Local and long distance dialing charges are greatly reduced by using Voice over Internet Protocol (VoIP) delivered via SIP trunks, rather than legacy Public Switched Telephone Network (PSTN) via TDM trunks. SIP trunks also allow for much greater flexibility. For example, in addition to just voice, Unified Communications (UC) can be delivered, including presence, video conferencing, file sharing and screen sharing.
However, using VoIP over a public medium such as the internet does open both the Internet Telephone Service Provider (ITSP) network and the corporate network to vulnerabilities that must be properly addressed. Just as the firewall protects the data network, an SBC is required to protect both the data and voice network when VoIP is integrated into the system.
The example shown in Figure 1 illustrates a legacy PBX on the corporate premises which has been converted to use SIP trunks rather than TDM trunks. In this example, the SIP trunks are provided by the ITSP and delivered over the internet. A Vega gateway converts between SIP and the TDM interface used by the PBX. An SBC guards against toll fraud and navigates across the firewall. It also protects the corporate network.
The ITSP protects its network with a carrier class Session Border Controller (SBC) that is designed to handle the high call volumes that the carrier will experience and provide the High Availability (HA) features required for carrier operations. The corporate network is protected by a Vega eSBC (enterprise SBC) which is sized to handle moderate call volumes. Both SBCs provide the same functionality, including prevention of toll fraud, denial of service and eavesdropping. They enable VoIP traffic to navigate firewalls and ensure interoperability between different SIP implementations.
Vega Gateways Series
Carrier Grade Security and Interoperability 250 to 4,000 sessions, field upgradeable Allow any SIP CPE endpoint to safely connect with no interop concerns Connect VoIP islands together to create “all IP” infrastructure Mediate communications with other service providers Provides security for internal and external threats Dual redundant PSU available – DC and AC Session Border [...]
The Flexibility, Redundancy and Durability of a VM-Ready Solution with the Scalablity of a Hardware-Based Solution Supports 25-500 Simultaneous Sessions Field Upgradeable Browser-Based GUI for easier provisioning and management Security and QOS for Enterprise Networks DoS/DDoS Attack Protection Network Interconnect Point for SIP Trunking Topology Hiding for Fraud Protection UNIQUE HYBRID FEATURES Media Offload to Hardware [...]
Outstanding Security and Interoperabiltiy with the Flexibility, Redundancy and Durability of a VM-Ready Solution Scalability from 25–500 Sessions (Field Upgradeable Session Expansion) Browser-based GUI for Easy Configuration Traffic Visualization Tools Session-based Licensing (No Hidden Fees) Enterprise Inter-Site Networking and SIP Trunking Border Control Local Security Management for SMBs and Small Enterprises Session Border Controller Use [...]
Security and Interoperability for the Enterprise Supports 25-250 simultaneous sessions/calls Field upgradeable Browser-based GUI for easier provisioning and management Security and QOS for enterprise networks DoS/DDoS attack protection Network interconnect point for SIP trunking Topology hiding for fraud protection Hardware based transcoding Session Border Controller Use Cases