1

IngateCompanyPresentation

Ingate’smissionistoenablethebestaccessfortelephony,globalreal-timeandunifiedperson-to-personcommunicationforeveryone.

Name:GinoLarenasTitle:Pre-Sales&SupportManager

Phone:+4686007755sip:gino@ingate.com

2

IngateSystems– QuickFacts

Ø Founded2001withIntertexheritagefromthe80s

Ø HeadquartersinStockholm,Sweden

Ø NorthAmericanofficesinMassachusettsandFlorida

Ø Japaneseliaisonoffice

Ø Aleaderinreal-timeSIPcommunicationswithmorethan50000smalland10000businessandenterpriseinstallationsin50+countries

Ø Leadinginnovatorwithpatentsregisteredandpending

Ø FirstSIParator®(SIPProxybasedfirewall&E-SBC)deliveredin2001

Ø FirstE-SBCcertifiedbytheICSALabsforVoIPSIPsecurityfirewall

Ø Ingate’sSIPTrunkingSeminarsatITExpoformorethanaDecade– BringingSIPtotheEnterprisehttps://www.ingate.com/itexpo_miami_2015.php

3

WeWantToMakeOurCustomersSuccessful

Ø IngateenablesSIPandWebRTCcommunicationsforbusinessefficiency

Ø IngatemakesiteasytoconnectSIPtrunkstoPBXs,UnifiedCommunications(UC)solutionsandcallcenters– TheeasiestwaytoUCenableyourcompany

Ø NextgenerationcommunicationswiththepowerandsimplicityofWebRTCcombinedwiththeestablishedbenefitsofSIP

Ingate’smissionistoenablethebestaccessfortelephony,globalreal-timeandunifiedperson-to-personcommunicationforeveryone.

4

CompatibilityList

4

55

WhatisSIPTrunking?

Traditional Telephony

IP-PBX

Internet

SIP Trunking

Data & VoIP LAN

PSTNSIP Trunking

Provider NetworkSIP System

Session Border Controller

Internet

Data LAN

PSTN

PBX

PRISIParator®

Simple,buttheserviceproviderorretailerneedstoprovideagoodSBCfortheUC(UnifiedCommunications)environment.

6

SIPTrunkvsPRI

SIPTrunkssupportflexibleuseofbandwidthoverexistinginternetaccess.

AddoneSIPTrunkatatime!

PRIdedicateafixedamountofbandwidthtovoice,evenifthere’snovoicetraffictocarry.

7

WhyDoYouNeedanSBC?

Enterprise IP Voice Network

SBCsitsattheBorderofnetworksandactasanInterworkingElement,Demarcationpoint,Centralizedroutingdatabase,FirewallandTrafficPolicies

Security NetworkAnalytics

• Protectresources• Facilitateconnectivity(NAT)

• Providemediaandsignalingencryption

NewServicesInteroperability

• EnterprisesandServiceProviders

• EnterprisePBXsandUCPlatforms

• Protocols

• Troubleshooting• CDRcollection• Demarcation

• HDVoice• VideoServices• CloudbasedApplicationaccess

IP-PBX

SIP PhonesSIP Trunking

Provider SIPSIP

IngateSIParatorSBC

88

Benefit#1:LocalPhoneNumberswithCentralizedCallManagement

• WithPRIsthelocalphonenumbershavetobeterminatedatalocaladdress– ResultsinduplicatePBXs,telephonymanagement,maintenanceagreements,etc.

