OpenScape Session Border Controller Delivering security, interoperability and cost savings to the enterprise network border

Transcription

1 Siemens Enterprise Communications Session Border Controller Delivering security, interoperability and cost savings to the enterprise network border April 2011

2 Agenda 1 Industry Trends 2 Customer Initiatives 3 Session Border Controller Overview 4 Session Border Controller 5 Deployment Scenarios 6 Summary

3 Agenda 1 Industry Trends 2 Customer challenges 3 SIP Trunking overview 4 Session Border Controller 5 Customer examples 6 Summary

4 Key Industry Trends Supported by Session Border Controller Continued growth in IP-PBX deployments More Service Providers offering IP trunking services Increase in home worker & remote contact center agents Outsourcing of various voice applications (E911, hosted Contact Center) Page 4

5 Enterprise Voice Trends Rapidly to IP Adoption LE VoIP Trends 2010 Global inflection point where IP > TDM volumes US and EMEA trends leading transition to VoIP Open, software-based IP platforms are foundation for unified communications and collaboration SIP becoming de facto industry standard for IP communication session control Source: Gartner Enterprise Telephony Forecast

6 Rapid Growth Trends in North America SIP Trunking Market Between 2009 and 2016, the market is expected to register a compound annual growth rate (CAGR) of 27.3 percent to reach $3.9 billion. Over the forecast period, the installed base is expected to experience a CAGR of 42.8 percent to reach 46 million users in Frost and Sullivan 2010 Report Millions ($) Growth of SIP Services Market Millions of Users Total Market Size in $M User Base Melanie Turek, Principal Analyst

7 Businesses Leverage At-Home Workers and Agents To Save Money and Increase Productivity Nearly 12% of full-time US employees worked at home at some point during the day* Occasional telecommuters those who work remotely totaled 17.2 million in 2008** IT decision makers expect telework to increase by 65% (public sector) and 33% (private sector) in the next three years*** IDC estimates call center agents in the United States currently work from home will reach 330,000 by 2010 * US Bureau of Labor and Statistics March 2009 ** WorldatWork Telework Trends 2009 *** Telework Exchange research study

8 Analyst Observations Jay Lassman/Bern Elliott Gartner SIP trunks can cost at least 28% less than Primary Rate Interface (PRI) trunks with comparable throughput. The aggregation of SIP trunks in the enterprise yields further cost improvements due to centralized trunking and applications, as well as economies of scale. Sorrell Slaymaker Unified IT Systems Organizations can realize (trunking) cost reductions modestly between 45-50%, and at least one organization has seen reductions of 70%. Zeus Kerravala The Yankee Group There are some technical hurdles to overcome when deploying SIP trunks, but most of them were related to the fact that most firewalls and other traditional security cannot handle the bidirectional nature of voice and other communications most of which can be overcome through the use of a session border controller.

9 Agenda 1 Trends 2 Customer Initiatives 3 SIP Trunking overview 4 Session Border Controller 5 Customer examples 6 Summary

10 What Business Initiatives Are Spurring Interest in Session Border Controllers Business Initiatives Looking for cost savings from centralizing telephony, applications and trunking assets Securely provide UC to remote workers & call center agents Securely connect regional and branch locations with HQ Leverage hosted and cloud services delivered by SIP-based trunking technology

11 Agenda 1 Trends 2 Customer challenges 3 Session Border Controller Overview 4 Session Border Controller 5 Customer examples 6 Summary

12 What Is a Session Border Controller Role of the SBC VoIP firewall Provides VoIP and UC security for the enterprise network border Designed to work in parallel with data firewall Terminates SIP trunking services from SIP Service Provider (SSP) Extends communications to remote workers and agents without special hardware Securely connects multiple locations Typical Deployment Scenarios PSTN Users Gateway HQ IP-PBX SBC WAN SIP Trunks SSP Internet Remote worker/agent Remote Location

13 Why A Session Border Controller SIP Session SIP Session Voice Functions as a SIP back-to-back user agent (B2BUA) Terminates SIP sessions prior to enterprise LAN access Inspects for malformed packet, protocol anomalies Provides Denial of Service/ Distributed DoS protection SBC Protects against registration floods Enables dynamic firewall pinholing for media traffic Delivers secure RTP pass-through for encrypted media packets Provides network access translation (NAT) termination for remote worker support

