Wednesday, April 6, 2011

Ingate SIP Firewalls Overview

ingateAs much time as we spend worying about data security, how many of us give a lot of thought to the security of our voice communications?  If you are a lawyer, accountant or scientist, for example, you probably talk about private and confidential matters on the phone without really worrying about someone eavesdropping on your conversation. 

But once you switch to the digitally-driven SIP environment of VoIP, the possibility that your conversation can be intercepted and overheard multiplies dramatically.  Hackers using packet sniffers and such well-known tools as VOMIT (we’re not kidding – google it) can intercept and turn your private conversations into .wav files they can listen to on any PC. 

Ingate supplies products that can reduce the chances someone will overhear what you say in conversations on an IP phone.   

First and foremost they make SIP firewalls.  Many personal and corporate firewalls –  especially many of the larger corporate legacy systems don’t recognize SIP (the protocol under which VoIP runs) so those calls don’t get the protection of a firewall.  Ingate makes firewalls in 5 models, ranging in capccity from 10 to 50 users.  All firewalls come complete with all the needed software to replace your existing firewall, including full NAT (network address translation) and PAT (port address translation) and TLS (transport layer security) support for encrypted instant messaging.   

If you have a substantial investment in your firewall and don’t want to replace it, Ingate also makes the aptly-named Siparator that connects to our existing firewall. SIParators offer all the functionality of the Ingate firewall.  The Siparator examines every packet of information coming into or going out of your network and blocks those that don’t belong. 

Employees who routinely work and place calls away from your office have unique security concerns. If you now have, or want to add, employees who will work outside of the system protected by your firewall, Ingate offers a software-based VPN (Virtual Private Network) program. Using strong encryption (AES, 3DES or IDSec encryption algorithms) this module enables you to establish a secure link over the internet and between networks without having to use a dedicated line.  It can communicate with any VPN client using IPSec (Internet Protocol Security) or IKE (Internet Key Exchange).  VPN is included with all firewalls and SIParators. 


Ingate is a great company with tons of great insight and information.  We highly suggest their services. 

Finally, for even more security, Ingate offers its Enhanced Security Module.  This software add-on supports both the IDS (Intrusion Detection System) and IPS (Intusion Protection System) and encrypts all real-time communications.  It supports both TLS (Transport Layer Security) and offers SRTP (Support For Realtime Protocol), and includes encryption, authentication and replay protection. 

Keep in mind that the more layers of security you use, the greater the chance that you will introduce noticable lag into your communications.  The manufacturer can best advise you as to how to protect the security of your voice calls without slowing them down. 

Other Ingate products include a QoS (Quality of Speech) module, which enables you to monitor calls and assess how to improve the quality of transmission, and a Remote SIP Connectivity module, which allopws you to extend SIP features and performance to remote locations, even when they are behind non-SIP-aware firewalls. 

Ingate is owned by Ingate Systems AB of Stockholm, Sweden.  They can be reached at +46-(0)8-600 77 50 or at ingate.com.  In the U.S., the company is located in Hollis, New Hampshire and can be reached at 603-883-6568.  Customer service can be accessed via e-mail at support  (@) ingate.com.  Because they are located in Sweden, the company’s customer support hours are from 2 am to 11 am EST, and they can be reached at +46-13-21 08 52.

No comments:

Post a Comment