• SIPTrunkingenableslocalization(geographicalindependence)– Customerscancallalocaloffice,butthecallcontrolandroutingarecentralized– Customerscancallalocalnumberandreachacentralizedcallcenter– Abusinesscanmoveandretaintheirwell-knownphonenumber

• Howisthispossible?– SIPusesthepoweroftheInternettoroutetraffic,vs.theoldtechnologyofpoint-to-point

telephonycircuits

• UseyourSBCtoreapallthebenefits– Callscanberoutedtothelocalofficedependingonthenumberfromwhichthecallwas

initiated– ThecentralizedSBCcanbeprogrammedtodisplayaCallerIDdependingonthedialednumber

99

Benefit#2:ControlandSecurity• Traditionaltelephonyofferedfewprotectionsagainstunwantedcalls,eavesdropping

ortheftofservice• EverySIPTrunking installationshouldhaveanE-SBCatthecustomeredge• E-SBCscan:

– SecurelyconnectthePBX/UCSolutionontheprivateLAN• TheE-SBCresolvestheFirewall/NATtraversalissues• PlaceyourPBXbehindthecorporatefirewallonaprivateIPaddress

– Rejectunwantedcalls• Createblacklistsandwhitelists

– Preventtheftofservice• Requireuserauthenticationtopreventservicetheft

– PreventDenialofServiceattacks• LimitthenumberofcallsfromaparticularIPaddressordomain

– Maintainprivacy• EncrypttheSIPsignalingand/ormediatopreventeavesdropping

1010

Benefit#3:Increasedproductivityandcollaboration• Fact:40%ormoreofemployeesworkfromhome

• SIPgivestheseemployeesthesamecommunicationfeaturesasiftheywereintheoffice

• WiththeIngateSIParatorinplace,remoteworkerscanconnecttotheircolleaguesortothePBXbyFar-EndNATTraversal(FENT)– Extendstheofficeenvironmenttothehomeworker,travelingemployeeandsmall

branchoffices– Enablescollaborationwithoutincurringchargesfortelephonelinestothehomeor

excessivemobilephonecharges

• Result:Moreproductivityfromtheentireteamofworkerswherevertheyaresituated

11

Benefit#4:Scalability

• SIPTrunkscanbeturnedupremotelyandinstantly– Nonewcablesneedtobeconnected– Aslongasadequatebandwidthisavailable

• Whobenefits?– Seasonalbusinessesthathaveacallsurgeduringbusyseasonswhichthenfallsback

fortherestoftheyear– Rapidlyexpandingbusinesses– Businessesthatwanttorunaspecialpromotionthatwillexpandthenumberofcalls

• ScalingisonlyachievablewithSIPTrunking

12

Benefit#5:FasterDisasterRecovery

• SIPisroutedovertheInternetanddoesn’tdependonpoint-to-pointconnections

• Intheeventofadisasterthatrenderstheprimarybusinesslocationunusable,aSIPservicecanbereroutedtoanotherlocationbasedonIPaddressalone

• WithSIPTrunking-redundantPBXs,serviceprovidersandSBCscanbeinstalledtoavoidsinglepointsoffailure

• Redundantcomponentscanbegeographicallyseparatedforgreaterpeaceofmind

• TheIngateSIParatorcanautomaticallyreroutecallsbetweenPBXsorserviceproviders

• ForlargerdeploymentsIngateoffersa48VDCpoweroption– Enableslongerruntimewithinstalledbatterybackupservices

13

Benefit#6:FoundationforUnifiedCommunications/WebRTC

• UnifiedCommunicationsaddsnewmodesofbusinesscommunication:– Voicemailconvertedtoemail– Video– Screen-sharing– InstantmessagingandSMS

• Enablesbetterbusinesscollaboration

• WebRTCisanewopenprotocolthatwillenhancethesecommunicationfeatures

• IntegratingSIPandWebRTC– soontocomeinsomeSBCs- offersthebusinessalow-cost,robusttoolsettosupportcollaborationinadecentralizedworkenvironment,B2Cenvironments- Whencommunicationsisimportant!

14

WhyIngateForSIPTrunking?

