|
|
Building VoIP Security at the Gateway Level
2006-12-22

To protect an enterprise's VoIP system and the data network behind it, a VoIP gateway should incorporate a variety of security technologies. The prime security features to look for in a VoIP gateway include a stateful packet inspection firewall, network address translation (NAT) support, application content filtering and extensive application layer gateways (ALG) that include SIP support for VoIP soft clients (software-based VoIP phones).
The VoIP gateway should also offer support for wireless LAN security, including, but not limited to: RADIUS (Remote Authentication Dial In User Service) authentication, as well as EAP-PEAP, EAP-TLS and PSK authentication suites. Buyers should also check for TKIP, AES-CCMP and other encryption ciphers. Optionally, the VoIP gateway could provide a VPN module that offers a standards-based VPN suite that is ICSA- and VPNC-certified and includes advanced support for IPsec, IKE, PKI and NAT traversal. By the way, don't worry if you're not familiar with all of these confusing technologies and specifications. It is important, however, that you work closely with your system designer to ensure that these features are included with, or supported by, the VoIP gateway you ultimately select.
Specific security mechanisms are also available to protect VoIP service as well as the traffic itself. VoIP gateway management functions are ordinarily protected by secure provisioning and key configuration techniques. Your system designer can provide these services. Call signaling, the process used to create a connection, can be authenticated by using one of the approaches specified by the SIP standard, such as HTTP Digest or IPsec with IKE. VoIP media traffic can be secured using IPsec tunnels or SRTP. Ask your gateway vendor about these technologies. Finally, VoIP denial of service (DoS) attacks can be addressed by implementing a stateful packet inspection firewall, as mentioned above.
By John Edwards
|
|
|
|
VoIP Providers List Information |
|
|
|
If you have any constructive thoughts, creative ideas, or reasonable offers, please, contact us.
|
|
Send Email to Helen O'Neill if you have any questions either about this website, or about VoIP providers, or VoIP in general.
|
|
Send Email to our technical support if you have any technical queries.
|
About VoIP Providers List
VoIP Providers List services save time for companies searching both for information and interconnection partners, interested in voice minutes exchange, i.e. VoIP minutes termination and origination, as well as hardware and software trade. We provide information on interconnection services, VoIP hardware solutions and VoIP software , as well as overall situation in the VoIP industry.
VoIP Providers List is constantly moderated, and thus we can guarantee that any VoIP provider published in the web-based company catalogue has provided accurate details on its services and operations.
We are constantly working on improvement and development of our services. Your comments and proposals regarding the services are highly welcome. Please, do not hesitate to contact us providing with your ideas, opinion, and feed-back. We will be grateful for any information and useful links on Voice over IP, VoIP hardware, VoIP software, and VoIP Providers.
|
|
|
|
|
VoIP Providers Statistics |
|
|
Providers in database: 3315
Users Online: 250
|
|
|