Page 1
1
IngateCompanyPresentation
Ingate’smissionistoenablethebestaccessfortelephony,globalreal-timeandunifiedperson-to-personcommunicationforeveryone.
Name:GinoLarenasTitle:Pre-Sales&SupportManager
Phone:+4686007755sip:[email protected]
Page 2
2
IngateSystems– QuickFacts
Ø Founded2001withIntertexheritagefromthe80s
Ø HeadquartersinStockholm,Sweden
Ø NorthAmericanofficesinMassachusettsandFlorida
Ø Japaneseliaisonoffice
Ø Aleaderinreal-timeSIPcommunicationswithmorethan50000smalland10000businessandenterpriseinstallationsin50+countries
Ø Leadinginnovatorwithpatentsregisteredandpending
Ø FirstSIParator®(SIPProxybasedfirewall&E-SBC)deliveredin2001
Ø FirstE-SBCcertifiedbytheICSALabsforVoIPSIPsecurityfirewall
Ø Ingate’sSIPTrunkingSeminarsatITExpoformorethanaDecade– BringingSIPtotheEnterprisehttps://www.ingate.com/itexpo_miami_2015.php
Page 3
3
WeWantToMakeOurCustomersSuccessful
Ø IngateenablesSIPandWebRTCcommunicationsforbusinessefficiency
Ø IngatemakesiteasytoconnectSIPtrunkstoPBXs,UnifiedCommunications(UC)solutionsandcallcenters– TheeasiestwaytoUCenableyourcompany
Ø NextgenerationcommunicationswiththepowerandsimplicityofWebRTCcombinedwiththeestablishedbenefitsofSIP
Ingate’smissionistoenablethebestaccessfortelephony,globalreal-timeandunifiedperson-to-personcommunicationforeveryone.
Page 4
4
CompatibilityList
4
Page 5
55
WhatisSIPTrunking?
Traditional Telephony
IP-PBX
Internet
SIP Trunking
Data & VoIP LAN
PSTNSIP Trunking
Provider NetworkSIP System
Session Border Controller
Internet
Data LAN
PSTN
PBX
PRISIParator®
Simple,buttheserviceproviderorretailerneedstoprovideagoodSBCfortheUC(UnifiedCommunications)environment.
Page 6
6
SIPTrunkvsPRI
SIPTrunkssupportflexibleuseofbandwidthoverexistinginternetaccess.
AddoneSIPTrunkatatime!
PRIdedicateafixedamountofbandwidthtovoice,evenifthere’snovoicetraffictocarry.
Page 7
7
WhyDoYouNeedanSBC?
Enterprise IP Voice Network
SBCsitsattheBorderofnetworksandactasanInterworkingElement,Demarcationpoint,Centralizedroutingdatabase,FirewallandTrafficPolicies
Security NetworkAnalytics
• Protectresources• Facilitateconnectivity(NAT)
• Providemediaandsignalingencryption
NewServicesInteroperability
• EnterprisesandServiceProviders
• EnterprisePBXsandUCPlatforms
• Protocols
• Troubleshooting• CDRcollection• Demarcation
• HDVoice• VideoServices• CloudbasedApplicationaccess
IP-PBX
SIP PhonesSIP Trunking
Provider SIPSIP
IngateSIParatorSBC
Page 8
88
Benefit#1:LocalPhoneNumberswithCentralizedCallManagement
• WithPRIsthelocalphonenumbershavetobeterminatedatalocaladdress– ResultsinduplicatePBXs,telephonymanagement,maintenanceagreements,etc.
