Making SIP Migration Easy

Proprietary and confidential. © 2015 IntelePeer, Inc. All rights reserved.

Making SIP Migration Easy


Subject Matter Expert Anthony Horn

Solutions Engineer IntelePeer Cloud Communications

Moderator Thomas B. Cross

TECHtionary.com and Editor at Skype User Forum.

Follow on Twitter @techtionary

SUBJECT MATTER EXPERT & MODERATOR

http://www.techtionary.com/

http://www.skypeuserforum.com/

https://twitter.com/techtionary


AGENDA

SIP Adoption in the MarketplaceCompany PreparednessMinimizing Security ThreatsDeployment Planning


BUSINESS COMMUNICATION NEEDS ARE CHANGING

Migration from the physical nature of hardware networks to software based infrastructure in the cloud.


Outdated Technology (TDM, PRI, POTs)

Slow

Restrictive

Less Control

Poor Visibility

Limited functionality

Costly

Lack of Innovation

STATE OF BUSINESS COMMUNICATIONS


USING IP/CLOUD TO MAKE THE BUSINESS STRONGER

Business drivers*

*© 2014 Infonetics Research, Inc. UC and On-Premises Strategies and Vendor Leadership, North American Enterprise Survey

A Forrester survey of IT decision makers shows that 55% of companies either have or are planning to replace PRIs with SIP trunks


TDM PBX

ENTERPRISE

ISDN BR1/PR1 TRUNKS

(TDM)

SERVICE PROVIDER NETWORK

PSTN

CLASS 5 TDM VOICE SWITCH

IP PBX

ENTERPRISE

(IP)

SERVICE PROVIDER NETWORK

SBC SIP PROXY

SBC SIP PROXY PSTN

SS7 SIGNALING NETWORK

SIGNALING GATEWAY

SIP TRUNK

TDM/IP MEDIA

GATEWAY

SIP APPLICATION

SERVER

SIP SESSION

WHAT IS SIP TRUNKING?


SIP TRUNKING BENEFITS

Trunk Consolidation Precise Ordering

Dynamic CapacityDisaster Recovery and RedundancyEncryption / Security


BENEFITS OF SIP ARE FAR GREATER THAN COST SAVINGS

SIP Trunking

Disaster Recovery

Elasticity

Quality

Security


COMPANY PREPAREDNESS


ARE YOU SIP READY?

Before completing the SIP Readiness Checklist, obtain C-level guidance and

commitment to ensure the company is ready for SIP!


EVALUATING YOUR NETWORK


NEEDS ASSESSMENT CHECKLIST

Identify committees

Conduct user needs

assessment

Develop a plan for

acquiring and implementing technology

Evaluate existing

technology

Determine number of

sites, number of trunks, and

what redundancy is

required.


CONDUCT A NETWORK ASSESSMENT

BEST Third-party

BETTERVendor test

GOODSelf-test

Evaluate your current and projected bandwidth needs for continued QoS…


Do you segment voice on your network?Is your equipment SIP ready?What are you using for transport?Should you deploy over public IP or private IP?

NETWORK ASSESSMENT

Proprietary and confidential. © 2015 IntelePeer, Inc. All rights reserved.18

IS YOUR NETWORK READY?


SECURITY CONSIDERATIONS

Minimizing Threats


MINIMIZE SECURITY THREATS

Safeguard against security threats such as DoS attacks, toll fraud, masking– Secure and encrypt SIP Trunks (TLS/SRTP)– Session Border Controller


• No additional charge

• 4096 bit TLS/SRTP encryption; the strongest commercially available

• Encryption can help ensure compliance with PCI, HIPAA, and other regulatory requirements

HIGH STRENGTH ENCRYPTION

SECURE CONNECTIONS VIA THE INTERNET

• Ensures privacy and integrity of communications

• Enables the secure routing of communications over main corporate Internet and data connections

