Sign up

Vonage Forum Menu

Vonage Forums
Vonage VoIP Forum
mikebrown Posted:
there, Please
check out -

In The Forum:
Hard Wiring - Installation
Hardwiring in a Rental House
On Oct 24, 2017 at 22:29:48

mikebrown Posted:
Hello, I think
you should consult
it with the Expert
they can surely
help you

In The Forum:
Hard Wiring - Installation
Hardwiring in a Rental House
On Jun 24, 2017 at 09:15:34

Haniltery Posted:
For wipe call
history also some
of the offline, in
gengral , it
usually apply to

In The Forum:
How to Delete call history from online account?
On May 09, 2017 at 06:14:26

diana87 Posted:
You have to use
VPN service to
and get free
access while

In The Forum:
Recent calling problem from Egypt
On May 02, 2017 at 17:28:06

dconnor Posted:
What is the main
number on the
account? And
which one is the
virtual number?

In The Forum:
Vonage UK
How do you call 999
On Apr 27, 2017 at 18:52:02

Trafford Posted:
Seems like a
question. We
rely exclusively
on a Vonage system
for our

In The Forum:
Vonage UK
How do you call 999
On Apr 27, 2017 at 10:42:50

diazou Posted:
Hello, It's
compatible with
Android your phone
? Thanks!

In The Forum:
IP PBX for small business
On Mar 28, 2017 at 12:42:33

jeddaisg Posted:
Hi all We have
a Vonage VOIP
system for our
office. Lately,
our call quality

In The Forum:
Ethernet Cable; Wiring schematic? 568-B?
On Feb 23, 2017 at 18:33:52

beast321 Posted:
I don't know if
you heard, that
many more
Dreamcast games
are opened up

In The Forum:
Fax - Tivo - Alarms
Using phone as a dial up modem for Dreamcast Gaming
On Feb 16, 2017 at 03:16:51

Av8rix Posted:
Sorry to start a
new thread on an
old topic but when
I google “Vonage
MAC address

In The Forum:
New adapter and router -- MAC change
On Jan 11, 2017 at 01:07:21

Vonage VoIP Forums

Vonage In The News
Vonage Expands International Presence with Investments in Asia Pacific Region

Vonage to Present at the Oppenheimer 20th Annual Technology, Internet & Communications Conference


Vonage Customer Reviews
Salt Lake City: impressions after several months
Salt Lake City: impressions after several months

Review: My First Day With Vonage, Excellent!
Review: My First Day With Vonage, Excellent!

Great Price, No Complaints
Great Price, No Complaints

You need some common sense.
You need some common sense.

Vonage Customer Review: One month with Vonage, and...
Vonage Customer Review: One month with Vonage, and...

Vonage Reviews

Voice Over IP Security

Vonage In Print News

Voice Over IP Security

March 18, 2004

By Matthew Tanase


As information technology professionals, we are constantly bombarded with new products and ideas claiming to be revolutionary. And for a brief amount of time, a few of these technologies seem to grab all the headlines, in trade magazines, on tech sites and at industry conferences. The technology darling of late is VoIP. Short for Voice over IP, you've likely come across it, probably considered it and possibly deployed it. The hype, deservedly so, is reaching a crescendo as excess bandwidth, improved software and better hardware drive this technology forward. For the right situations, it's a truly wonderful solution. Lower phone bills, virtual offices, centralized management and rapid deployment are just a few of the benefits. And the success of companies such as Vonage and Skype, combined with the growth of wireless networks will move this technology from enterprises to smaller businesses and the SOHO market. Unfortunately, new technologies bring new security concerns. Suddenly, you have the burden of protecting two infrastructures - voice and data. This article will introduce voice over IP concepts and the new security concerns they raise.

Is it Better?

