Overview of the Problem
Enterprise and SOHO users are deploying Voice over IP (VoIP) SIP networks based on widespread SIP & IP broadband availability.
While realizing substantial cost savings by using SIP VoIP vs. legacy telephone service, users connected to public SIP IP
facilities may have potential security risks due to global widespread hacking and unauthorized SIP VoIP calling.
Users may have network exposure of corporate or sensitive information along with SIP text calling information that are
easily decoded with freely available network tools. Without proper security protections,
users may find their data and voice networks compromised, sensitive customer information revealed and corporate trade secret information
exposed.
Teleprime now offers a new, high throughput scalable reliable solution for small to enterprise business class users for end to end
protection not only for SIP IP VoIP calling information but for the entire IP data packet flow of voice and data.
For SIP VoIP and IP VPN security - Teleprime introduces BanditTM and the VSR-1200...
Teleprime's Remote SOHO IP Telephony Secure SIP & RTP Solutions using BanditTM and VSR1200
Remote IP telephone locations can be secured using different methods. Other than private SIP & IP networks without public access,
some type of encryption is required. Most devices now offer a "virtual private network" or VPN option for IP networks with a likely coding
called IPSec. IPSec is a protocol that follows one or more encryption standards by setting up "tunnels" over the public SIP & IP network
between nodes assigned to the tunnel. Data flow over the IP tunnel is encrypted via an algorithm in the IPSec devices.
The problem with using IPSec is that a significant overhead of data bytes is required for the packets thus limiting the bandwidth
that can be reserved for SIP & IP voice/data packets. This can create a severe limitation on the number of calls that can be supported at
remote locations or customers may need to incur increased cost for additional IP bandwidth.
Teleprime's SIP & IP solution is to use the Bandit series VPN routers for SOHO locations and for the larger corporate or service provider locations, the Model VSR1200 Wideband Router.
The Bandit, while supporting full SIP & IP IPSec functions has an additional option called "Selective Layer Encryption" or SLE that provides secure
data transmission without the data overhead of IPSec. This patented mode supports additional SIP & IP dataflow over the encrypted tunnels allowing the user
to most likely keep the same data type connection facility in place.
The "SLE" Advantage
The following graphic illustrates some benchmark tests run comparing the data throughput rate of a link without VPN, one with IPSec and one with SLE.
In this particular case, the SLE encrypted FTP file transfer approximated the same rate of a non-VPN link by using the SLE protocol. This means users may be able
to realize recurring savings by:
- Encrypting existing data links without data rate expansion (required for IPsec)
- Reduce propagation delays in the network (by not incurring IPSec overhead)
- Migrate existing sensitive voice & data networks to SIP & IP based networks thus eliminating costly private or leased line services
Links for datasheets and additional information -
Secure VPN & IP/IAD Data Products
Secure Satellite VPN using VSR-30 or VSR-1200
What is a Secure VPN?
|