VoIP gateway security 

---

The ITG connects to the contact center's DEFINITY ECS by an ISDN-PRI trunk. This provides a buffer between your network's Demilitarized Zone (DMZ) and the contact center's DEFINITY ECS because voice data arrives from the Internet in (TCP/IP) packets and is transformed into ISDN-PRI data by the ITG before reaching the switch.

The ITG itself requires a direct-dialed analog line for the Remote Maintenance Board (RMB). This connection allows the ITG to place alarm calls to the Avaya Technical Services Organization if maintenance routines detect an alarm, and allows remote engineers to provision, upgrade, and troubleshoot the ITG.

We recommend that this dial-in port be protected using an Avaya Remote Port Security Device (RPSD) lock. The RPSD lock provides strong protection against unauthorized access to any dial-up port. Using security algorithms based on the Data Encryption Standard (DES), the RPSD lock helps ensure that this access point is secured while allowing the ITG to �call for help� and provide authorized callers with unhampered access.

The DEFINITY IP Solutions gateway requires a direct link from the contact center's DEFINITY ECS to the network's Demilitarized Zone (DMZ). Because it is TCP/IP-based, the gateway does not perform a protocol conversion of Internet voice packets before passing them into the DEFINITY ECS. Therefore, when using the DEFINITY IP Solutions gateway, your contact center should take standard precautions against unauthorized access from the DMZ.

Avaya IP600 security

The Avaya IP600 can connect to the contact center's DEFINITY ECS by either an ISDN-PRI trunk (see the section on ITG security for details) or by TCP/IP (see the section on DEFINITY IP Solutions security for details).