14 Agenda 1 Trends 2 Customer challenges 3 SIP Trunking overview 4 SBC Overview 5 Customer examples 6 Summary

15 Session Border Controller Overview Linux-based, open software application Designed specifically for Voice customers Supports from 1 up to 4,000 sessions (approx.15,000 users) on a single SBC server Single point of administration for Voice and SBC Local and geographical redundancy options for business continuity Deployed on industry standard servers for faster return on investment Predictable, linear pricing model for lower total cost of ownership Smartest, fastest, most cost-effective way for Voice customers to securely deploy SIP trunks and remote workers Mar 2011 Page 15

16 Highly Focused on VoIP Security Provides for business requirements for highly secure unified communications solutions Acts as internal firewall for secure communication Supports secure calls by encrypted signaling Transport Layer Security (TLS) Supports secure calls by encrypted media Secure Real-Time Transport Protocol (SRTP) Intrusion detection, topology hiding and strict SIP validation Supports VPN connections (IPSec), key generation (OpenSSL) and message digest authentication Delivers Network Address Translation (NAT) and Port Address Translation (PAT) for remote worker/agent access Certified Secure rating from independent testing house Miercom Mar 2011 Page 16

17 Voice, Video and Subscriber Feature Support Supports all Voice features Supports voice and video connections OpenStage devices Personal Edition and Enterprise Edition Web Embedded desktop clients Mar 2011 Page 17

18 Redundancy Option for Business Continuity Supports high availability requirements for critical business communications Local and geographical separation options available Automatically maintain exact copies of data base on both servers including call state information Run in active-standby mode for real-time redundancy Standby SBC reroute signaling and media streams to itself in the event of failure Active Standby Mar 2011 Page 18

19 Management and Administration Uses same Common Management Portal (CMP) for both Voice and SBC Local management web graphical user interface Standard configuration profiles for common deployment scenarios Alarming, backup and restore, continuous tracing and logging functions for administration and service support Lower TCO and ongoing maintenance / support cost compared to 3 rd -party SBC solution Mar 2011 Page 19

20 Session Border Controller Certifying with Major SIP Service Providers Selected Certification Partners* Service Providers Offerings More than 250 carriers globally offering SIP trunking services Session Border Controllers provide effective traffic and security management for SIP trunks SBC supports multiple SSP on a single server for IP-LCR Organizations that are deploying UC and have mission-critical contact center investments should consider SIP trunks and SBCs as integral components of their enterprise communications strategies. Gartner *Some certifications in progress

21 Agenda 1 Trends 2 Customer challenges 3 SIP Trunking overview 4 Session Border Controller 5 Deployment Scenarios 6 Summary

22 SBC Deployment Scenario #1 - SIP Service Provider (SSP) using SIP trunking Provides interoperability between and SIP Service Providers (SSPs) Enables use of broadband SIP trunking services for inbound/outbound off-net calls Establishes clear demarcation of enterprise network border Provides signaling and media security, and topology hiding Users Gateway Voice SBC PSTN SSP Mar 2011 Page 22

23 SBC Deployment Scenario #2 - Remote Subscribers Users Voice SBC Remote Workers Internet PSTN Gateway Data Center Provides secure connectivity to remote users with encryption, authentication, media handling and dynamic pin-holing Supports application availability via hosted NAT, IP-address and management, and media anchoring / release Cost effective - requires no specialized hardware at remote worker location Mar 2011 Page 23

24 SBC Deployment Scenario #3 - Branch Office Users Voice SBC Users PSTN Gateway WAN Branch Gateway PSTN Data Center Branch Office Provides additional secure connectivity to branch office including encryption, authentication and media handling Supports application availability via hosted NAT, IP-address management, and media anchoring / release Mar 2011 Page 24

25 SBC Deployment Scenario #4 - Cloud/Hosted Services Data Center Application Suite PSTN UC App. Video Messaging Contact Center Attendant DLS Voice SBC Mobile Connect SBC Gateway Remote User MPLS Network Operations Center Branch SOHO Branch Branch WLAN Legacy PBX Gateway No local trunks or Survivability Gateway PSTN MPLS - Multiprotocol Label Switching Source: UC Hosted Edition presentation, Jan 2010 Mar 2011 Page 25

26 Agenda 1 Trends 2 Customer challenges 3 SIP Trunking overview 4 Session Border Controller 5 Customer examples 6 Summary

27 Session Border Controller Summary Why SBC SBC Provides VoIP and UC security for the enterprise network border Designed specifically for use on Voice deployments Securely terminates lower cost SIP trunking services from SIP Service Provider (SSP) Extends communications to remote workers and agents without special hardware Securely connects multiple locations Single point of administration for Voice and SBC PSTN Users Gateway HQ Voice SBC WAN SIP Trunks SSP Internet Remote worker/agent Remote Location