anders g eriksson ceo, ingate systems enabling trusted unified communications
TRANSCRIPT
Anders G ErikssonCEO, Ingate Systems
Enabling Trusted Unified Communications
2009-02-02 Enabling Trusted Unified Communications2
Welcome
Ingate’s SIP trunking Workshop
2009-02-02 Enabling Trusted Unified Communications3
Ingate Systems• Founded in 2001
– SIP aware firewall HW & SW technology• Headquarters in Stockholm, Sweden• Ingate Systems Inc. subsidiary in Delaware,US
• Focused development of SIP enabled security technology
• Firewall and Enterprise Session Border Controller world leader
– Driving SIP Trunking education and marketing
Enabling Trusted Unified Communications
2009-02-02 Enabling Trusted Unified Communications4
Global Customer Base
• Over 5 000 units installed
• Products covering 5 -10 000 seats
Ingate Products are the choice of a broad range of customers
2009-02-02 Enabling Trusted Unified Communications5
Awards and AccoladesProduct of the Year 2002-2008, Internet Telephony and Unified Communications
Network Products Guide “Readers Trust” Award, 2008
“Tolly Verified” and Tolly “Up to Spec”
Tornado 100 Insider 2004
Red Herring Top 100 innovators
Frost & Sullivan Product Leadership Award
Top 50 Technology Innovator of 2005 and 2006, IT Week Magazine
ICSA Lab Certified
2009-02-02 Enabling Trusted Unified Communications6
What is SIP Trunking?
Ingate SIParator
PSTN gatewayIP-PBX
Firewall
IP Network
PSTN
Service Provider
SIP trunking is the IP connection between an IP-PBX and a service provider
2009-02-02 Enabling Trusted Unified Communications7
NAT/Firewall Traversal Problem when SIP Trunking over the Internet
PSTNPublic
Internet
SIP Trunking Provider
GW
IP-PBX Firewall
SIP Trunking does not pass a SIP unaware NAT/firewall!
…and the firewall cannot be opened enough to make it work because of NAT.
SIP System
2009-02-02 Enabling Trusted Unified Communications8
?? UC?
With a SIP Trunk over the Internet, it is not really an option to just connect it to a VoIP LAN.
Data LAN
Firewall
IP-PBX
SIP TrunkOver the Internet
VoIP LAN
No Soft or Multimedia Clients!
Severe Security Warning!No one wants the whole Voice LAN exposed to the Internet. Any extra firewall here needs to be SIP aware or widely open.
PSTNPublic
Internet
SIP Trunking Provider
GWSIP System
Who will issue a public white IP addresses to every Phone?
2009-02-02 Enabling Trusted Unified Communications9
Data LAN
Ingate Firewall® Creating a Common Data andVoIP LAN for SIP-Trunking over the Internet
PSTNPublic
Internet
SIP Trunking Provider
GWSIP System
IP PBX Firewall
Soft Clients and Multimedia Terminals
Demarcation point and bringing SIP communication to the LAN
Data & VoIP LAN with QoS
SIP Trunk over Internet
Ingate Firewall®
Remote Users
Service Provider
2009-02-02 Enabling Trusted Unified Communications10
Data LAN
Ingate SIParator® Used with Existing Firewall for SIP Trunking Service over Internet
PSTNPublic
Internet
SIP Trunking Provider
GWSIP System
IP-PBX Firewall
Soft Clients and Multimedia Terminals
Demarcation point and bringing SIP communication to the LAN
Data & VoIP LAN
SIP Trunk over Internet
Ingate SIParator®
Remote Users
Service Provider
2009-02-02 Enabling Trusted Unified Communications11
Managed SIP Trunk Connected to Separate Enterprise VoIP LAN in Operator’s Space
PSTNPublic
Internet
SIP Trunking Provider Network
GW
SIP System
Data LAN
Firewall
IP-PBX
ManagedSIP Trunk
No Remote Users!
VoIP LAN
Provider: Security Warning!
Enterprise: Security Warning!
?? UC?
No Soft or Multimedia Clients!
Will Service Provider issue IP addresses to every Phone?
2009-02-02 Enabling Trusted Unified Communications12
SIP Trunking Provider Network
Ingate Firewall® Creating a Common Data andVoIP LAN for Managed SIP Trunking Service
PSTNPublic
Internet GW
SIP System
Data & VoIP LAN
IP-PBXDemarcation point and SIP communication via both WAN pipes.
Soft Clients and Multimedia Terminals
Remote Users Managed
SIP Trunk
Ingate Firewall®
Service Provider
2009-02-02 Enabling Trusted Unified Communications13
SIP Trunking Provider Network
Ingate SIParator® Used with Existing Firewall for Managed SIP Trunking Service
PSTNPublic
Internet GW
SIP System
Data & VoIP LAN
IP-PBXDemarcation point and SIP communication via both WAN pipes.
Soft Clients and Multimedia Terminals
ManagedSIP Trunk
Ingate SIParator®
Remote Users
Firewall
Service Provider
2009-02-02 Enabling Trusted Unified Communications14
Confirmed Interoperability
SIP Trunk
Ingate SIParator®
-or-Ingate Firewall
3ComAastraAsteriskAvayaCisco Call ManagerEricsson MX-OneFonalityInnovaphoneInteractive IntelligenceIwatsuMicrosoftMitelNEC / SphereNortelObjectworldPingtelSERShoretelSiemensSIP-GearSwyxMore in pipeline....
Compliant with
360 NetworksAGN NetworksAT&TBandTel Bandwidth.com BroadvoxCbeyond CellipCordia CorporationExcel SwitchingGammaGlobal Crossing IP-Only
Level 3 NetlogicNexvortexO1 PaetecPrimus RNK TelecomTDC Tele2ToplinkVoEX VoIP UnlimitedVoxboneMore in pipeline.....
Service providers
IP-PBXs
Carrier EquipmentAcme PacketBroadsoftNexToneSonusSylantro
See: www.siptrunk.org
2009-02-02 Enabling Trusted Unified Communications15
SIP trunking and beyond• Ingate contributes with 10 years of experience and SIP
product development• Products based on ICSA Lab Certified firewall• Built for integrated VoIP and IP LAN traffic including:
– NAT/Firewall traversal – Interoperability between PBX and Service Providers– Quality of Service (QoS)– Security– Demarcation point of Service – Connecting remote users to the PBX
Unified Communications ready
2009-02-02 Enabling Trusted Unified Communications16
Enabling Technologies for Secure SIP Communications
Ingate SystemsBox 10013 SE-121 26 Stockholm-Globen Sweden
Anders Eriksson, Chief Executive [email protected]
SIP: [email protected] +46 (0)8 600 77 50
www.ingate.com