Post on 05-Jun-2020
1
IngateCompanyPresentation
Ingate’smissionistoenablethebestaccessfortelephony,globalreal-timeandunifiedperson-to-personcommunicationforeveryone.
Name:GinoLarenasTitle:Pre-Sales&SupportManager
Phone:+4686007755sip:gino@ingate.com
2
IngateSystems– QuickFacts
Ø Founded2001withIntertexheritagefromthe80s
Ø HeadquartersinStockholm,Sweden
Ø NorthAmericanofficesinMassachusettsandFlorida
Ø Japaneseliaisonoffice
Ø Aleaderinreal-timeSIPcommunicationswithmorethan50000smalland10000businessandenterpriseinstallationsin50+countries
Ø Leadinginnovatorwithpatentsregisteredandpending
Ø FirstSIParator®(SIPProxybasedfirewall&E-SBC)deliveredin2001
Ø FirstE-SBCcertifiedbytheICSALabsforVoIPSIPsecurityfirewall
Ø Ingate’sSIPTrunkingSeminarsatITExpoformorethanaDecade– BringingSIPtotheEnterprisehttps://www.ingate.com/itexpo_miami_2015.php
3
WeWantToMakeOurCustomersSuccessful
Ø IngateenablesSIPandWebRTCcommunicationsforbusinessefficiency
Ø IngatemakesiteasytoconnectSIPtrunkstoPBXs,UnifiedCommunications(UC)solutionsandcallcenters– TheeasiestwaytoUCenableyourcompany
Ø NextgenerationcommunicationswiththepowerandsimplicityofWebRTCcombinedwiththeestablishedbenefitsofSIP
Ingate’smissionistoenablethebestaccessfortelephony,globalreal-timeandunifiedperson-to-personcommunicationforeveryone.
4
CompatibilityList
4
55
WhatisSIPTrunking?
Traditional Telephony
IP-PBX
Internet
SIP Trunking
Data & VoIP LAN
PSTNSIP Trunking
Provider NetworkSIP System
Session Border Controller
Internet
Data LAN
PSTN
PBX
PRISIParator®
Simple,buttheserviceproviderorretailerneedstoprovideagoodSBCfortheUC(UnifiedCommunications)environment.
6
SIPTrunkvsPRI
SIPTrunkssupportflexibleuseofbandwidthoverexistinginternetaccess.
AddoneSIPTrunkatatime!
PRIdedicateafixedamountofbandwidthtovoice,evenifthere’snovoicetraffictocarry.
7
WhyDoYouNeedanSBC?
Enterprise IP Voice Network
SBCsitsattheBorderofnetworksandactasanInterworkingElement,Demarcationpoint,Centralizedroutingdatabase,FirewallandTrafficPolicies
Security NetworkAnalytics
• Protectresources• Facilitateconnectivity(NAT)
• Providemediaandsignalingencryption
NewServicesInteroperability
• EnterprisesandServiceProviders
• EnterprisePBXsandUCPlatforms
• Protocols
• Troubleshooting• CDRcollection• Demarcation
• HDVoice• VideoServices• CloudbasedApplicationaccess
IP-PBX
SIP PhonesSIP Trunking
Provider SIPSIP
IngateSIParatorSBC
88
Benefit#1:LocalPhoneNumberswithCentralizedCallManagement
• WithPRIsthelocalphonenumbershavetobeterminatedatalocaladdress– ResultsinduplicatePBXs,telephonymanagement,maintenanceagreements,etc.
