![background image](http://html1.mh-extra.com/html/allo-com/shield-stm/shield-stm_user-manual_2903749005.webp)
STM- Introduction
1
User Manual v1.0
www.shield.com
1. Introduction
1.1. Overview:
Shield STM is an appliance based VoIP threat prevention solution dedicated to protect the
SIP based PBX/Telecom Gateway/IP Phones/Mobile devices deployments. The appliance
runs the Real time Deep Packet Inspection on the SIP traffic to identify the VOIP attack
vectors and prevents the threats impacting the SIP based devices. The appliance has been
made to seamlessly integrate with the existing network infrastructure and reduces the
complexity of deployment.
The appliance feature set includes,
•
Analyze SIP packets using the Real time Deep Packet inspection engine.
•
SIP Protocol Anomaly detection with configurability of detection parameters.
•
Detection and Prevention of the following categories of SIP based Attacks.
¾
Reconnaissance attacks ( SIP Devices Fingerprinting, User enumeration,
Password Cracking Attempt )
¾
Dos/DDos
Attacks
¾
Cross Site Scripting based attacks.
¾
Buffer overflow attacks
¾
SIP Anomaly based attacks
¾
3rd Party vendor vulnerabilities
¾
Toll Fraud detection and prevention
¾
Protection against VOIP Spam & War Dialing
•
Attack response includes the option for quietly dropping malicious SIP packets to
help prevent continued attacks
•
Dynamic Blacklist Update service for VOIP, SIP PBX/Gateway Threats
•
Configurability of Blacklist/Whitelist/Firewall rules.
•
Support for Geo Location based blocking.
•
Provide the option to secure against PBX Application vulnerabilities
•
Operate at Layer 2 device thus transparent to existing IP infrastructure - no changes
required to add device to your existing network
Summary of Contents for Shield STM
Page 1: ......
Page 2: ...User Manual Shield STM Appliance 1 0 Version 1 0 ...