• SIPTrunkingenableslocalization(geographicalindependence)– Customerscancallalocaloffice,butthecallcontrolandroutingarecentralized– Customerscancallalocalnumberandreachacentralizedcallcenter– Abusinesscanmoveandretaintheirwell-knownphonenumber
• Howisthispossible?– SIPusesthepoweroftheInternettoroutetraffic,vs.theoldtechnologyofpoint-to-point
telephonycircuits
• UseyourSBCtoreapallthebenefits– Callscanberoutedtothelocalofficedependingonthenumberfromwhichthecallwas
initiated– ThecentralizedSBCcanbeprogrammedtodisplayaCallerIDdependingonthedialednumber
Page 9
99
Benefit#2:ControlandSecurity• Traditionaltelephonyofferedfewprotectionsagainstunwantedcalls,eavesdropping
ortheftofservice• EverySIPTrunking installationshouldhaveanE-SBCatthecustomeredge• E-SBCscan:
– SecurelyconnectthePBX/UCSolutionontheprivateLAN• TheE-SBCresolvestheFirewall/NATtraversalissues• PlaceyourPBXbehindthecorporatefirewallonaprivateIPaddress
– Rejectunwantedcalls• Createblacklistsandwhitelists
– Preventtheftofservice• Requireuserauthenticationtopreventservicetheft
– PreventDenialofServiceattacks• LimitthenumberofcallsfromaparticularIPaddressordomain
– Maintainprivacy• EncrypttheSIPsignalingand/ormediatopreventeavesdropping
Page 10
1010
Benefit#3:Increasedproductivityandcollaboration• Fact:40%ormoreofemployeesworkfromhome
• SIPgivestheseemployeesthesamecommunicationfeaturesasiftheywereintheoffice
• WiththeIngateSIParatorinplace,remoteworkerscanconnecttotheircolleaguesortothePBXbyFar-EndNATTraversal(FENT)– Extendstheofficeenvironmenttothehomeworker,travelingemployeeandsmall
branchoffices– Enablescollaborationwithoutincurringchargesfortelephonelinestothehomeor
excessivemobilephonecharges
• Result:Moreproductivityfromtheentireteamofworkerswherevertheyaresituated
Page 11
11
Benefit#4:Scalability
• SIPTrunkscanbeturnedupremotelyandinstantly– Nonewcablesneedtobeconnected– Aslongasadequatebandwidthisavailable
• Whobenefits?– Seasonalbusinessesthathaveacallsurgeduringbusyseasonswhichthenfallsback
fortherestoftheyear– Rapidlyexpandingbusinesses– Businessesthatwanttorunaspecialpromotionthatwillexpandthenumberofcalls
• ScalingisonlyachievablewithSIPTrunking
Page 12
12
Benefit#5:FasterDisasterRecovery
• SIPisroutedovertheInternetanddoesn’tdependonpoint-to-pointconnections
• Intheeventofadisasterthatrenderstheprimarybusinesslocationunusable,aSIPservicecanbereroutedtoanotherlocationbasedonIPaddressalone
• WithSIPTrunking-redundantPBXs,serviceprovidersandSBCscanbeinstalledtoavoidsinglepointsoffailure
• Redundantcomponentscanbegeographicallyseparatedforgreaterpeaceofmind
• TheIngateSIParatorcanautomaticallyreroutecallsbetweenPBXsorserviceproviders
• ForlargerdeploymentsIngateoffersa48VDCpoweroption– Enableslongerruntimewithinstalledbatterybackupservices
Page 13
13
Benefit#6:FoundationforUnifiedCommunications/WebRTC
• UnifiedCommunicationsaddsnewmodesofbusinesscommunication:– Voicemailconvertedtoemail– Video– Screen-sharing– InstantmessagingandSMS
• Enablesbetterbusinesscollaboration
• WebRTCisanewopenprotocolthatwillenhancethesecommunicationfeatures
• IntegratingSIPandWebRTC– soontocomeinsomeSBCs- offersthebusinessalow-cost,robusttoolsettosupportcollaborationinadecentralizedworkenvironment,B2Cenvironments- Whencommunicationsisimportant!
Page 14
14
WhyIngateForSIPTrunking?
