Mitel MiVOICE BUSINESS, Engineering Manualline

Page: 359 / 381

VoIP Security
345
IP path to the gateway will be secure, where possible. The connection on the TDM devices will
remain a dedicated connection to the requested service.
A conference call with a number of users requires multiple connections to the IP gateway.
Connections between the IP end device and this gateway will be encrypted, where possible.
Connections to the conference bridge are established over the internal TDM infrastructure.
PSTN connections or TDM devices connected into this bridge will not use encryption, but will
maintain their normal dedicated connections.
VOICE STREAMING TO APPLICATIONS
A number of applications and end devices support encryption. There are some, however, that
do not support encryption measures. Connections to these devices will be established without
encryption. For a list of devices and applications that support encryption, refer to Table 83.
End devices that connect to the external port of the MiVoice Border Gateway (formerly
Teleworker solution) are secure, but when similar end devices are used within the LAN
environment, they may not be fully secured.
Further details can be found in the MiVoice Border Gateway Engineering Guidelines . The
MiVoice Border Gateway also terminates both internal and external secure connections. This
allows for differences in encryption methods; external secure connection and unsecured internal
connection.
MiCollab Client provides a softphone with encrypted call path and call signalling and secure
instant messaging to keep IM traffic encrypted and inside the network.
The SpectraLink wireless phones and the Mitel WLAN stands may use security on the air access
interface (radio link) such as WEP or WPA2. However, this only covers the wireless connection
and not necessarily the remaining connection across the remaining network infrastructure.
DATA ENCRYPTION SUPPORT
A number of end devices support secure signalling and secure voice media streaming. The
following table lists the devices and security support:
Table 83: Security Support by Device
DEVICE
SECURE
SIGNALLING (SSL)
SECURE
SIGNALLING
(SECURE MINET)
VOICE
ENCRYPTION
Controllers/Gateway
3300 CX/AX/MXe/ISS Yes Yes Yes
SX-200 ICP CX/MX No Yes Yes
Phones
5001 No Yes Yes
5005 No Yes Yes
5010 No Yes Yes
Page 1 of 3