VoIP is exposed to all the security breaches that are natural to the use of the internet, although using VoIP is as safe as sending emails or paying bills online, or even safer.
As anything related to the internet, if a highly secured VoIP connection is needed, a specialist should be consulted.
Security Objectives
A few concepts can help an average user to keep a VoIP connection safe enough for everyday use. For that, we must focus on:
- Keeping our firewall safe.
- Avoiding the use of the VoIP service by unauthorized persons.
- Encrypting the transmission in case it is picked up over the internet.
If we need to troubleshoot the installation of a VoIP device, we must remember not leave the firewall disabled or with UPNP (Universal Plug and play).
Many popular VoIP programs do not use internet telephony when making free calls. Most of these programs can get through your firewall without you having to change anything and some of them include encryption for their free calls out of the box (Skype encrypts everything, unless you use its international version, and Gtalk encrypts the session between your computer and the Gtalk sever).
Internet telephony providers will almost always use an industry standard protocol called SIP (Session Initiation Protocol) which has its own methods of protecting communication sessions.
The firewall of many routers has an option that enables “ALG for SIP” (application layer gateway for SIP) which is very helpful but allows your SIP programs or devices to take certain control of the firewall. If you need certain degree of security (say, for internet banking from home) you can only use ALG for SIP in your router temporarily, for testing purposes only.
VoIP Provider Security
Without the help (and risks) of ALG for SIP, there are several options that you can consult with your VoIP provider:
- Tunnelling, that has been widely used in networks in order to resolve connectivity and safety issues, and is the most recommendable option. You will want to know whether this feature is available before buying a VoIP service. The tunnel in ‘tunnelling’ is like a private channel between your VoIP provider and you, and sometimes includes encryption.
- STUN servers (Session Traversal Utilities for NAT) that help your VoIP provider to know how to ‘see’ you from the internet, or TURN servers (Traversal Using Relay Nat) that can do a more intensive work when STUN does not work. They are not the most recommendable solutions if you need an extra level of security, unless you are positively sure that the STUN or TURN server is administered by your VoIP. The same applies to ICE technology (Interactive Connectivity Establishment) that is used to decide whether to activate STUN or TURN.
Now, let us talk about encryption. Once again, let me remind you that if you truly need a connection for your business that is totally secured end to end, you must consult a specialist.
Types of Encryption
Your Voip provider might have different ways of encryption:
- VPN (Virtual Private Network) using IPSec (Internet Protocol Security). VPN uses a ‘tunnel’ to connect to a corporate network, and the second encrypts the connection. This technology will place a high demandon your internet connection and computer.
- TLS (Transport Level Security) encrypts the connection and makes sure that your VoIP server is not an impostor in disguise. TLS will typically take less resources from your internet connection and from your computer than VPN plus IPSec.
- SSL (Secure Socket Layer) is the predecessor of TLS, and is still used on the internet. The same considerations as in TLS apply to SSL.
- SRTP (Secure Real Time Protocol) might not be as strong as TLS/SSL but will place the least demand on your computer or VoIP device. It has little effect on the quality of the sound and is the encryption method of preference.
Benefits of VoIP Provider Security
A final piece of advice; there are many ways of improving the security over the internet. In the case of VoIP, it is better for an average user to use a good provider rather than freeware, and to use whatever that provider recommends, because:
- They have stronger firewalls and other powerful security measures
- They will make your own firewall less vulnerable on the internet than it would be with a do-it-yourself solution (unless you have some advanced knowledge of internet security)
- They adhere to safe VoIP standards, or create their own safety standards.
- They usually offer encryption and tunnelling, which makes the communication even safer.
- They can supply you with pre configured hardware or software that meets your safety requirements.
So, ask your prospective VoIP provider or providers, clear out any doubts about security (if you have any) or consult a specialist, so that you can start enjoying the benefits of VoIP.
You can take advantage of low cost and free telephone calls, as well as learn more about VoIP technology and how it can benefit you, whether you use it to contact your family and friends, or wish to use VoIP for large business applications.
Author: Marc B Hughes
Article Source: EzineArticles.com
Provided by: Buy electrical pressure cooker
Related posts:
