steven j. johnson president, ingate systems inc. enabling trusted unified communications
TRANSCRIPT
Steven J. JohnsonPresident, Ingate Systems Inc.
Enabling Trusted Unified Communications
Sept. 2009
Enabling SIP Trunking2
Welcome
Ingate’s SIP Trunking Workshop
Sept. 2009
Enabling SIP Trunking3
Ingate Systems• Founded in 2001
– SIP aware firewall HW & SW technology• Headquarters in Stockholm, Sweden
–Ingate Systems Inc. subsidiary in Hollis, NH and Ottawa, Canada
• Focused development of SIP enabling security technology
• World leading Enterprise Session Border Controller – the Ingate SIParator®
– Driving SIP Trunking education
Sept. 2009
Enabling SIP Trunking4
Global Customer Base
• Over 5,000 units installed
• Products covering 5 -10,000 seats
Ingate Products are the choice of a broad range of customers
SIParator 19 SIParator 50, 55 & 65 SIParator 95
Sept. 2009
Enabling SIP Trunking5
What is SIP Trunking?
Ingate SIParator
PSTN gatewayIP-PBX
Firewall
IP Network
PSTN
Service Provider
SIP trunking is the IP connection between an IP-PBX and a service provider
Sept. 2009
Enabling SIP Trunking6
SIP Trunking is Hot
• SIP Trunking is currently the fastest-growing segment of VoIP services. It’s expected to have an 89 percent CAGR from 2008 to 2013. – Infonetics Research
Sept. 2009
Enabling SIP Trunking7
SIP Trunking is only the Beginning
“To date, SIP trunking has been largely focused on recreating current TDM voice services (“trunks”) over IP. While useful, that’s only one possible use. We see the true market potential of SIP trunking in its ability to act as a hosted services “conduit” and to carry media other than standard PSTN quality voice – capabilities impossible with TDM.” - Broadsoft
Sept. 2009
Enabling SIP Trunking8
NAT/Firewall Traversal Problem when SIP Trunking over the Internet
PSTNPublic
Internet
SIP Trunking Provider
GW
IP-PBX Firewall
SIP Trunking does not pass a SIP unaware NAT/firewall!
…and the firewall cannot be opened enough to make it work because of NAT.
SIP System
Sept. 2009
Enabling SIP Trunking9
?? UC?
With a SIP Trunk over the Internet, it is not really an option to just connect it to a VoIP LAN.
Data LAN
Firewall
IP-PBX
SIP TrunkOver the Internet
VoIP LAN
No Soft or Multimedia Clients!
Severe Security Warning!No one wants the whole Voice LAN exposed to the Internet. Any extra firewall here needs to be SIP aware or widely open.
PSTNPublic
Internet
SIP Trunking Provider
GWSIP System
Who will issue a public white IP addresses to every Phone?
Sept. 2009
Enabling SIP Trunking10
Data LAN
Ingate Firewall® Creating a Common Data andVoIP LAN for SIP-Trunking over the Internet
PSTNPublic
Internet
SIP Trunking Provider
GWSIP System
IP PBX Firewall
Soft Clients and Multimedia Terminals
Demarcation point and bringing SIP communication to the LAN
Data & VoIP LAN with QoS
SIP Trunk over Internet
Ingate Firewall®
Remote Users
Service Provider
Sept. 2009
Enabling SIP Trunking11
Data LAN
Ingate SIParator® Used with Existing Firewall for SIP Trunking Service over Internet
PSTNPublic
Internet
SIP Trunking Provider
GWSIP System
IP-PBX Firewall
Soft Clients and Multimedia Terminals
Demarcation point and bringing SIP communication to the LAN
Data & VoIP LAN
SIP Trunk over Internet
Ingate SIParator®
Remote Users
Service Provider
Sept. 2009
Enabling SIP Trunking12
Managed SIP Trunk Connected to Separate Enterprise VoIP LAN in Operator’s Space
PSTNPublic
Internet
SIP Trunking Provider Network
GW
SIP System
Data LAN
Firewall
IP-PBX
ManagedSIP Trunk
No Remote Users!
VoIP LAN
Provider: Security Warning!
Enterprise: Security Warning!
?? UC?
No Soft or Multimedia Clients!
Will Service Provider issue IP addresses to every Phone?
Sept. 2009
Enabling SIP Trunking13
SIP Trunking Provider Network
Ingate Firewall® Creating a Common Data andVoIP LAN for Managed SIP Trunking Service
PSTNPublic
Internet GW
SIP System
Data & VoIP LAN
IP-PBXDemarcation point and SIP communication via both WAN pipes.
Soft Clients and Multimedia Terminals
Remote Users Managed
SIP Trunk
Ingate Firewall®
Service Provider
Sept. 2009
Enabling SIP Trunking14
SIP Trunking Provider Network
Ingate SIParator® Used with Existing Firewall for Managed SIP Trunking Service
PSTNPublic
Internet GW
SIP System
Data & VoIP LAN
IP-PBXDemarcation point and SIP communication via both WAN pipes.
Soft Clients and Multimedia Terminals
ManagedSIP Trunk
Ingate SIParator®
Remote Users
Firewall
Service Provider
Sept. 2009
Enabling SIP Trunking15
The SIP Trunking Challenge
• "Interoperability is a challenge facing SIP trunking. There are organizations such as the SIP Forum looking to solve such problems, but at the end of the day, realized end-to-end solutions for customers with multiple vendor and service provider solutions will continue to be an obstacle," (Rebecca Swensen, Research Analyst, IDC)
Solution: Ingate
Sept. 2009
Enabling SIP Trunking16
Confirmed Interoperability
SIP Trunk
Ingate SIParator®
-or-Ingate Firewall
3ComAastraDigium / AsteriskAvayaCisco Call ManagerEricsson MX-OneFonalityInnovaphoneInteractive IntelligenceIwatsuMicrosoftMitelNEC / SphereNortelObjectworldPingtelSERShoretelSiemensSIP-GearSwyxMore in pipeline....
Compliant with
360 NetworksAGN NetworksAT&TBandTel Bandwidth.com BroadvoxCbeyond CellipCordia CorporationDeltacomExcel SwitchingGammaGlobal Crossing IP-Only Level 3
NetlogicNetSolutionsNexvortexNuvoxOne Comm.PaetecPrimus TDC Tele2ToplinkVerizonVoEX VoIP UnlimitedVoxboneMore in pipeline.....
Service providers
IP-PBXs
Carrier EquipmentAcme PacketBroadsoftNexToneSonus
See: www.siptrunk.org
Sept. 2009
Enabling SIP Trunking17
SIP Trunking and Beyond• Ingate contributes with 10 years of experience and SIP
product development• Products based on ICSA Lab Certified firewall• Built for integrated VoIP and IP LAN traffic including:
– NAT/Firewall traversal – Interoperability between PBX and Service Providers– Quality of Service (QoS)– Security– Demarcation point of Service – Connecting remote users to the PBX
Unified Communications ready
Sept. 2009
Enabling SIP Trunking18
Enabling Technologies for Secure SIP Communications
Ingate SystemsSteven J. Johnson
www.ingate.com