* A few network security basics
The same areas that are security problems for network security can also be problems for VoIP security.
Viruses are especially problematic. Since many VoIP deployments depend in part or in whole on personal computers and servers, every computer in a company’s network must have anti-virus software and the software must be kept current. Company IT managers should, as a minimum, configure computers for auto-scan and auto-update for their anti-virus protection software.
Another critical component for network security is a firewall. Network firewalls are commonly used to protect against unauthorized access, system penetration, and denial-of-service attacks. A firewall provides stateful inspection of packets as they access a network, allowing or preventing access to and from the network. Firewalls can also track and report on intrusions and denial-of-service attacks. Reporting thresholds can be customized based on business requirements.
Firewalls can either be a separate hardware device or special software within a server or computer. Firewalls are especially important when a company’s network is connected to the Internet, and when remote access is allowed by either dial access or by an Internet-based VPN. Firewalls should be supplemented with additional measures to secure remote access.
Another security measure is to include “secure tunnels” when using the Internet for wide-area connections or for remote access. These VPN tunnels establish a secure session between the user’s computer and a company’s router. A secure VPN connection across the Internet is provided by using either IPSec or Secure Sockets Layer (SSL) protocols. IPSec and SSL encrypt session data to “scramble” information on one end of the session and “unscramble” it on the other end. By adding encryption, any intercepted data will be meaningless to unauthorized recipients.
Further security measures can be taken to include session boundary control and network address translation schemes.
In reality, every business phone call or data session connected to the outside world presents some security risks and uses shared public network facilities. But by taking prudent business measures and by making intelligent decisions about the risk vs. the reward of security, business owners and managers should sleep a little easier at night.
If you’d like to read more about network security basics, you can check out our white paper or presentation on the topic at the links listed below.
