IngateŽ Systems is a leading developer of enabling SIP trunking, NAT traversal, remote connectivity solutions and SIP security edge devices for service providers, IP-PBX vendors and end-users.
Technology
Ingate’s award-winning Firewalls and SIParators solve the Network Address Translation (NAT) traversal issues with SIP while maintaining the security and integrity of the network. With Ingate, businesses can adopt SIP communications – including VoIP – to reach users not only within the local area network but outside the enterprise as well. Available in a range of sizes, Ingate’s security products offer unprecedented value to enterprises adopting SIP.
Ingate products also allow businesses to implement SIP trunking. SIP trunks rapidly reduce telephony costs by leveraging SIP and eliminating redundant network connections. Service providers benefit from Ingate’s ability to serve as a “universal adapter” between the IP-PBX and service provider, allowing them to interface seamlessly with most (if not all) IP-PBXs. Ingate also provides enterprise-class security for SIP trunk installations.
Ingate products enable remote SIP connectivity as well, providing authorized users sitting outside the LAN (remote workers, satellite offices etc.) the ability to use the SIP capabilities of their corporate network by enabling the traversal of SIP traffic through the remote firewall or NAT.
Ingate provides the highest level of security and control in SIP installations. All Ingate Firewalls and SIParators boast advanced security for VoIP, including support for Secure Real Time Protocol (SRTP) which provides one of the most secure environments for Internet telephony and VoIP applications available.
All Ingate products share the same software platform. They contain a SIP proxy and a SIP registrar, which manages SIP user and domain registration. Ingate Firewalls and SIParators support NAT and PAT and are ICSA certified. VPN with support for PPTP and IPSEC with 3DES or AES encryption are standard; Quality of Service functionality is available as a separate module.
Ingate Firewalls provide full enterprise security for all SIP and data traffic, while enabling secure SIP communication.
Ingate SIParators complement the network by adding SIP functionality and security without replacing the installed firewall. They allow the traversal of SIP traffic through the enterprise edge, securing SIP media while leaving the firewalling of data traffic to the existing security device.
Ingate Software Modules help end-users, carriers and IP-PBX vendors securely leverage the benefits of SIP communications. They include:
• Ingate SIP Trunking provides the advanced routing capabilities necessary for enterprises to connect to service providers’ SIP trunks, employing Ingate’s traversal and security technology together with a Back-to-Back User Agent to provide for normalization of the SIP signaling between the IP-PBX and the SIP trunking service provider. It is a flexible solution that has proven interoperability with leading SIP-based IP-PBX systems and service provider networks.
Ingate’s SIP Trunking Startup Tool will automatically configure a user’s Ingate Firewall or SIParator to work with the IP-PBX and SIP trunking service provider of their choice. With the push of a button, the installation tool will automatically create a SIP trunk deployment designed to the individual setup.
• Ingate Remote SIP Connectivity allows far-flung users to leverage the benefits of SIP-based communications integrated into the company’s network. This can be the case when, for example, there are home workers using SIP-unaware residential firewalls, or when employees “on the road” want to leverage the benefits of SIP-based communications from their hotel rooms. Available for all Ingate Firewalls and SIParators, RSC is the only product available today that delivers far-end NAT traversal within the firewall itself, eliminating the need for costly session border controllers in the corporate environment.
• Ingate Enhanced Security further strengthens security for VoIP, SIP trunking and other SIP applications. It features an Intrusion Detection System/Intrusion Prevention System (IDS/IPS) for SIP, making it possible to detect and protect against attacks based on the protocol. IDS/IPS protects the network against attacks targeting SIP devices on the LAN, such as SIP phones.
• Ingate VoIP Survival is an application module for hosted VoIP communications services that secures full redundancy in a SIP-based hosted PBX environment all the way out to the customer premises. It can be used with any hosted VoIP service, and ensures continued communications even if the hosted server goes offline due to connection failure or malfunction. This increased availability means that unnecessary downtime is minimized.
• Ingate QoS (Quality of Service) allows businesses to prioritize firewall traffic and limit the bandwidth for certain types of traffic (e.g. image downloading) to speed communications throughout the network. Ingate QoS provides bandwidth limitation for different traffic types (including guaranteed and maximum bandwidth), traffic prioritization for different traffic types and the option to tag traffic for prioritization in subsequent network equipment. The Quality of Service module is used to ensure that voice and video packets are prioritized to assure optimal user experiences.
Whitepaper
SIP Trunking Benefits and Best Practices