• Eliminates need for dedicated private line


BENEFITS OF THE ENTERPRISE SBCBenefit DescriptionNAT and Firewall Traversal Network Topology Hiding to enable placement of the PBX

behind the firewall

Deep SIP Packet Inspection Checking packet content to keep the PBX secure

Intrusion Detection / Prevention To detect and prevent Denial of Service and Intrusion of Service Attacks

Toll Fraud prevention IP or Username Authentication processes

Encryption To enable private communications

Interoperability Complete customization of SIP Protocol with the service provider

Far-End NAT Traversal Support for Remote Workers

Disaster Recovery High Availability to address multiple PBXs or providers

Quality of Service To prioritize voice over data

Demarcation Point Single Voice Access PointMOS scoresLogging and WireShark traces


SAFEGUARD AGAINST SECURITY THREATS

Router & Gateway Access Control ListSplit DMZ- Split “trusted/untrusted” physical network interfaces & VLAN segmentationPack Control Limiting- white list trusted endpoints, gray list unknown end pointsDoS/Ddos- wire rate traffic policingIP Trunk Group- call administration controls


SAFEGUARD AGAINST SECURITY THREATSCONTINUED

Signaling Protection- TLS authentication & IPSec X.509Media Protection- secure RTP (STRP)Fraud Protection- dynamic rogue RTP protection- black list rogue media and malformed packetsSIP Header Message Manipulation- screen, edit and profile SIP headersHardware Protection- environmental hardening via software, SSL, SSH, HTTPS, etc


DEVELOP PRIVACY/SECURITY MANAGEMENT TEAM

Authors: senior management providing strategic direction in the form of all-encompassing ideology. Actualizers: those who touch data, applications, systems, managersAuditors: check for complianceAnalyzers: review and audit to ensure processes and documentation are followed uniformly and universally across the enterprise.


REVIEW CURRENT BUSINESS PROCESSES AND ADJUST (DISASTER RECOVERY)


DESIGN PHASED DEPLOYMENTS AND FALLBACK POSITIONS


DEVELOP A GOTCHA PLAN

Be prepared for “worst case” scenario


CREATE A PROJECT CALENDAR


ANTICIPATE FUTURE SERVICES


ADDITIONAL CONSIDERATIONS

DIY or get helpTraining and user concerns


CHOOSE A PROVIDER


CHOOSING A SIP PROVIDERWell-connected» Global inbound and outbound voice and video» The ability to link service provider networks around the world» Relationships with leading technical partners and service providers

Secure» High-strength encryption» Secure connections via the internet» Services that ensure communications privacy and integrity

Resilient» Reliability that’s carrier-grade» High level of network availability with built-in redundancy» Speedy disaster recovery

Quality» Proactive network monitoring» Professional support» HD audio and video offerings


ADDITIONAL CONSIDERATIONS

Perform due diligence Ask other customers what they would do different and what they forgot to askTest the system


IMPLEMENT


SIP READINESS CHECKLIST - SUMMARY

Conduct needs assessment Review network deployment options and

needs Assess and determine voice security Review current business processes and

adjust Design phased deployments and

fallback positions Evaluate providers Perform “due diligence” on provider Develop pilot and rollout strategy Have “gotcha” plan and develop “flight

tested” user support center and be prepared for “worst case” scenario including wild cards like unexpected tornado

Project calendar

Implementation Revise plan based on “mid course

corrections” and match “real” results Training and user concerns DIY or PT Anticipate future services Proceed with next phase


QUESTIONS?


FINAL THOUGHT


www.intelepeer.com

177 Bovet Road Suite 400| San Mateo, CA | 94402 | T: +1.650.525.9200 | F: +1.650.287.2628© 2015 IntelePeer

40

For more information email [email protected]

http://www.linkedin.com/groups/IntelePeer-SIP-Trunking-Forum-3244711?mostPopular=&gid=3244711

http://www.slideshare.net/IntelePeerInc

https://twitter.com/intelepeer

Making SIP Migration Easy

Services

Transcript of Making SIP Migration Easy