查看“SIP用例”的源代码

'''SBC usecase overview'''

* [ Why&nbsp;SBC] 
** [ Real Time IP Communications are Complex]
** [ Security and Fraud]
** [ Standard Firewalls are not enough]
* [ Enterprise Security Threats] 
** [ Denial of Services]
** [ Theft of service / Fraud]
** [ BYOD]
* [ Firewall&nbsp;is not enough]

&nbsp;



&nbsp;

Sangoma&nbsp;SBC&nbsp;acts as the interface between 2&nbsp;SIP&nbsp;networks:

* Solve firewall and&nbsp;NAT&nbsp;issues
* Normalize and fix&nbsp;SIP&nbsp;messaging
* Register with&nbsp;SIPtrunking provider
* Hide Network Topology
* Secure&nbsp;SIP&nbsp;and Voice (TLS,&nbsp;SRTP)
* Codec Conversion (Transcoding)

&nbsp;

'''Why&nbsp;SBC'''

'''Real Time IP Communications are Complex'''

* Sessions initiated from inside or outside firewalls –&nbsp;NAT
* QOS&nbsp;is needed to provide voice quality over internet
* Interoperability problem between vendors

'''Security and Fraud'''

* State full session security
* Media security and encryption
* Session Limits: call per second, max calls per user
* Intrusion detection and prevention

'''Standard Firewalls are not enough'''

* Unlike firewalls&nbsp;SBC&nbsp;maintains session state
* SBC&nbsp;opens pin holes for ports associated with the session
* The firewall will close and reopen different port numbers breaking the session
* SBC&nbsp;inspects, controls and manipulates all network layers: 2 to 7
* The firewall only works on layer: 2 to 4 (IP/TCP)

'''Enterprise Security Threats'''

'''Denial of Services'''

* Call/registrationoverlaod
* Malformed messages (fuzzing)
* Configuration errors
* Mis-configured devices
* Operator and applicatoin errors

&nbsp;

'''Theft of service / Fraud'''

* Unauthorized users
* Unauthorized media types

'''BYOD'''

* Smartphones running unauthorized apps
* Viruses and Malware &nbsp;attacks&nbsp;your VoIP network

'''Firewall&nbsp;is not enough'''

Traditional firewalls cannot:

* Prevent&nbsp;SIP-specific overload /&nbsp;SIP&nbsp;DOS
* Open/Close&nbsp;RTP&nbsp;media ports in sync with&nbsp;SIP&nbsp;signaling
* Track session state and provide uninterrupted service
* Perform&nbsp;inter-networking &nbsp;or security on encrypted sessions
* Solve multi-vendor&nbsp;SIP&nbsp;interoperability
* Topology Hiding

&nbsp;

SBC&nbsp;do all of the above.

&nbsp;

&nbsp;