VoIP Security: Difference between revisions

VoIP Security (view source)

Revision as of 14:27, 28 August 2019

385 bytes added , 28 August 2019

m

Try to explain the difference between Authentication Username and (ordinary) Username. Think it needs an example ro make it clearer...

Adsb

editor

469

edits

Revision as of 20:53, 21 January 2015 (view source) AA-Andrew (talk \| contribs) m (→‎Keep the Software/Firmware updated) ← Older edit		Revision as of 14:27, 28 August 2019 (view source) Adsb (talk \| contribs) m (Try to explain the difference between Authentication Username and (ordinary) Username. Think it needs an example ro make it clearer...) Newer edit →
(11 intermediate revisions by 3 users not shown)
~~[[File:Snom710.png\|link=:Category:VoIP\|Go to the VoIP Category]]~~ This page gives information about features on the AAISP side that can help secure your VoIP service, as well as what you can do on your network to secure your VoIP service. These settings are set on the [[:Category:Control Pages\|Control Pages]]: http://aa.net.uk/login.html The control page will also show you the number of SIP registrations and the useragent and IP of the registered phones. ~~(not on the legacy 'A' server)~~ == SIP Password == National outgoing calls can have a price limit (default = 20p/min) International outgoing calls can have a price limit (default = 2p/min) International calls can be disabled (setting price limit to 'Free') National calls can be disabled (setting price limit to 'Free') See: [[VoIP Call Rate Limits]] ~~Contact AAISP if you're needing these limits changed up, customers can reduce the limits though.~~ == IP Allow List (restrict access by IP) == IP Lockdown - a VoIP number can be given an IP address to which is only allowed to register (i.e. you can add the IP of your phone, and only that phone will be able to register~~) (this feature is only on the C and the Voiceless platforms, the legacy A server does not have this feature~~) [[File:ControlPages-VoIP-IPLockdown.png\|none\|frame\|IP Lockdown, comma separated etc.]] The system can send advisory messages when a billing amount is reached. This is set per number on the [[:Category:Control Pages\|Control Pages]]. The email set for the Number and for the Login is used. During the month, each time the amount is reached an email will be sent. At the end of the month the amount is reset. This feature was added in October 2011, the default warning level is £10, and for numbers ~~who~~which used over £10 in September the rate was set to 1.2 times ~~Septembers~~September's bill amount. == IP and User Agent Warning Emails == ==Keep the Software/Firmware updated== Regularly checking for software updates is strongly recommended. ege.g., check the website of the phone manufacturer for updates. *[[SNOM Firmware Updates]] ==Physical Security== If you think your equipment may be in a semi-hostile environment, then look in to enabling pin codes on the actual phone - iei.e. a key lock feature. ==Snom Phones== Solution: Firewall SIP as explained above. Also some equipment may support the disabling of calls being sent direct from the Internet. For example, Grandstream firmware often has a feature ''Allow Incoming SIP Messages from SIP Proxy Only'', which is worth using (unless you need to accept such calls). Your equipment may also support a feature whereby incoming INVITE messages are only accepted if they use the User ID which you used when registering with the SIP server, maybe named ''Check SIP User ID for incoming INVITE''. The SIP server will know this User ID, random SIP spammers will not. This User ID is ''not'' the Authentication Username (e.g. +442083xxxxxx), but what is often termed ''Username'' in equipment configuration (where you can set a Username and a Real Name, e.g. ''fred'' and ''Fred Bloggs'') which is used in SIP calls. [[File:aa-button.png\|link=http://aa.net.uk/telecoms.html\|Telecoms page on our main website]] [[Category:VoIP ~~Features~~Security]]▼ [[Category:VoIP]] ~~[[Category:Control Pages]]~~ ▲[[Category:VoIP Features]]