ASRS Ltd. Protect Your Voice Systems
Physical and logical protection:
- Next-gen firewalls and intrusion prevention system (IPS) to monitor and filter authorized and unauthorized VoIP traffic, and track unusual voice activities.
- Lock voice servers physically, and logically for administration. Centralize administration and use domain restrictions and two-factor authentication for administrative access, including credentials, signaling data, and configuration files.
- Regular patching and limit software loading on phones.
- Custom ROMs for advanced protection
We provide and configure VLANs to Segment Voice Traffic and Separate It from Data Traffic
Voice systems and switches support device discovery protocols and automatically assign IP phones to voice VLANs.
Encrypt Sensitive Voice Traffic
Apply encryption by segment, device, or user; encrypting indiscriminately can result in excessive network latency or introduce operational overhead and complexity.
Encrypt the signaling at Internet gateway with Session Initiation Protocol (SIP) over Transport Layer Security (TLS).
Encrypt the media (packets) with protocols such as SRTP.
Use VPNs for network connections by remote phones. This is especially important when HTTPS or SRTP is unavailable.
Implement Strict Security Policies with Users
such as:
Communicate your phones’ built-in security features to users.
Apply strong passwords to access the voicemail inbox. Immediately change the default password to a strong password, then change it as often as your company’s policy dictates for changing login and email passwords.
Delete sensitive voicemail messages as soon as users have listened to them. Not storing voicemails is the easiest and most effective way to protect them.
Immediately report anomalies. You may not know a phone has been hacked until an employee reports an odd occurrence, such as a saved voicemail message that has been deleted or forwarded to an unusual number.