Every year the number of PBX fraud victims increases dramatically. More and more companies are targeted by individuals who are looking to bring down or exploit the communications system. Some do it for fun and others for illicit profit, but the end result is always the same… Huge bills and down time.

 

The most vulnerable targets remain small-medium size businesses that are new to managing their own IP PBX system. They either don’t have the IT experience and staff to properly secure and maintain the network, or they’re unaware of the risks altogether having recently switched from a landline system. Whatever the reason, many networks are consistently left unprotected. By the time most companies realize that something is wrong with their phone expenses, it’s too late - the network security has been compromised.

 

Features:

 

Who Needs an SBC?

• VoIP became a favorite target for hackers as its popularity and uptake increased in the past years
• Firewalls are just unable to block hackers who use scripts and bots to access PBX systems
• The Source address of the hacker is being deliberately spoofed, making it more difficult to detect even more when this one is also masked by the “noise” of many randomly generated addresses
• A common and devastating attack is the DoS (Denial of Service). PBX systems are unable to handle the flood of SIP requests generated by the hackers. These thousands of simultaneous requests brings your PBX down
• Brute force password guessing can have the same impact as a DoS attack

• Blox eSBC is Session Border Controller up to 60 simultaneous Channels
• Blox eSBC will secure your internal PBX/Gateway VolP Network from external network/internet
• Blox eSBC handles SIP-NAT issues observed in common VolP deployments
• Blox eSBC conducts DPI Packet Inspection of SIP traffic, supporting the Signatures for Key Malwares vulnerabilities observed in SIP Deployments
• Blox eSBC supports SIP-TLS, Topology Hiding, CAC, Media Pin-holing, Hosted PBX, Domain routing

• SIP Outbound/Inbound Trunk and domain policies to route the calls
• Secure Remote access to Internal SIP PBX
• Eliminates bad VolP signaling and media protocol at the network boundary
• Built-in firewall which can controls IP Addresses/Port based Filtering, DOS/DDOS Attacks, IP Blacklist & NAT. It opens pinhole in the firewall to allow VolP signaling and media to pass through
• Media bridging, which may include Voice over IP and Fax over IP
• Least Call Routing Re-Direct
• DTMF Support for RFC2833/INBAND/SIP INFO

• SIP Trunking (Connectivity)
• Remote Worker (Roaming User)
• SIP Registration Pass-thru
• Core Session Router (Call Routing)
• SIP Intrusion Prevention
• DDoS / DoS Attack Protection
• SIP Registration Scan Attack Detection
• SIP Header Normalization
• SIP Malformed Packet Protection
• Topology Hiding
• Call Access Control (Total calls per Trunk, Inbound/Outbound)
• Least Cost Routing
• Media anchoring
• Call Security with TLS
• Advanced NAT Traversal Capabilities
• T.38 Fax Relay
• CDR record generation
• SIP Header Manipulation
• IP Firewall
• VLAN and Virtual IP support
• Packet-to-packet call flows (B2B UA)
• Media relay with dynamic pinhole control
• SIP Request Rate Limiting
• GUI Troubleshooting tools – Ping, Traceroute, Packet Capture, SSH Terminal

• Media codec transcoding through Allo Transcoding Hardware with Full RTP Transcoding (G.711, G.722, G.729, G.726, G.723.1, iLBC, AMR, G.722.1)
• SRTP media encryption through Allo Transcoding Hardware
• T.38 Fax Bridging (G711 to T.38 Packets)