• SIPTrunkingenableslocalization(geographicalindependence)– Customerscancallalocaloffice,butthecallcontrolandroutingarecentralized– Customerscancallalocalnumberandreachacentralizedcallcenter– Abusinesscanmoveandretaintheirwell-knownphonenumber
• Howisthispossible?– SIPusesthepoweroftheInternettoroutetraffic,vs.theoldtechnologyofpoint-to-point
telephonycircuits
• UseyourSBCtoreapallthebenefits– Callscanberoutedtothelocalofficedependingonthenumberfromwhichthecallwas
initiated– ThecentralizedSBCcanbeprogrammedtodisplayaCallerIDdependingonthedialednumber
99
Benefit#2:ControlandSecurity• Traditionaltelephonyofferedfewprotectionsagainstunwantedcalls,eavesdropping
ortheftofservice• EverySIPTrunking installationshouldhaveanE-SBCatthecustomeredge• E-SBCscan:
– SecurelyconnectthePBX/UCSolutionontheprivateLAN• TheE-SBCresolvestheFirewall/NATtraversalissues• PlaceyourPBXbehindthecorporatefirewallonaprivateIPaddress
– Rejectunwantedcalls• Createblacklistsandwhitelists
– Preventtheftofservice• Requireuserauthenticationtopreventservicetheft
– PreventDenialofServiceattacks• LimitthenumberofcallsfromaparticularIPaddressordomain
– Maintainprivacy• EncrypttheSIPsignalingand/ormediatopreventeavesdropping
1010
Benefit#3:Increasedproductivityandcollaboration• Fact:40%ormoreofemployeesworkfromhome
• SIPgivestheseemployeesthesamecommunicationfeaturesasiftheywereintheoffice
• WiththeIngateSIParatorinplace,remoteworkerscanconnecttotheircolleaguesortothePBXbyFar-EndNATTraversal(FENT)– Extendstheofficeenvironmenttothehomeworker,travelingemployeeandsmall
branchoffices– Enablescollaborationwithoutincurringchargesfortelephonelinestothehomeor
excessivemobilephonecharges
• Result:Moreproductivityfromtheentireteamofworkerswherevertheyaresituated
11
Benefit#4:Scalability
• SIPTrunkscanbeturnedupremotelyandinstantly– Nonewcablesneedtobeconnected– Aslongasadequatebandwidthisavailable
• Whobenefits?– Seasonalbusinessesthathaveacallsurgeduringbusyseasonswhichthenfallsback
fortherestoftheyear– Rapidlyexpandingbusinesses– Businessesthatwanttorunaspecialpromotionthatwillexpandthenumberofcalls
• ScalingisonlyachievablewithSIPTrunking
12
Benefit#5:FasterDisasterRecovery
• SIPisroutedovertheInternetanddoesn’tdependonpoint-to-pointconnections
• Intheeventofadisasterthatrenderstheprimarybusinesslocationunusable,aSIPservicecanbereroutedtoanotherlocationbasedonIPaddressalone
• WithSIPTrunking-redundantPBXs,serviceprovidersandSBCscanbeinstalledtoavoidsinglepointsoffailure
• Redundantcomponentscanbegeographicallyseparatedforgreaterpeaceofmind
• TheIngateSIParatorcanautomaticallyreroutecallsbetweenPBXsorserviceproviders
• ForlargerdeploymentsIngateoffersa48VDCpoweroption– Enableslongerruntimewithinstalledbatterybackupservices
13
Benefit#6:FoundationforUnifiedCommunications/WebRTC
• UnifiedCommunicationsaddsnewmodesofbusinesscommunication:– Voicemailconvertedtoemail– Video– Screen-sharing– InstantmessagingandSMS
• Enablesbetterbusinesscollaboration
• WebRTCisanewopenprotocolthatwillenhancethesecommunicationfeatures
• IntegratingSIPandWebRTC– soontocomeinsomeSBCs- offersthebusinessalow-cost,robusttoolsettosupportcollaborationinadecentralizedworkenvironment,B2Cenvironments- Whencommunicationsisimportant!
14
WhyIngateForSIPTrunking?