Ø FirewallandNATtraversalØ SIPnormalizationandrepairØ SupportforremoteworkersØ DynamicportmanagementØ SecurityØ HighAvailabilityconfigurationØ VPNConcentrator3DES,AES

Ø ExtensivedialplanØ SIPRoutingØ QoStaggingØ MultiplesystemintegrationØ DiagnosticsØ CDRstoRADIUSserver

Softwareforvirtualmachine

15

§ 360Networks§ANPI§Airespring§ AT&T§ BandTel§ Bandwidth.com§ Broadvox§ BT(BritishTelecom)§ Cablecom§Cellip§ CommPartners§ CordiaCorporation§ Earthlink§GammaTelecom§ GlobalCrossing§ IP-Only§ Nectart§ JumaNetworks§ Level3§ Lightpath

§ Netlogic§ Nexvortex§ Nuvox§ O1§ Primus§ RNKTelecom§ TDC§ Telavox§ Tele2§ TelePacific§ Telia§ Toplink§ Tritel§ VirginMedia§ Verizon§ VoEX§ VoiceFlex§ VoIPUnlimited§ Voxbone§ Voxitas§Windstream§ XeloQMoreinpipeline.....

ConfirmedInteroperabilitySIPTrunkProviders

§ Avaya§ Broadsoft§ Cisco§ Digium/Asterisk§ Fonality§ Innovaphone§ InteractiveIntelligence§Microsoft§Mitel

CarrierEquipment

§ AcmePacket/Oracle§ Broadsoft§Metaswitch§ Sonus§Genband

IP-PBXs§ NEC/Sphere§ Panasonic§ Samsung§ SER§ Shoretel§ Snom§ Sonus§ Swyx§ TadiranTelecom

SIPTrunking

Compliantwith

IngateCancreateinteroperabilitybetweenequipmentfrommultiplevendors

16

TheIngateProductFamily

17

ExtensiveFeatureSet– DetailsListedSIPSecurityFeatures• Topologyhiding• AuthenticationagainstaRADIUSServerorlocaldatabase• Accesscontrol• IntrusionDetectionSystem/IntrusionProtectionSystem• Protectionagainst

o DenialofServiceandDistributedDenialofServiceattackso Malformedmessageattackso RTPsessionhijackingo Packet-levelintrusiono Sessionhijackingandredirectiono Vmailbombingo SIPspam(SPIT)

SIPFunctions• SIPproxy• B2BUAonapercallbasis• SIPRegistrar• UDP/TLS/TLSSIPsignalinginanycombination• SupportsallSIPservices• PBXandITSPinteroperability• MonitoringanySIPsignalingports• LoadbalancingofSIPtraffic• DNSoverrideforSIPrequests• StrictSIPparser(optional,securityenhancing)• Dynamicportopening/closing,controlledbySIPproxy• MaintainsthestateofallsessionsandrejectsallunrelatedSIPpackets• Headermanipulationandregularexpressions• Encryptioninterworking

VPNFunctionality• X.509certificateandsharedsecret• GenerationofX.509certificateforclients• PPTPserver• IPSec(3DES,AES,NULL,MD5andSHA1)

Firewall/Routing• Statefulinspection• Packetfiltering• ProvidesflexibleNATandPAT• Handlesalldatatraffic• Dynamicportforwarding• DefaultgatewayoftheLAN• DCHPproxyandserver

MonitoringandDiagnostics• SNMPV1,V2,V3• InternalloggingtoHD• LoggingtoPCAPfile• Syslog• E-mailevents• Automaticcheckfornewreleases

EnhancedSIPSecurityProvidessignaling(TLS)andmedia(SRTP)encryption,includingtranscoding

EncryptionTermination/Transcoding

AuthenticationSIPFilte

ring

FlexibleControl

Near-EndTraversal

Firewall&NAT

SIPProxy,ALG,B2BUA,Registrar

RemoteSIPConnectivity

QoS,Taffic

Mgm

t

SIPTrunking

ENUMSupport

18

Ø WANSIParatorrecommendedwithshareddataandvoiceIP-pipe:Ø SIParatorcontrolsQoS(trafficshapestofavourvoiceoverdata)

Ø SetupofExistingFirewallusingLANorDMZSIParator:Ø PortForward5060Ø PortForwardMediaPortrange

