Not all VoIP systems are the same

[armdrejoan]

VoIP systems can vary a great deal and this means that the security issues affecting them can vary too. As a VoIP system can be customised, security protection systems can be developed to guard the most sensitive elements of the system. For example, staff can have individual VoIP logins that allow access to certain areas of the system only, with the most sensitive data requiring a higher level of access and a more sophisticated method of logging in to this area.

There are two broad categories of VoIP canada whatsapp number data service, the managed service via an IP Centrex, and the IP-PBX based solution. The IP-PBX system can operate in a similar way to a traditional PBX system using a private connection, but with IP. Both types of system have advantages and disadvantages. The more private the infrastructure, the safer it will be. When elements of public systems are added, then opportunities for breaches could be introduced. Security options associated with any management layers need to be assessed as well.

More than a firewall
Many companies make the error of thinking that if they have a firewall and a VPN – or Virtual Private Network – tunnel, then that’s all they need. A VPN tunnel can support encryption and authentication, but their efficacy depends on the strength of the firewall. If the firewall is compromised, then so may be the VPN tunnel.

The use of SBCs – or Session Border Controllers – is increasing, as they can direct telephony through the business’ own network, separating data from voice and treating each as a separate entity. SBCs can create a one-time channel – or pinhole – for a particular event or session, so when that has concluded, the pinhole is closed with no opportunity to breach or use it as a way of gaining access to the rest of the network. SBCs are suitable for use with private VoIP services.

Voicemail can present a vulnerability to hackers. However, voicemail can be managed in ways that allow staff to obtain voicemail, without then remaining in the system or providing a way for hackers to gain access.