Ø FirewallandNATtraversalØ SIPnormalizationandrepairØ SupportforremoteworkersØ DynamicportmanagementØ SecurityØ HighAvailabilityconfigurationØ VPNConcentrator3DES,AES
Ø ExtensivedialplanØ SIPRoutingØ QoStaggingØ MultiplesystemintegrationØ DiagnosticsØ CDRstoRADIUSserver
Softwareforvirtualmachine
Page 15
15
§ 360Networks§ANPI§Airespring§ AT&T§ BandTel§ Bandwidth.com§ Broadvox§ BT(BritishTelecom)§ Cablecom§Cellip§ CommPartners§ CordiaCorporation§ Earthlink§GammaTelecom§ GlobalCrossing§ IP-Only§ Nectart§ JumaNetworks§ Level3§ Lightpath
§ Netlogic§ Nexvortex§ Nuvox§ O1§ Primus§ RNKTelecom§ TDC§ Telavox§ Tele2§ TelePacific§ Telia§ Toplink§ Tritel§ VirginMedia§ Verizon§ VoEX§ VoiceFlex§ VoIPUnlimited§ Voxbone§ Voxitas§Windstream§ XeloQMoreinpipeline.....
ConfirmedInteroperabilitySIPTrunkProviders
§ Avaya§ Broadsoft§ Cisco§ Digium/Asterisk§ Fonality§ Innovaphone§ InteractiveIntelligence§Microsoft§Mitel
CarrierEquipment
§ AcmePacket/Oracle§ Broadsoft§Metaswitch§ Sonus§Genband
IP-PBXs§ NEC/Sphere§ Panasonic§ Samsung§ SER§ Shoretel§ Snom§ Sonus§ Swyx§ TadiranTelecom
SIPTrunking
Compliantwith
IngateCancreateinteroperabilitybetweenequipmentfrommultiplevendors
Page 16
16
TheIngateProductFamily
Page 17
17
ExtensiveFeatureSet– DetailsListedSIPSecurityFeatures• Topologyhiding• AuthenticationagainstaRADIUSServerorlocaldatabase• Accesscontrol• IntrusionDetectionSystem/IntrusionProtectionSystem• Protectionagainst
o DenialofServiceandDistributedDenialofServiceattackso Malformedmessageattackso RTPsessionhijackingo Packet-levelintrusiono Sessionhijackingandredirectiono Vmailbombingo SIPspam(SPIT)
SIPFunctions• SIPproxy• B2BUAonapercallbasis• SIPRegistrar• UDP/TLS/TLSSIPsignalinginanycombination• SupportsallSIPservices• PBXandITSPinteroperability• MonitoringanySIPsignalingports• LoadbalancingofSIPtraffic• DNSoverrideforSIPrequests• StrictSIPparser(optional,securityenhancing)• Dynamicportopening/closing,controlledbySIPproxy• MaintainsthestateofallsessionsandrejectsallunrelatedSIPpackets• Headermanipulationandregularexpressions• Encryptioninterworking
VPNFunctionality• X.509certificateandsharedsecret• GenerationofX.509certificateforclients• PPTPserver• IPSec(3DES,AES,NULL,MD5andSHA1)
Firewall/Routing• Statefulinspection• Packetfiltering• ProvidesflexibleNATandPAT• Handlesalldatatraffic• Dynamicportforwarding• DefaultgatewayoftheLAN• DCHPproxyandserver
MonitoringandDiagnostics• SNMPV1,V2,V3• InternalloggingtoHD• LoggingtoPCAPfile• Syslog• E-mailevents• Automaticcheckfornewreleases
EnhancedSIPSecurityProvidessignaling(TLS)andmedia(SRTP)encryption,includingtranscoding
EncryptionTermination/Transcoding
AuthenticationSIPFilte
ring
FlexibleControl
Near-EndTraversal
Firewall&NAT
SIPProxy,ALG,B2BUA,Registrar
RemoteSIPConnectivity
QoS,Taffic
Mgm
t
SIPTrunking
ENUMSupport
Page 18
18
Ø WANSIParatorrecommendedwithshareddataandvoiceIP-pipe:Ø SIParatorcontrolsQoS(trafficshapestofavourvoiceoverdata)
Ø SetupofExistingFirewallusingLANorDMZSIParator:Ø PortForward5060Ø PortForwardMediaPortrange
IngatecanalsobeusedasthecompletecombinedDataandVoiceEnterpriseFirewall