IngatecanalsobeusedasthecompletecombinedDataandVoiceEnterpriseFirewall

SIParator®ModesareUsedTogetherwithExisting(nonSIPAware)Firewalls*

19

WebRTC– NextGiantLeapinTelecommunication

Ø WebRTC,WebReal-TimeCommunication– Highqualitymultimediacommunicationdirectlyinthewebbrowser

Ø GoogleinitiativebeingstandardizedbyW3CandIETF

Ø Willfinallytaketelephonytothe21stcentury

Ø Ingate’supcomingWebRTCproducts:Ø TheIngateWebRTC&SIPCompanion

WebRTCenablesIP-PBXs,UCandCallcentersØ Ingate’sQ-TURN(TURNServerinE-SBC/Firewall)

BringsWebRTCcommunicationthroughrestrictiveØ Enterprisewithquality(QoS)andaccounting

Ø Tryityourselfathttps://webrtc.ingate.com

20

Ø CompleteE-SBCSolutionatanaffordableprice

Ø ExtensiveSIPsecurityfeatures

Ø Multiplenetworkconfigurationoptions

Ø FullDataandVoiceFirewallIntegrated

Ø Easytoinstallandmaintain

Ø Proveninteroperability

Ø Allthefeaturesincludedinthesoftware

Ø EuropeandUSbasedsalesandsupport

Ø BestwarrantyintheIndustrywithAdvanceReplacement,nextbusinessdaydeliveryincluded

Ø RecognizedSBCexpertsandProvedtrustedvendor

Ø RemoteuserfarendNATtraversal

SummaryIngatetheRightE-SBCChoice

21Ingate’smissionistoenablethebestaccessfortelephony,globalreal-timeandunifiedperson-to-personcommunicationforeveryone.

Q&A

22Ingate’smissionistoenablethebestaccessfortelephony,globalreal-timeandunifiedperson-to-personcommunicationforeveryone.

ThankYou!

23

Ingate SIParator Featuresataglance:

BackUpMaterial!!

24

ØRobustproductfor:Ø NATTraversalØ SIPSecurityØ EncryptionØ SIPNormalizationØ RemoteWorkersØ QualityofServiceØ RoutingØ LoggingandDiagnosticsØ PerformancemetricsØ AccountingandmanagementØ HighlyreliablehardwareØ Failoversupporttooptimizesystemavailability

ØScalableandaffordableØ Modelstosupportfrom5to20,000simultaneouscallsØ HardwareorSoftwaredelivery

ØSeveralinstallationconfigurationsformaximumflexibility

Ingate SIParator Featuresataglance:

25

ØNATtraversalØ Enableincomingandoutgoingcallstotraversepremise-based

NATdevicesØ Addresstranslation

ØTelephonenumber&URImanipulationØ Enableprefix,suffix,wildcardandothertelephonenumber

manipulationstoenhance/controlsessionroutingØProtocolnormalizationandfix-ups

Ø Signaling– provideprotocolnormalization,repairandinterworkingforSIPtoSIP,SIPtoSIP-T,SIPtoSIP-I,SIP-ItoSIP-T

Ø Transport– providesupport&interworkingforUDP,TCP,SCTPØ Encryption– providesupport&interworkingfornone,TLS,MTLS,

IPSec,SRTP

SBCFunctionality

26

ØSBCDoS/DDoSprotectionØ ProtectSBCfromDoS/DDoSandother

maliciousattacksØ ProtectSBCfromnon-malicious

overloads

Ø Allowtrusted/authenticatedusersaccesswhileunderDoSattack

Ø Dynamicallyacceptorrejecttrafficbasedondevicebehavior

Ø Restrictusagetopreventautomateddialing/unwantedsessions

SecurityFeatures

Ø Topologyhiding&privacy

Ø Hidecoretopologytopreventdirectedattacksandpreserveconfidentiality

Ø Maskuserinformationforprivacyand

confidentiality

Ø Protectusersandserviceproviderinfrastructurefromeavesdroppers,identitythievesandfraud

