How to Secure a VoIP
According to the Federal Communications Commission, the VoIP or voice over Internet protocol technology allows for the transmission of voice communication over IP-based networks. You can choose a VoIP service that enables you to call anyone --- local or international --- with a telephone number or choose a limited service that only lets you call other people with the same service. The importance of VoIP security cannot be denied. To create a secure and reliable VoIP network, you follow a few simple steps.
Instructions
-
-
1
Put all VoIP phones on a separate VLAN or virtual LAN with private addresses, and never allow for interaction between these phone lines and Internet-connected PCs or access control lists. This defines a perimeter for your VoIP network by separating it from the data network.
-
2
Set up a firewall to secure the perimeter. Ensure you use a VoIP-aware firewall, meaning it performs tasks specific to a VoIP network. A firewall with VoIP features is essential to your defense against potential threats to the security of your network by preventing unwelcome users from gaining access to sensitive information.
-
-
3
Set all VoIP-related passwords to strong and secure passwords to prevent someone from accessing your VoIP network and performing administrative tasks or placing calls over your network.
-
4
Secure the network layer with IPSec, or Internet protocol security encryption. This helps keep your VoIP network private by securing data links that may otherwise be potentially exploited. You can choose to use transport mode, in which only the payload of a message is encrypted, or tunnel mode, in which the payload as well as all routing and other important information is encrypted, as your mode of operation for IPSec.
-
5
Switch to an SRTP, or secure RTP profile, which works to protect the application layer by encrypting all data at the application layer. SRTP works for both wired and wireless VoIP networks.
-
1
Tips & Warnings
Do not use preshared keys as this can lessen the security of your VoIP network.
For enhanced security of a VoIP network, use 3DES rather than DES when exchanging security methods with IPSec.
References
- Photo Credit voip image by DXfoto.com from Fotolia.com