VoIP Security Alliance

VOIPSA, Furthering the Integrity of VoIP Security

Mitel is an active member in the Voice over IP Security Alliance (VOIPSA), the first and only group of industry professionals solely and holistically dedicated to VoIP security and education.

VOIPSA is backed by a wide range of organizations represented by universities, security researchers, VoIP vendors, thought leaders and VoIP providers. The mission of VOIPSA is to improve the public awareness of issues and best practices for security and privacy of Voice over IP. VOIPSA is an open group that aims to help organizations discover, understand and avoid VoIP security risks.

For more information, please visit www.voipsa.org.

TeleWorker Security

The Teleworker Solution is one in a series of applications developed for the Mitel 6000 Managed Application Server and is designed to take advantage of that platform's simplicity, security and reliability. The specific purpose of the Teleworker Solution is to support remote connections to any network employing Mitel's proprietary MiNET signaling protocol for Voice –over –IP (VoIP). In practice, this means any network using the Mitel 3300 Integrated Communications Platform (ICP) and the Mitel SX-200® Integrated Communications Platform (ICP).

The Teleworker Solution consists of two elements. The first is an application (or “software blade”) that is downloaded to the 6000 Managed Application Server from the Mitel Applications Management Center . Once installed and configured, the application allows the 6000 Managed Application Server to function as a proxy for remote phones requiring access to the corporate voice network. The solution offers several features that are designed both to improve voice quality over the Internet and to reduce bandwidth requirements between the corporate office and remote locations. The second element of the solution is the remote phone. This is a dual-port, dual mode Mitel 5212 or 5224 IP Phone (with or without Line Interface Module) In addition, the Teleworker Solution requires both 128-bit and stateless encryption for PPTP. These address the known security issues inherent with the original PPTP protocol release, which included:

• Clear text/encrypted password exchange during authentication
• Clear text passwords on the server
• 40-bit encryption
• Encryption state carried between packets

In summary, the Teleworker Solution will not allow connections from PPTP clients that do not support all of:

• MS-CHAPV2
• Encrypted passwords on the server
• 128-bit encryption
• Stateless encryption

There have been no reported issues with the security of PPTP when configured in this fashion.

Background on L2TP/IPSec

L2TP/IPSec is a combination of Cisco's Layer 2 Forwarding (L2F) and Microsoft's Point-to-Point Tunneling Protocol (PPTP), using standard IPSec Encapsulated Security Payloads (ESP). Data packets are first encapsulated with a PPP header, then an L2TP routing header. This package is then wrapped with a UDP header and encrypted with IPSec before being sent across the Internet. Although it requires more overhead than PPTP, it is considered to be more secure.

Fortinet Firewall

Fortinet's industry-leading FortiGate security systems delivers unmatched integrated security capabilities, ease of use and price/performance. Along with the stateful firewall, FortiGate system's use an arsenal of integrated application security engines to quickly identify and block today's blended attacks such as SoBig and Netsky from infecting the networks it protects. In addition, Fortinet's scalable product line offers FortiGate models to fit any network size with key security features such Stateful Firewall, VPN, Antivirus, IPS, Web Content Filtering, Antispam and Traffic Shaping available on all models. Fortinet's FortiManager™ and FortiAnalyzer™ turn-key appliances provide centralized management of thousands of FortiGate systems and detailed reporting capabilities for internal auditing and event correlation.

Firewall Accelerated:

• ASIC-accelerated hardware and purpose-built secure OS
• Application-level security
• Virtual security domains and security zones
• Enterprise-tested high availability
• Security zones and policy-based configuration
• VoIP aware gateways
• Dynamic routing protocols, RIP, OSPF, BGP
• Detailed logging and reporting

Enterprise and Branch Office Firewall

Fortinet's industry-tested FortiGate Firewalls meet enterprise requirements for scalability, performance and reliability. Advanced security capabilities such as integrated Antivirus, IPS Antispam and URL filtering along with high-availability, wire-speed performance, and security zones are available on all FortiGate Models. In addition, Fortinet's wide breadth of FortiGate models offers a device to fit into any sized network while Fortinet's FortiManager™ system provides a single interface to centrally manage and easily deploy thousands of FortiGate systems.

Multi-Store Retail Deployments

FortiGate security systems offer retail customers a cost-effective solution to meet their unique business needs by securing applications such as POS (Point of Sale), inventory applications and online financial transactions, while Fortinet's ASIC-based, purpose built design delivers the reliability and application security needed by retailers to avoid costly network downtime. In addition, the FortiGate system's ease of deployment, accompanied by the full set of security features offered by every FortiGate system make managing and protecting multiple retail locations a turn key solution.

MSSP Managed Firewall Service

MSSP's are increasingly turning to Fortinet's industry leading FortiGate security systems to deliver integrated security services to customers in an efficient and cost effective manner. Fortinet's Security zones and Virtual Domains provide a perfect platform on which to build a managed security service. Also with Fortinet's FortiManager centralized management and FortiAnalyzer™ centralized reporting server, MSSPs can now lower their maintenance and provisioning overhead by using a single console to manage and ease deployment of thousands of FortiGate systems.

SOHO DSL/Cable Deployment

Fortinet's easy-to-deploy and easy-to-manage security systems deliver exceptional value and performance for securing a home office and small business network. FortiGate installation wizards enable installations to be up and running within minutes.

For more Information click here...