How Secure is Your VoIP Network

By Jelani Harper
Updated: September 15, 2011

How Secure is Your VoIP Network

Security has long been a topic of concern for VoIP users, particularly those who employ VoIP service over networks with valuable customer and proprietary company information. Common threats to security for such networks involve both authentication-related and privacy issues, many of which are similar to those for any sort of data transmission system and which have, for the most part, similar solutions. Denial of service attacks or network security leaks are most susceptible in areas in which specific ports in an organization’s firewall must open to permit transmission of voice data packets, in which there are IP PBXs, and in which gateway technologies are employed.

Open Ports

Due to the fact that a network’s firewalls must be opened at certain ports to allow transmission of VoIP data, prudent security measures to compensate for this occurrence include the encryption of the entire computer network, which will enable VoIP transmissions to be encrypted as well. The encryption of internal VoIP traffic should significantly reduce insider attacks, while it is useful to separate and isolate voice traffic onto a virtual LAN and run the encrypted VoIP traffic over a virtual private network for external communication. Other effective means of compensating for open ports is to turn off VoIP protocols that aren’t currently being used by the network to seal those points of entry.

IP PBXs

IP PBXs, which are largely server-based and are used for logging call information as well as for facilitating VoIP service through an internal or a proprietary operating system, are frequently vulnerable to a number of infiltrations and viruses. Hacking into these areas can result in substantial compromising of valuable information, which is why it’s best to keep such equipment frequently monitored with intrusion detection systems and securely placed behind firewalls. Other security measures for IP PBXs include patching them against vulnerabilities and separating their domain from that of other servers to deny internet accessibility to them. It may even be useful to grant limited administrative access to their servers.

Gateway Technologies

These technologies also provide a means through which hackers may infiltrate a VoIP system and make free phone calls. The external use of VoIP requires gateway technologies to convert data packets from the IP network into voice information which is then sent over a public switched phone network, which allows infiltrators to the ability to modify, store, identify, and play back the traffic transmitted through the network. The key to compensating for this particular vulnerability is to restrict access control lists and configure the gateway so that only approved users have the ability to utilize voice calls.
 

Featured Research
  • 15 Traits of a Good Phone System

    While each marketed model has its own host of bells and whistles, when it comes down to it, for you to select the best phone system for your business, focus on little more than these 15 traits! more

  • 2017 Business VoIP Features

    If you’re considering an investment into a new VoIP system (or upgrading an old one), it’s important to understand what features are available and which ones your business will actually need. Especially if you want to keep costs at a minimum. more

  • What To Do When Your VoIP Contract Expires

    Automatically renewing your VoIP contract is a mistake. The VoIP landscape has been changing rapidly, and it pays to review all of your options before committing to another contract. more

  • VoIP Brings Big Benefits to Small Businesses

    If you run a small to midsized business and you're still relying on a traditional phone system, you need to rethink things. VoIP offers most businesses, regardless of the size, huge benefits. For small businesses, it unlocks the opportunity to have an enterprise-level communication system without the traditional expenses. more

  • [Infographic] How UC Can Improve Employee Productivity

    If you’re interested in a straightforward way to improve the productivity of your employees, it's time to consider adopting a Unified Communications (UC) strategy. more