen vom BSI Acme Packet A whole new equation Page 17

18 Plattfrom Configuration Net-Net 3820: system overview HW-Optionen IPSec,SRTP,TLS QoS-Reporting SFP (CT,SX,LX) AC/DC High-Availablity SW-Optionen Sessions Sessions Protokolle SIP/H.323/IWF Feature Accounting/QoS-reporting Routing Load-Balancing Recording IPv6/v4 IWF Acme Packet Beta footer test Network Interface Unit (NIU) Page 18

19 Acme Packet E-SBC key feature summary Security Reliability DoS/DDoS prevention Call admission control Dynamic access control Signaling overload control Topology hiding QoS marking and VLAN mapping VPN separation Transport control Voice spam protection Peer-to-peer media release Fraud prevention Privacy via signaling & media encryption High availability (signaling and media) Interoperability Network element failure discovery and re-routing NAT and firewall traversal IP address translation Cost management Number and URI manipulation Signaling message header manipulation Accounting with QoS reporting & CDRs QoS and ASR routing Protocol interworking SIP-to-H.323 Regulatory compliance Response code translations SDP & DTMF manipulation Transcoding Session replication for call recording Emergency calling (E911) Lawful intercept Acme Packet Page

20 Zusammenfassung SBC = Ei des Kolumbus für UC Eierlegende Sicherheit=Geborgenheit=Wärme Wolle Mit SBC läuft UC wie geschmiert Milch Hochflexibel=UC Allesfresser Sau noch Fragen? Acme Packet Enterprise Solutions Marketing Page 20

21 Realize the value of IP communications