Ø Protectnetworkfrommaliciousattachments,preventmalformedmessagesfromoverloadingresources

27

Ø FraudpreventionØ Performsignalingandmediavalidationbyauthenticatingand

authorizingusersØ Enforceservicecontractper-user/deviceandpreventpiggy-back

usage

Ø MonitoringandreportingØ MonitorandreportonalarmsforattacksandoverloadsØ Audittrailsforattackresponse&fraudinvestigationØ Providesecuremonitoring&managementaccesstoprotectfrom

unauthorizedpersonnel

SecurityFeatures

28

Ø Admitsessionsbasedonsignaling&bandwidthconstraintsperuser,networkorsessionagent

Ø Interfacetoexternalpolicyserversandbandwidthmanagers

Ø Overloadprotection&control

Ø Loadbalancetrafficbasedonnumberofsessionsorrateofsessions

Ø Rejectordiverttrafficbasedupondestinationnumbertocontrolmasscallingevents

Ø Failuredetection,trafficre-routeandrecovery

Ø Monitorperformanceandavailabilityofrouter,SIPregistrar,SIPsessionagent

QualityofService

Ø Re-routeorre-distributetrafficbaseduponperformancedegradationorfailure

Ø AssignQoSmarking/VLANmapping basedonapplication,sourceaddressordestinationaddress

Ø Releasemediapeer-peermediabetweenendpoints

Ø MeasureQoS(latency,jitterandpacketloss)andASRpersession

Ø AppendQoSandASRinformationtoCDR

29

Ø RoutingØ Leastcostrouting(LCR)

Ø ENUM-basedrouting

Ø Carriercode-basedrouting

Ø Industry-standardENUM,SIP,XMLandDNSinterfacestothird-partyroutingdatabases

Ø Largelocalroutetablesforstatic,localizedroutingdecisions

Ø Codecstripping&re-ordering

Routing

30

Ø Monitorandreportonalarmsforattacksandoverloads

Ø Audittrailsforattackresponse&fraudinvestigation

Ø Providesecuremonitoring&managementaccesstoprotectfromunauthorizedpersonnel

Ø MeasureQoS(latency,jitterandpacketloss)persession

Ø AppendQoSandMOSinformationtoCDRpercall

Ø SNMPtrapscanbesenttoanymonitoringsystem

Ø Extensivelogging

Ø DirectgenerationofPCAPtraces

Accounting,Monitoring,andReporting

Ø AccountingØ GenerateCDRs

Ø RADIUSaccounting

Ø ManagementØ Policemediabandwidthpersession

baseduponauthorizedcodec

Ø Terminateinactivesessionwithsessiontimers

Ø EnsureonlyauthorizedsessionsreceivecorrectQoSandresourceallocation

31

Network Topology

Select PBX

Select ITSP20 minutes: start to call completion

IngateSIPTrunkingStart-upTool

32

ØWarranty – Next Business Day ReplacementØOne year includedØThree years available for an additional charge

ØUS Help Desk located in Greenville, SCØBackup Support resources in Sweden working US hoursØRequired support

ØNormal Business Hours (9AM – 6PM Eastern) plus software upgradesØPriced at 10% of product value

ØOptional 24 x 7 x 365– one hour call back plus software upgradesØPriced at 15% of product value

ØTraining availableØ Ingate.thesipschool.comØWeb basedØOn-site

Services

33

ØCapacity LicensesØ Concurrent Call Sessions (CCS)

ØAdd support for the number of calls required to be processed through the unit

ØSpecify quantity of sessions by SIP Trunk Group / or share between all SIP Trunk Groups

ØSold in specific quantity incrementsØ Remote User Session Licenses (RUS)

ØEnables remote workers to utilize the features of a centralized SIParator

ØSold in specific quantity incrementsØRegistrations

ØEnables the SIParator to act as the primary registrarØNot generally required when the PBX or UC Server is acting as the

registrar

PricingModel