SIParator®ModesareUsedTogetherwithExisting(nonSIPAware)Firewalls*
Page 19
19
WebRTC– NextGiantLeapinTelecommunication
Ø WebRTC,WebReal-TimeCommunication– Highqualitymultimediacommunicationdirectlyinthewebbrowser
Ø GoogleinitiativebeingstandardizedbyW3CandIETF
Ø Willfinallytaketelephonytothe21stcentury
Ø Ingate’supcomingWebRTCproducts:Ø TheIngateWebRTC&SIPCompanion
WebRTCenablesIP-PBXs,UCandCallcentersØ Ingate’sQ-TURN(TURNServerinE-SBC/Firewall)
BringsWebRTCcommunicationthroughrestrictiveØ Enterprisewithquality(QoS)andaccounting
Ø Tryityourselfathttps://webrtc.ingate.com
Page 20
20
Ø CompleteE-SBCSolutionatanaffordableprice
Ø ExtensiveSIPsecurityfeatures
Ø Multiplenetworkconfigurationoptions
Ø FullDataandVoiceFirewallIntegrated
Ø Easytoinstallandmaintain
Ø Proveninteroperability
Ø Allthefeaturesincludedinthesoftware
Ø EuropeandUSbasedsalesandsupport
Ø BestwarrantyintheIndustrywithAdvanceReplacement,nextbusinessdaydeliveryincluded
Ø RecognizedSBCexpertsandProvedtrustedvendor
Ø RemoteuserfarendNATtraversal
SummaryIngatetheRightE-SBCChoice
Page 21
21Ingate’smissionistoenablethebestaccessfortelephony,globalreal-timeandunifiedperson-to-personcommunicationforeveryone.
Q&A
Page 22
22Ingate’smissionistoenablethebestaccessfortelephony,globalreal-timeandunifiedperson-to-personcommunicationforeveryone.
ThankYou!
Page 23
23
Ingate SIParator Featuresataglance:
BackUpMaterial!!
Page 24
24
ØRobustproductfor:Ø NATTraversalØ SIPSecurityØ EncryptionØ SIPNormalizationØ RemoteWorkersØ QualityofServiceØ RoutingØ LoggingandDiagnosticsØ PerformancemetricsØ AccountingandmanagementØ HighlyreliablehardwareØ Failoversupporttooptimizesystemavailability
ØScalableandaffordableØ Modelstosupportfrom5to20,000simultaneouscallsØ HardwareorSoftwaredelivery
ØSeveralinstallationconfigurationsformaximumflexibility
Ingate SIParator Featuresataglance:
Page 25
25
ØNATtraversalØ Enableincomingandoutgoingcallstotraversepremise-based
NATdevicesØ Addresstranslation
ØTelephonenumber&URImanipulationØ Enableprefix,suffix,wildcardandothertelephonenumber
manipulationstoenhance/controlsessionroutingØProtocolnormalizationandfix-ups
Ø Signaling– provideprotocolnormalization,repairandinterworkingforSIPtoSIP,SIPtoSIP-T,SIPtoSIP-I,SIP-ItoSIP-T
Ø Transport– providesupport&interworkingforUDP,TCP,SCTPØ Encryption– providesupport&interworkingfornone,TLS,MTLS,
IPSec,SRTP
SBCFunctionality
Page 26
26
ØSBCDoS/DDoSprotectionØ ProtectSBCfromDoS/DDoSandother
maliciousattacksØ ProtectSBCfromnon-malicious
overloads
Ø Allowtrusted/authenticatedusersaccesswhileunderDoSattack
Ø Dynamicallyacceptorrejecttrafficbasedondevicebehavior
Ø Restrictusagetopreventautomateddialing/unwantedsessions
SecurityFeatures
Ø Topologyhiding&privacy
Ø Hidecoretopologytopreventdirectedattacksandpreserveconfidentiality
Ø Maskuserinformationforprivacyand
confidentiality
Ø Protectusersandserviceproviderinfrastructurefromeavesdroppers,identitythievesandfraud
Ø Protectnetworkfrommaliciousattachments,preventmalformedmessagesfromoverloadingresources
Page 27
27
Ø FraudpreventionØ Performsignalingandmediavalidationbyauthenticatingand
