We recently posted on security issues for VoIP systems and thought it warranted more attention. ITSPA, the International Telephony Services Association has released a document on securely setting up your VoIP system.
Here are some of the issues they brought up
General scanning and directory scanning
Phone Hacking (for example, discovering account secret or exploiting software vulnerability).
Man-In-The-Middle attacks (including eavesdropping and injection of audio).
Denial-of-Service, DoS, (including SIP INVITE/REGISTER flooding and fuzzing).
Session manipulation (including hijacking, tear down and redirect).
Equipment reboot (including NOTIFY/check-sync messages sent to User Agent, causing a reboot).
SPIT, Spam over Internet Telephony (e.g. unsolicited audio sent to phones or voicemail)
Do the basics to insure a secure VOIP when setting up your service
Firewalls – Firewalls help limit what an attacker on your system can see. They are as essential in your VoIP system as in all the rest of your data systems. Make sure yours is set properly and up to date.
Passwords – This is one of the biggest problems, but easiest to fix. Too many people either never change the default password or do not know best practice for creating a secure password.
VPN – Make sure remote users are accessing your system through a VPN, protected by a password
Management Interfaces – Limit access to your management interface to individuals with a need to know and make sure they reside behind your firewall with a secure access, especially over a VPN.
Old Phones – Before disposing of old phones be sure to remove the username, account number and password.
Call Limits – If your provider allows it consider limiting calling destinations. This can help keep fraud to a minimum if it occurs.
Mobile VoIP – Most companies, big and small are connecting mobile phones to their VoIP networks. Be sure that your phones are secured with a PIN. Some phone services and handsets have the ability to remotely erase all data and passwords if lost or stolen.
So taking some simple measures when you set up your VoIP system can save you some headaches later. Ask your VoIP service provider about additional methods you can implement to further protect your service.
Let’s face it. If the CIA website can be hacked, then anything can be hacked.
The recent Sony breach has only added to the worry about the possibility of personal data being stolen and misused.
But with businesses using VoIP, the worry only increases. Think about someone listening into your most secretive business phone calls, or personal ones for that matter.
And if that’s not enough, there can be toll fraud (outgoing calls made) or calls routed to premium numbers where the hacker will walk away with a substantial amount of money and your business left with a gaping hole.
How secure is your VoIP line?
Is it armed and ready to prevent an assault from a potential hacker? Or is it a sitting duck waiting to be shot?
The ITSPA has a list of best practices to be followed to ensure that your VoIP line is secure. It is a downloadable PDF file. The first step to prevent your VoIP line from being hacked into is to read and follow the steps listed in this PDF.
Other than this, there are third party applications like Zfone which can help encrypt the calls made.
Standard security encryption methods like Virtual Private Network, Transport Layer Security & Session Initiation Protocol must be in place before you even start to use your VoIP phone line.
Here are a few additional tips that you can follow to prevent your VoIP line from being hacked.
Separate Voice and Data traffic by using a VLAN. This helps prevent an attack on your Voice server via the data stream.
Use dedicated servers for your VoIP line and use a secure physical location for them.
Overall, the situation might not be as grim as it sounds. But prevention is all better and easier than the cure. So, be prepared and your VoIP line should be safe from hackers.
‘Ohh…I do not have sufficient bandwidth to make a clear VoIP phone call.’
Heard that one before? A lot of people tend to associate problems with their VoIP phone lines to bandwidth. But is bandwidth really the culprit?
What kind of bandwidth do you require to make a ‘clear’ VoIP phone call?
Can you integrate the VoIP line into your existing internet connection or do you require a separate internet connection or excess bandwidth?
Voice packets are bulkier as compared to regular data packets. But VoIP technology relies heavily on voice compression and this is what allows a PSTN quality voice call (uses 64kbps of bandwidth) to be made using the same DS-1 circuit.
Voice Codecs
The G722 codec which is used by VoIP companies allows you to make a better quality phone call as compared to a PSTN line. This codec uses about 8 kHz of human voice frequencies and samples it at 16 kHz. This means that we get a phone call that is double the quality of a normal PTSN line by using the same bandwidth.
Bandwidth: Upload and Download
The term bandwidth comprises of both download and upload bandwidths. What this means is that data sent out from your computer is as important as data received.
The upload bandwidth is always lower compared to the download.
The Average Bandwidth
An average VoIP phone call requires at least 90kbps.
If you have a high bandwidth internet connection, then you can stick to 90kbps per VoIP call. This results in a voice call that can be compared to PSTN phone call.
But if you have low bandwidth and still wish to use a VoIP line, then the VoIP provider can reduce your VoIP bandwidth to 60kbps or even 30 in extreme cases.
Check your bandwidth
In simple terms, it means that the average internet connection will usually be sufficient for a home VoIP user. It’s business users with multiple lines who require additional bandwidth or even a dedicated internet connection for VoIP.
Most VoIP companies provide you with tools that enable you to test your bandwidth before signing up with them. Use these tools to know what your internet bandwidth is.
RingCentral Coupons for July 2011. Here are some great deal son RingCentral Office, RingCentral Mobile and RingCentral Fax. Also some great deals on Plans for Canada.
RingCentral VIOP Coupons for June 2011. Hurry Expires June 30, 2011
RingCentral is offering a diiscount in June. Get $25 off 3 months of any plan for RingCentral Office. Get your VOIP on and start taking advantage of all the great services included with this package. RingCentral Office – $25 Off First 3 Months any plan
Though we did not review them we have read some good things about Phone.com. So when they sent us this speacial offer for our site visitors we thought we’d share it with you. Get Virtual Office Phone Service! Activation Fee Waived (value of $29.95) any phone adapter or IP Phone! Use Coupon Code: Freeactv
We’ve all used services that allow us to enter the first of last name of a person we want to reach on the keypad and the system stops when it finds the right person. It can offer choices for similar names and then ask if we want to be connected. This is a nice feature if take the time to set it up correctly. Some services let you simply speak the name. In the near future most systems will work this way.
A Call Queue allows a callers to be placed in a queue until someone, usually an agent, is available to take their call. In a physical PBX this would be the function of an ACD or Automatic Call Director.
A queue is a useful feature for large and small businesses as well as individuals. It allows you to not miss calls. Depending on the service it can not only queue a call but sometimes queue it based upon a set of business rules; where is the call coming from, time of day or specific incoming number. It can also be set to send certain calls to numbers you know will be staffed or to voicemail.
Intelligent call Queue’s can be sophisticated and not all services offer them. Be careful that you get the level of service you need when this feature is important to your business.
A follow me feature allows you to route a call to multiple lines until it finds you. Say you’re not at your main office line and went out for a quick trip to the store. Your office phone would ring for 3 times and then start ringing your cell phone. More importantly if you’re in an area where you cannot get good cell reception you can forward your calls to a nearby land line, even to an associate. Some services will let you ring multiple phones at one time like your office desk phone and your cell phone. You set the rules: You can set the follow me rules and change them as you wish at any time. Internet or App – Virtual PBX systems give you the ability to change how your follow me works from any internet accessible device and now most also work from an app on your blackberry, iPhone or Android device.
What is the best business phone system for you? As with anything in life it depends on your needs. Imagine a phone system with unlimited calling, an auto-receptionist, customized greetings, advanced call forwarding, waiting for the next available employee (like an ACD, Automatic Call Director) and much more. Imagine happy customers that never get a busy signal and get to the correct person to solve their problem more quickly and with lower costs to you.