Before jumping into the security factors of a voice over IP network, let's examine the rationale behind it. The traditional telephone network, known as POTS (plain old telephone service) or the PSTN (public switched telephone network), served us well for many years. Unfortunately, it was costly, managed by only a few companies and inefficient. Each voice call over POTS uses a unique connection, allotted 64K of bandwidth. We're all familiar with a T1 connection, which has 24 channels and 1.5M of bandwidth (64K *24). In reality, a quality voice call on one of these channels requires a fraction of the 64K granted to it by POTS. Moreover, a silent moment, or lapses in speech still consume the 64K. Voip deployments capitalize on the inefficiency of this design. The analog voice signal is digitized, compressed, chunked into packets and sent over a data network. Advanced compression algorithms reduce the bandwidth necessary for a quality voice call to a fraction of the 64K required by POTS. The silence and background noise transmission of POTS can be eliminated as well (although some deployments build this feature in to comfort end users!). As if the bandwidth savings weren't enough, Voip deployments also reduce cost and enhance scalability by employing standard data networking components (routers, network switches), instead of expensive, complicated telephone switches. Now the same team handling the data network can manage a voice network - great news for all of you overworked IT staffers.

How Does It Work?

The process of Voip is dependent on signaling and media transport. A signaling protocol, such as SIP (session initiation protocol), performs the legwork: locating users, call parameters, modifications and building or ending a session. Media transport protocols, like RTP (real time transport protocol) handle the voice portion of a call: digitizing, encoding and ordering. Networking protocols, such as IP, are wrapped around the Voip packets when they are transmitted to the proper servers.

Voip calls can take place between LANs or on WANs, as is the case with internal calls on a corporate network. If a Voip user wishes to call a destination on POTS, a special gateway is used. These devices act as connectors between the data network and the SS7 network used by POTS. They translate the incoming data into a format the recipient, be it IP or SS7, can understand.

Onto Security

With an understanding of Voip technology and its benefits in place, let's consider the security ramifications. In the process of saving money and increasing efficiency, two crucial portions of any infrastructure, voice and data, were combined. Suddenly, an IT staff is not responsible for securing only standard servers (database, mail, web), workstations and routers. As if these data security concerns weren't enough, Voip servers acting as gateways, special routers, phones, new protocols and operating systems are now thrown into the mix. The burden of voice and telecommunications security has been shifted from the carrier to the IT team. It has moved from an obscure PSTN, to an IP network every cracker is familiar with. Let's examine the risks and how you can mitigate them.

What Are The Threats?

Unfortunately, there are numerous threats to a Voip network, many of which aren't obvious to newcomers. The networking devices, the servers and their operating systems, the protocols, the phones and their software are all vulnerable.

Information about a call is almost as valuable as the voice content. For instance, a compromised signaling server used to setup and manage calls, might yield the following: a list of incoming and out going calls, their durations and parameters. Using just this information, an attacker could map all of the calls on your network, creating complex conversation records and user tracking.

The conversation itself is also at risk and the most obvious target of a Voip network. By breaching a key part of the infrastructure, such as a Voip gateway, an attacker could capture and reassemble packets in order to eavesdrop on the conversation. Or even more nefariously, record everything, and replay all conversations occurring on your network. On the PSTN, this would be an impressive feat, since few are skilled enough on or have access to the huge switches managing calls. That's obviously not the case on a data network, as legions of script kiddies prove every day. And if your Voip packets traverse the Internet to reach a destination, a number of attackers have a shot at your voice data.

The calls are also vulnerable to hijacking or a man in the middle attack. In such a scenario, an attacker would intercept a connection and modify call parameters. This is an especially scary attack, since the participants likely wouldn't notice a change. The ramifications include spoofing or identity theft and call redirection, making data integrity a major risk.

The availability of the Voip network is also a major concern. On the PSTN, availability is rarely a problem. Attackers would need to overload some very large circuits or cut a connection. It's much easier to thwart a Voip network. All of us are familiar with the crippling effects of distributed denial of service attacks. If directed at key points of your network, it would disrupt your ability to communicate via voice or data.