authorizingusersØ Enforceservicecontractper-user/deviceandpreventpiggy-back
usage
Ø MonitoringandreportingØ MonitorandreportonalarmsforattacksandoverloadsØ Audittrailsforattackresponse&fraudinvestigationØ Providesecuremonitoring&managementaccesstoprotectfrom
unauthorizedpersonnel
SecurityFeatures
Page 28
28
Ø Admitsessionsbasedonsignaling&bandwidthconstraintsperuser,networkorsessionagent
Ø Interfacetoexternalpolicyserversandbandwidthmanagers
Ø Overloadprotection&control
Ø Loadbalancetrafficbasedonnumberofsessionsorrateofsessions
Ø Rejectordiverttrafficbasedupondestinationnumbertocontrolmasscallingevents
Ø Failuredetection,trafficre-routeandrecovery
Ø Monitorperformanceandavailabilityofrouter,SIPregistrar,SIPsessionagent
QualityofService
Ø Re-routeorre-distributetrafficbaseduponperformancedegradationorfailure
Ø AssignQoSmarking/VLANmapping basedonapplication,sourceaddressordestinationaddress
Ø Releasemediapeer-peermediabetweenendpoints
Ø MeasureQoS(latency,jitterandpacketloss)andASRpersession
Ø AppendQoSandASRinformationtoCDR
Page 29
29
Ø RoutingØ Leastcostrouting(LCR)
Ø ENUM-basedrouting
Ø Carriercode-basedrouting
Ø Industry-standardENUM,SIP,XMLandDNSinterfacestothird-partyroutingdatabases
Ø Largelocalroutetablesforstatic,localizedroutingdecisions
Ø Codecstripping&re-ordering
Routing
Page 30
30
Ø Monitorandreportonalarmsforattacksandoverloads
Ø Audittrailsforattackresponse&fraudinvestigation
Ø Providesecuremonitoring&managementaccesstoprotectfromunauthorizedpersonnel
Ø MeasureQoS(latency,jitterandpacketloss)persession
Ø AppendQoSandMOSinformationtoCDRpercall
Ø SNMPtrapscanbesenttoanymonitoringsystem
Ø Extensivelogging
Ø DirectgenerationofPCAPtraces
Accounting,Monitoring,andReporting
Ø AccountingØ GenerateCDRs
Ø RADIUSaccounting
Ø ManagementØ Policemediabandwidthpersession
baseduponauthorizedcodec
Ø Terminateinactivesessionwithsessiontimers
Ø EnsureonlyauthorizedsessionsreceivecorrectQoSandresourceallocation
Page 31
31
Network Topology
Select PBX
Select ITSP20 minutes: start to call completion
IngateSIPTrunkingStart-upTool
Page 32
32
ØWarranty – Next Business Day ReplacementØOne year includedØThree years available for an additional charge
ØUS Help Desk located in Greenville, SCØBackup Support resources in Sweden working US hoursØRequired support
ØNormal Business Hours (9AM – 6PM Eastern) plus software upgradesØPriced at 10% of product value
ØOptional 24 x 7 x 365– one hour call back plus software upgradesØPriced at 15% of product value
ØTraining availableØ Ingate.thesipschool.comØWeb basedØOn-site
Services
Page 33
33
ØCapacity LicensesØ Concurrent Call Sessions (CCS)
ØAdd support for the number of calls required to be processed through the unit
ØSpecify quantity of sessions by SIP Trunk Group / or share between all SIP Trunk Groups
ØSold in specific quantity incrementsØ Remote User Session Licenses (RUS)
ØEnables remote workers to utilize the features of a centralized SIParator
ØSold in specific quantity incrementsØRegistrations
ØEnables the SIParator to act as the primary registrarØNot generally required when the PBX or UC Server is acting as the
registrar
PricingModel