Ø FirewallandNATtraversalØ SIPnormalizationandrepairØ SupportforremoteworkersØ DynamicportmanagementØ SecurityØ HighAvailabilityconfigurationØ VPNConcentrator3DES,AES
Ø ExtensivedialplanØ SIPRoutingØ QoStaggingØ MultiplesystemintegrationØ DiagnosticsØ CDRstoRADIUSserver
Softwareforvirtualmachine
15
§ 360Networks§ANPI§Airespring§ AT&T§ BandTel§ Bandwidth.com§ Broadvox§ BT(BritishTelecom)§ Cablecom§Cellip§ CommPartners§ CordiaCorporation§ Earthlink§GammaTelecom§ GlobalCrossing§ IP-Only§ Nectart§ JumaNetworks§ Level3§ Lightpath
§ Netlogic§ Nexvortex§ Nuvox§ O1§ Primus§ RNKTelecom§ TDC§ Telavox§ Tele2§ TelePacific§ Telia§ Toplink§ Tritel§ VirginMedia§ Verizon§ VoEX§ VoiceFlex§ VoIPUnlimited§ Voxbone§ Voxitas§Windstream§ XeloQMoreinpipeline.....
ConfirmedInteroperabilitySIPTrunkProviders
§ Avaya§ Broadsoft§ Cisco§ Digium/Asterisk§ Fonality§ Innovaphone§ InteractiveIntelligence§Microsoft§Mitel
CarrierEquipment
§ AcmePacket/Oracle§ Broadsoft§Metaswitch§ Sonus§Genband
IP-PBXs§ NEC/Sphere§ Panasonic§ Samsung§ SER§ Shoretel§ Snom§ Sonus§ Swyx§ TadiranTelecom
SIPTrunking
Compliantwith
IngateCancreateinteroperabilitybetweenequipmentfrommultiplevendors
16
TheIngateProductFamily
17
ExtensiveFeatureSet– DetailsListedSIPSecurityFeatures• Topologyhiding• AuthenticationagainstaRADIUSServerorlocaldatabase• Accesscontrol• IntrusionDetectionSystem/IntrusionProtectionSystem• Protectionagainst
o DenialofServiceandDistributedDenialofServiceattackso Malformedmessageattackso RTPsessionhijackingo Packet-levelintrusiono Sessionhijackingandredirectiono Vmailbombingo SIPspam(SPIT)
SIPFunctions• SIPproxy• B2BUAonapercallbasis• SIPRegistrar• UDP/TLS/TLSSIPsignalinginanycombination• SupportsallSIPservices• PBXandITSPinteroperability• MonitoringanySIPsignalingports• LoadbalancingofSIPtraffic• DNSoverrideforSIPrequests• StrictSIPparser(optional,securityenhancing)• Dynamicportopening/closing,controlledbySIPproxy• MaintainsthestateofallsessionsandrejectsallunrelatedSIPpackets• Headermanipulationandregularexpressions• Encryptioninterworking
VPNFunctionality• X.509certificateandsharedsecret• GenerationofX.509certificateforclients• PPTPserver• IPSec(3DES,AES,NULL,MD5andSHA1)
Firewall/Routing• Statefulinspection• Packetfiltering• ProvidesflexibleNATandPAT• Handlesalldatatraffic• Dynamicportforwarding• DefaultgatewayoftheLAN• DCHPproxyandserver
MonitoringandDiagnostics• SNMPV1,V2,V3• InternalloggingtoHD• LoggingtoPCAPfile• Syslog• E-mailevents• Automaticcheckfornewreleases
EnhancedSIPSecurityProvidessignaling(TLS)andmedia(SRTP)encryption,includingtranscoding
EncryptionTermination/Transcoding
AuthenticationSIPFilte
ring
FlexibleControl
Near-EndTraversal
Firewall&NAT
SIPProxy,ALG,B2BUA,Registrar
RemoteSIPConnectivity
QoS,Taffic
Mgm
t
SIPTrunking
ENUMSupport
18
Ø WANSIParatorrecommendedwithshareddataandvoiceIP-pipe:Ø SIParatorcontrolsQoS(trafficshapestofavourvoiceoverdata)
Ø SetupofExistingFirewallusingLANorDMZSIParator:Ø PortForward5060Ø PortForwardMediaPortrange
IngatecanalsobeusedasthecompletecombinedDataandVoiceEnterpriseFirewall
