Do you have a SIP Voice over IP system in use at your business? Then you may want to take a couple minutes to read this…
It seems that many of these systems are being setup without any consideration for security at all. Leaving the potential for a malicious person to do things such as attack your system by sending a DoS flood to it, or even to make phone calls from your VoIP system! (This is referred to as “Toll Fraud”)
So how do you protect yourself? The best thing to do is to cut off access to your VoIP server via a firewall. If you don’t need access to something, disable it.
Try not to put your VoIP system in the DMZ (De-Militarized Zone) that offers no protection.
The most obvious way into your system is via the web configuration, usually on port 80. If that is wide open and default passwords are in use, a person could log into your box, add extensions, voice mail, etc. So be sure to change your default passwords and disable access to the machine from outside, unless you NEED access from outside, and then if that is the case, setup your firewall to allow connections ONLY from specific IP addresses you use.
The standard SIP port of 5060 is another gaping hole. If you must have SIP open to the outside world, consider changing the port from the default to something else so it doesn’t easily show up on the radar of people who might be doing port scans. You could also set your firewall to only allow connections from known outside IP addresses.
Either of those options can help prevent a SIP flood which could make your VoIP system unusable.
The SIP extensions probably have default passwords when you create those, depending upon which VoIP system you are using. Do not be tempted to use easy passwords…
One of the best ways to protect your SIP VoIP system is to use a VPN connection from any location that will be connecting to your main site. Cisco SPA 525g phones have the capability built-in to connect via VPN, making them a great phone to deploy to those who work out of their home.
If you would like further information, please call 864.990.4748 or email info@homelandsecureit.com. We sell Cisco, Polycom, Digium and other VoIP systems, phones and components, and offer consultation, installation and service in the Greenville / Upstate SC area.
Are you using an Asterisk based VoIP system and have your voice mails sent to you via email? If you are using an Android based phone, you may not be able to open these attachments within email and play them.
Several forums discuss workarounds that should get you going, such as having the VoIP system convert the audio file to MP3 format, but there is an easier way than that.
We found a great Android app in the Market Place that handles this perfectly! For the price of only 99 cents, you can open your emails, and if they contain WAV file attachments, play them, instead of possibly saving them, then using another media player to listen.
There are probably free apps that will do the same thing, however, this one tested well and performs as expected, so I will recommend it to you.
Search the Android Market Place for “WavPlayer”, it is by Dennis Lockshine.
Once installed, open an email with a voice mail (WAV) attachment and you can then PLAY. When prompted, select the WAV Player app…
If you are using another app, maybe a free one, or a more full featured one, I would love to hear from you… If you are in the Greenville / Upstate SC area and need help with this app or your VoIP system, please call us at 864.990.4748 or email info@homelandsecureit.com
iPhone Switchvox app lets you take your office phone with you!
How many times have you left your office while waiting for an important call to come in? What did you do? Set a special voice mail greeting? Forward all calls to your cell phone?
That’s what most people have done, until now. If you are lucky enough to have a VoIP phone system such as a Digium Switchvox solution and an iPhone or Blackberry, you can literally take your office phone with you now.
Your VoIP system is configured to allow mobile API, the firewall is configured to allow the proper ports through to your VoIP system and your phone gets the app loaded and configured. That’s it, you now have full access to your phone system. You can make and receive calls on your phone either from the cellular provider phone line, or via your VoIP system at your office.
You can call extensions, change your voice mail greetings, and any other function that you could from your desk phone. You would never miss an incoming call, and possibly more important to some, calls made from your cell phone while in the field, via the VoIP system, would never reveal your private cell phone number.
Another added benefit is that using the VoIP system will let you use your phone calling plan from your office, and bypass the phone plan on your cell phone entirely. This could save you hundreds per year!
Official apps are available for the iPhone and Blackberry, and some unofficial apps are available for Android phones.
If you would like more information about or would like to purchase a VoIP phone system, we are partners with Digium, Cisco and work with all Asterisk based systems in the Greenville & Upstate area. Please call us at 864.990-4748 or email info@homelandsecureit.com with questions!
