
Explore the session border controller fundamentals, understanding how the Avaya SBC secures sip-based unified communications and contact center connectivity, with EMS and SBC components, deployment options, and high-availability configurations.
Understand how session border controllers complement firewalls to secure voice and unified communications traffic. They offer TLS and SRTP encryption, DMZ deployments, and scalable redundancy for thousands of SIP sessions.
Explore enterprise SBC architecture, focusing on EMC as centralized brain and HP pairs delivering active-active redundancy for thousands of SIP trunks, and compare one-wire and two-port configurations.
Design secure SBC architectures by placing the SBC in a DMZ between two firewalls, routing and inspecting traffic to protect SIP trunks and prevent DoS attacks.
On this training we will learn the Avaya Session Border Controller for Enterprise is a flexible, fit for purpose solution for Enterprises - that includes a set of standard security features. The Avaya Session Border Controller for Enterprise provides all the functionality required for an enterprise to terminate SIP trunks without the complexity and higher price associated with typical SBCs and scales up to 2,000 simultaneous sessions per server.
Avaya SBCE provides security to SIP-based Unified Communications (UC) networks. Avaya SBCE is available in two versions: Advanced Services and Standard Services. Either version can reside on supported servers for Release 6.3.
Avaya SBCE has two main components: the Session Border Controller (Avaya SBCE) and a management system called the Element Management System (EMS).
SBCE has following features:
1. Security:
a)Blocking Malicious attacks in general and Denial of Service (DoS) attacks in particular
b)Preventing Toll fraud attacks based on using rogue media streams
c)Discarding Malformed packets
d)Controlling Access to the internal network
2.PRIVACY:
a)Hiding the internal network Topology (“Topology Hiding”)
b)Encrypting SIP signaling packets and/or Media packets
3.INTERPERABILITY:enables different networks to communicating by providing:
a)Network Address Translation (NAT) – substituting external IPs with internal IPs
b)Manipulation of headers within SOP messages
4.REGULATORY:provide support for:
a)Prioritizing Emergency Calls (e.g.,e911 phone calls)
b)Documenting Compliance with communication regulations
c)Enabling Law enforcement agencies to intercept telecommunications (“wire tapping”)
5. Media Services:
a) Interpreting DTMF tones and relying them as signaling messages
b)Transcoding media from one codec to another
c)Providing tones and announcements
d)Enabling reliable transmission of modern data and FAXes
e)Supporting diverse media streams such as video