14
Installation Overview
ETM Appliances are located inline with your customer-premises telecom
equipment to monitor usage and control access to your telecommunications
network. In a standard deployment, ETM Appliances are typically located
on the telephone network side of the PBX, as close as possible to the PBX.
Appliances can also be deployed on outside lines that bypass your PBX.
You should install the Management Server and Appliances in a secure
location and access to them should be limited. Installing the Management
Server and Appliances on a dedicated subnet can provide network security
as well as protect Station Message Detail Recording (SMDR) and other
transmitted data. Triple DES encryption provides additional security.
Additional Appliance location considerations include:
TDM and analog Spans in the 1012, 1024, 1090, 2100, and 3200 ETM
Appliances should be placed on the trunk side, between the telephone
network and the CPE, as close to the CPE as possible.
ETM 1050 Appliances (AAA) can be located anywhere that has
TCP/IP network connectivity for communication with the Management
Server and one or more standard analog phone lines for its modems.
The 1050 supports only IPv4.
ETM 1060 Call Recording Cache (CRC) Appliances can be located
anywhere that has TCP/IP network connectivity for communication
with the Recording Spans, ETM Server, and Collection Server (if
used). A low-latency network connection is best, since no recording
can occur if the Recording Span cannot connect to the CRC.
ETM 5000 series SIP Appliances and the SIP AXP solution are
installed logically inline on SIP trunks.
The ETM Server should be located in an area with a high level of physical
security, such as a server room, and you should maintain good, industry-
standard security practices for securing the operating system on the
Management Server computer. If you choose not to use DES encryption, it
is recommended that the Management Server communicate with its Spans
on a dedicated subnet within your LAN so that SMDR and other transmitted
data will have a layer of security protection. A dedicated subnet can also be
used so that the ETM System network traffic will not have to compete with
other network traffic.
Each ETM Server is associated with a specific Report Server. The Report
Server is typically installed on the same computer as the ETM Server,
although with proper configuration, it can be installed on a separate
computer.
Choosing
Locations for
ETM
®
System
Components
Appliance
Location
Management
Server Location
Report Server
Location