Elastix SIP Firewall, Руководство пользователя

Страница: 8 / 42

6
1. Introduction
1.1 . Overview:
This User manual describes the steps involved in setting up the Elastix
®
SIP Firewall
Appliance. Elastix
®
SIP Firewall is an appliance based VoIP threat prevention solution
dedicated to protect the SIP based PBX/Telecom Gateway/IP Phones/Mobile device
deployments. The appliance runs the Real time Deep Packet Inspection on the SIP
traffic to identify the VOIP attack vectors and prevents the threats impacting the SIP
based devices. The appliance has been made to seamlessly integrate with the existing
network infrastructure and reduces the complexity of deployment.
The appliance feature set includes,
§ Analyze SIP packets using the Realtime Deep Packet inspection engine.
§ SIP Protocol Anomaly detection with configurability of detection parameters.
§ Detection and Prevention of the following categories of SIP based Attacks.
•
Reconnaissance attacks (SIP Devices Fingerprinting, User enumeration,
Password Cracking Attempt)
•
Dos/DDos Attacks
•
Cross Site Scripting based attacks.
•
Buffer overflow attacks
•
SIP Anomaly based attacks
•
3
rd
Party vendor vulnerabilities
•
Toll Fraud detection and prevention
•
Protection against VOIP Spam & War Dialing
§ Attack response includes the option for quietly dropping malicious SIP packets to
help prevent continued attacks
§ Dynamic Blacklist Update service for VOIP, SIP PBX/Gateway Threats
§ Configurability of Blacklist/White list/Firewall rules.
§ Support for Geo Location based blocking.
§ Provide the option to secure against PBX Application vulnerabilities
§
Operate at Layer 2 device thus transparent to existing IP infrastructure - no changes
required to add the device to your existing network
§ Web/SSL based Device Management Access which will allow managing the device
anywhere from the Cloud.
§ Ability to restrict the device management access to specific IP/Network.
§ Provide System Status/Security events logging option to a remote Syslog server.
§ Provides the SIP throughput up to ~10Mbps.
§ Support for Signature update subscription and automated signature update
mechanism.