SIParator®ModesareUsedTogetherwithExisting(nonSIPAware)Firewalls*
19
WebRTC– NextGiantLeapinTelecommunication
Ø WebRTC,WebReal-TimeCommunication– Highqualitymultimediacommunicationdirectlyinthewebbrowser
Ø GoogleinitiativebeingstandardizedbyW3CandIETF
Ø Willfinallytaketelephonytothe21stcentury
Ø Ingate’supcomingWebRTCproducts:Ø TheIngateWebRTC&SIPCompanion
WebRTCenablesIP-PBXs,UCandCallcentersØ Ingate’sQ-TURN(TURNServerinE-SBC/Firewall)
BringsWebRTCcommunicationthroughrestrictiveØ Enterprisewithquality(QoS)andaccounting
Ø Tryityourselfathttps://webrtc.ingate.com
20
Ø CompleteE-SBCSolutionatanaffordableprice
Ø ExtensiveSIPsecurityfeatures
Ø Multiplenetworkconfigurationoptions
Ø FullDataandVoiceFirewallIntegrated
Ø Easytoinstallandmaintain
Ø Proveninteroperability
Ø Allthefeaturesincludedinthesoftware
Ø EuropeandUSbasedsalesandsupport
Ø BestwarrantyintheIndustrywithAdvanceReplacement,nextbusinessdaydeliveryincluded
Ø RecognizedSBCexpertsandProvedtrustedvendor
Ø RemoteuserfarendNATtraversal
SummaryIngatetheRightE-SBCChoice
21Ingate’smissionistoenablethebestaccessfortelephony,globalreal-timeandunifiedperson-to-personcommunicationforeveryone.
Q&A
22Ingate’smissionistoenablethebestaccessfortelephony,globalreal-timeandunifiedperson-to-personcommunicationforeveryone.
ThankYou!
23
Ingate SIParator Featuresataglance:
BackUpMaterial!!
24
ØRobustproductfor:Ø NATTraversalØ SIPSecurityØ EncryptionØ SIPNormalizationØ RemoteWorkersØ QualityofServiceØ RoutingØ LoggingandDiagnosticsØ PerformancemetricsØ AccountingandmanagementØ HighlyreliablehardwareØ Failoversupporttooptimizesystemavailability
ØScalableandaffordableØ Modelstosupportfrom5to20,000simultaneouscallsØ HardwareorSoftwaredelivery
ØSeveralinstallationconfigurationsformaximumflexibility
Ingate SIParator Featuresataglance:
25
ØNATtraversalØ Enableincomingandoutgoingcallstotraversepremise-based
NATdevicesØ Addresstranslation
ØTelephonenumber&URImanipulationØ Enableprefix,suffix,wildcardandothertelephonenumber
manipulationstoenhance/controlsessionroutingØProtocolnormalizationandfix-ups
Ø Signaling– provideprotocolnormalization,repairandinterworkingforSIPtoSIP,SIPtoSIP-T,SIPtoSIP-I,SIP-ItoSIP-T
Ø Transport– providesupport&interworkingforUDP,TCP,SCTPØ Encryption– providesupport&interworkingfornone,TLS,MTLS,
IPSec,SRTP
SBCFunctionality
26
ØSBCDoS/DDoSprotectionØ ProtectSBCfromDoS/DDoSandother
maliciousattacksØ ProtectSBCfromnon-malicious
overloads
Ø Allowtrusted/authenticatedusersaccesswhileunderDoSattack
Ø Dynamicallyacceptorrejecttrafficbasedondevicebehavior
Ø Restrictusagetopreventautomateddialing/unwantedsessions
SecurityFeatures
Ø Topologyhiding&privacy
Ø Hidecoretopologytopreventdirectedattacksandpreserveconfidentiality
Ø Maskuserinformationforprivacyand
confidentiality
Ø Protectusersandserviceproviderinfrastructurefromeavesdroppers,identitythievesandfraud
Ø Protectnetworkfrommaliciousattachments,preventmalformedmessagesfromoverloadingresources
27
Ø FraudpreventionØ Performsignalingandmediavalidationbyauthenticatingand
