Transcript Enabling Trusted Unified Communications

Enabling Trusted Unified Communications
Anders G Eriksson
CEO, Ingate Systems
Welcome
Ingate’s SIP trunking Workshop
2
2009-02-02
Enabling Trusted Unified Communications
Ingate Systems
• Founded in 2001
– SIP aware firewall HW & SW technology
• Headquarters in Stockholm, Sweden
• Ingate Systems Inc. subsidiary in Delaware,US
• Focused development of SIP enabled security
technology
• Firewall and Enterprise Session Border
Controller world leader
– Driving SIP Trunking education and marketing
Enabling Trusted Unified Communications
3
2009-02-02
Enabling Trusted Unified Communications
Global Customer Base
• Over 5 000 units installed
• Products covering 5 -10 000 seats
Ingate Products are the choice of a broad range of customers
4
2009-02-02
Enabling Trusted Unified Communications
Awards and Accolades
Product of the Year 2002-2008, Internet Telephony and Unified Communications
Network Products Guide “Readers Trust” Award, 2008
“Tolly Verified” and Tolly “Up to Spec”
Tornado 100 Insider 2004
Red Herring Top 100 innovators
Frost & Sullivan Product Leadership Award
Top 50 Technology Innovator of 2005 and 2006, IT Week Magazine
ICSA Lab Certified
5
2009-02-02
Enabling Trusted Unified Communications
What is SIP Trunking?
SIP trunking is the IP connection between an IP-PBX and a service provider
IP Network
Service
Provider
PSTN
IP-PBX
PSTN gateway
Firewall
Ingate SIParator
6
2009-02-02
Enabling Trusted Unified Communications
NAT/Firewall Traversal Problem
when SIP Trunking over the Internet
Public
Internet
SIP Trunking
Provider
PSTN
SIP System
SIP Trunking does not pass a SIP
unaware NAT/firewall!
IP-PBX
…and the firewall cannot be opened
enough to make it work because of NAT.
7
2009-02-02
Enabling Trusted Unified Communications
With a SIP Trunk over the Internet, it is not really
an option to just connect it to a VoIP LAN.
Public
Internet
SIP Trunking
Provider
PSTN
SIP System
SIP Trunk
Over the
Internet
IP-PBX
Who will issue a
public white IP
addresses to
every Phone?
2009-02-02
Severe Security Warning!
No one wants the whole Voice
LAN exposed to the Internet. Any
extra firewall here needs to be
SIP aware or widely open.
Data LAN
VoIP LAN
?
?
No Soft or Multimedia Clients!
Enabling Trusted Unified Communications
UC?
8
Ingate Firewall® Creating a Common Data and
VoIP LAN for SIP-Trunking over the Internet
Public
Internet
SIP Trunking
Provider
PSTN
SIP System
Service Provider
Remote
Users
IP PBX
SIP Trunk
over Internet
Ingate Firewall®
Demarcation point and
bringing SIP
communication to the LAN
Data LAN
Data & VoIP LAN with QoS
2009-02-02
Soft Clients and Multimedia Terminals
Enabling Trusted Unified Communications
9
Ingate SIParator® Used with Existing Firewall
for SIP Trunking Service over Internet
Public
Internet
SIP Trunking
Provider
PSTN
SIP System
Service Provider
Remote
Users
IP-PBX
SIP Trunk
over Internet
Ingate SIParator®
Demarcation point and
bringing SIP
communication to the LAN
Data LAN
Data & VoIP LAN
2009-02-02
Soft Clients and Multimedia Terminals
Enabling Trusted Unified Communications
10
Managed SIP Trunk Connected to Separate
Enterprise VoIP LAN in Operator’s Space
Public
Internet
SIP Trunking Provider
Network
PSTN
SIP System
No Remote
Users!
Managed
SIP Trunk
Enterprise:
Security
Warning!
IP-PBX
Will Service
Provider issue
IP addresses to
every Phone?
2009-02-02
Provider:
Security
Warning!
Data LAN
VoIP LAN
?
?
No Soft or Multimedia Clients!
Enabling Trusted Unified Communications
UC?
11
Ingate Firewall® Creating a Common Data and
VoIP LAN for Managed SIP Trunking Service
Public
Internet
SIP Trunking Provider
Network
SIP System
Remote
Users
IP-PBX
PSTN
Service Provider
Managed
SIP Trunk
Ingate Firewall®
Demarcation point and
SIP communication via
both WAN pipes.
Data & VoIP LAN
Soft Clients and Multimedia Terminals
2009-02-02
Enabling Trusted Unified Communications
12
Ingate SIParator® Used with Existing Firewall for
Managed SIP Trunking Service
Public
Internet
SIP Trunking Provider
Network
SIP System
Remote
Users
IP-PBX
PSTN
Service Provider
Managed
SIP Trunk
Ingate SIParator®
Demarcation point and
SIP communication via
both WAN pipes.
Data & VoIP LAN
Soft Clients and Multimedia Terminals
2009-02-02
Enabling Trusted Unified Communications
13
Confirmed Interoperability
IP-PBXs
Service providers
Ingate SIParator®
-orIngate Firewall
3Com
360 Networks
Level 3
Aastra
AGN Networks
Netlogic
Asterisk
AT&T
Nexvortex
Avaya
BandTel
O1
Cisco Call Manager
Bandwidth.com
Paetec
Ericsson MX-One
Broadvox
Primus
Fonality
Cbeyond
RNK Telecom
Innovaphone
Cellip
TDC
Interactive Intelligence
SIP Trunk
Cordia Corporation Tele2
Iwatsu
Excel Switching
Toplink
Microsoft
Gamma
VoEX
Mitel
Compliant with
Global Crossing
VoIP Unlimited
NEC / Sphere
IP-Only
Voxbone
Nortel
More in pipeline.....
Objectworld
Pingtel
Carrier Equipment
SER
Acme Packet
Shoretel
Broadsoft
Siemens
See: www.siptrunk.org
NexTone
SIP-Gear
Sonus
Swyx
Sylantro
2009-02-02
Enabling Trusted Unified Communications More in pipeline....
14
SIP trunking and beyond
• Ingate contributes with 10 years of experience and SIP
product development
• Products based on ICSA Lab Certified firewall
• Built for integrated VoIP and IP LAN traffic including:
–
–
–
–
–
–
NAT/Firewall traversal
Interoperability between PBX and Service Providers
Quality of Service (QoS)
Security
Demarcation point of Service
Connecting remote users to the PBX
Unified Communications ready
15
2009-02-02
Enabling Trusted Unified Communications
Enabling Technologies for
Secure SIP Communications
Ingate Systems
Box 10013 SE-121 26 Stockholm-Globen Sweden
Anders Eriksson, Chief Executive Officer
[email protected]
SIP: [email protected]
Tel +46 (0)8 600 77 50
2009-02-02
www.ingate.com
Enabling Trusted Unified Communications
16