authorizingusersØ Enforceservicecontractper-user/deviceandpreventpiggy-back
usage
Ø MonitoringandreportingØ MonitorandreportonalarmsforattacksandoverloadsØ Audittrailsforattackresponse&fraudinvestigationØ Providesecuremonitoring&managementaccesstoprotectfrom
unauthorizedpersonnel
SecurityFeatures
28
Ø Admitsessionsbasedonsignaling&bandwidthconstraintsperuser,networkorsessionagent
Ø Interfacetoexternalpolicyserversandbandwidthmanagers
Ø Overloadprotection&control
Ø Loadbalancetrafficbasedonnumberofsessionsorrateofsessions
Ø Rejectordiverttrafficbasedupondestinationnumbertocontrolmasscallingevents
Ø Failuredetection,trafficre-routeandrecovery
Ø Monitorperformanceandavailabilityofrouter,SIPregistrar,SIPsessionagent
QualityofService
Ø Re-routeorre-distributetrafficbaseduponperformancedegradationorfailure
Ø AssignQoSmarking/VLANmapping basedonapplication,sourceaddressordestinationaddress
Ø Releasemediapeer-peermediabetweenendpoints
Ø MeasureQoS(latency,jitterandpacketloss)andASRpersession
Ø AppendQoSandASRinformationtoCDR
29
Ø RoutingØ Leastcostrouting(LCR)
Ø ENUM-basedrouting
Ø Carriercode-basedrouting
Ø Industry-standardENUM,SIP,XMLandDNSinterfacestothird-partyroutingdatabases
Ø Largelocalroutetablesforstatic,localizedroutingdecisions
Ø Codecstripping&re-ordering
Routing
30
Ø Monitorandreportonalarmsforattacksandoverloads
Ø Audittrailsforattackresponse&fraudinvestigation
Ø Providesecuremonitoring&managementaccesstoprotectfromunauthorizedpersonnel
Ø MeasureQoS(latency,jitterandpacketloss)persession
Ø AppendQoSandMOSinformationtoCDRpercall
Ø SNMPtrapscanbesenttoanymonitoringsystem
Ø Extensivelogging
Ø DirectgenerationofPCAPtraces
Accounting,Monitoring,andReporting
Ø AccountingØ GenerateCDRs
Ø RADIUSaccounting
Ø ManagementØ Policemediabandwidthpersession
baseduponauthorizedcodec
Ø Terminateinactivesessionwithsessiontimers
Ø EnsureonlyauthorizedsessionsreceivecorrectQoSandresourceallocation
31
Network Topology
Select PBX
Select ITSP20 minutes: start to call completion
IngateSIPTrunkingStart-upTool
32
ØWarranty – Next Business Day ReplacementØOne year includedØThree years available for an additional charge
ØUS Help Desk located in Greenville, SCØBackup Support resources in Sweden working US hoursØRequired support
ØNormal Business Hours (9AM – 6PM Eastern) plus software upgradesØPriced at 10% of product value
ØOptional 24 x 7 x 365– one hour call back plus software upgradesØPriced at 15% of product value
ØTraining availableØ Ingate.thesipschool.comØWeb basedØOn-site
Services
33
ØCapacity LicensesØ Concurrent Call Sessions (CCS)
ØAdd support for the number of calls required to be processed through the unit
ØSpecify quantity of sessions by SIP Trunk Group / or share between all SIP Trunk Groups
ØSold in specific quantity incrementsØ Remote User Session Licenses (RUS)
ØEnables remote workers to utilize the features of a centralized SIParator
ØSold in specific quantity incrementsØRegistrations
ØEnables the SIParator to act as the primary registrarØNot generally required when the PBX or UC Server is acting as the
registrar
PricingModel