The phones and servers are targets themselves. Although as a whole they mimic phones, they are, at the core, computers with software. Obviously, this software is vulnerable to the same types of bugs and exploits that hamper every operating system and application available today. Code could be inserted to perform any number of malicious actions.

Voip Security And Defense

How anticlimactic. I point out the wonders of voice over IP and follow them up with major security problems! Fortunately, the situation is not without remedy. The risks outlined above, while specific to VoIP, are all issues we deal with on regular IP networks. Unfortunately, in the initial rollouts and designs of voice related hardware, software and protocols, security was not a major concern. But that's usually the case with every new technology, a fact that we are all working to change. Let's examine some of the tried and true workarounds that can alleviate the threats outlined above.

The first thing that should come to mind reading about Voip is encryption. While it's not easy to capture, reassemble and decode voice packets, it can definitely be done. Encryption is the only way to prevent such an attack. Unfortunately, it adds overhead, eating up or eliminating altogether the bandwidth reductions from traditional voice calls. This, in turn, affects throughput and performance - which can introduce dreaded jitter into the call. So what can you do? There are multiple encryption options - VPN setups, the IPSec protocol and other protocols such as SRTP (secure RTP- though it does not offer any authentication features like VPNs, it does encrypt voice packet payloads). The key however, is to choose a fast, efficient encryption algorithm and employ a dedicated encryption processor. This should alleviate any performance concerns. Another option would be strict QoS standards for Voip packets on your network and powerful hardware. Such QoS requirements will ensure that voice is always handled in a timely manner, reducing the chance of degraded quality.

Next, as should be expected, would be the process of securing all elements of a Voip network. You'll be dealing with call servers, routers, switches (you're not still using a hub that can be sniffed!), workstations and phones. You need to perform regular assessments on each of these devices to ensure they are in line with your security demands. The servers should have minimal jobs running and only the necessary ports open. The routers and switches should be configured properly, with access control lists and filters in place. All of the devices should be up to date in terms of patches and upgrades. These are the same types of precautions you would take when adding new elements to your existing data network, just extend the process to the Voip portion as well.

As mentioned, the availability of your Voip network is a concern as well. Unlike POTS, a power loss will bring your network down -- so make sure prolonged redundancy options are in place. DdoS attacks are always difficult to defend against. Aside from proper router configurations, make sure you have an escalation process in place with your IP carrier, since many times they are needed to assist. Remember, such an attack would not only halt your data services, but voice as well.

Lastly, you can employ a firewall and an IDS to help protect your voice network. A Voip firewall is a difficult beast to manage due to the ever-changing requirements. Call servers are constantly opening and closing ports for new connections. This dynamic element makes rule management difficult, even on stateful devices. But the costs are far outweighed by the benefits, so spend some time perfecting your access controls. An IDS can assist in monitoring the network for any anomalies or potential abuses. Early warnings are key to preventing larger attacks.


As evidenced by the explosive growth of the voice over IP market, this technology will work its way into your businesses and networks. It carries with it however, the new burden of voice security. Careful planning and architecture, borrowed from our data security experiences, can help mitigate the risks and amplify the returns.

Vonage Service Plans

Vonage VoIP Members
Members List Members
New patsykf3
New Today 0
Yesterday 0
Total 101029

Who Is On Site
Visitors 1
Members 0
Total 1

Vonage VoIP Forum Members:
Login Here
Not a Member? You can Register Here
As a registered member you will have access to the VoIP Speed Test, Vonage Service Announcements and post comments in the
Vonage VoIP Forums

Vonage Stock Price
Up to 15 Minute Delay

Site Search

Social Bookmarks
 Printer Friendly Printer Friendly

†AK and HI residents pay $29.95 shipping. ††Limited time offer. Valid for residents of the United States (&DC), 18 years or older, who open new accounts. Offer good while supplies last and only on new account activations. One kit per account/household. Offer cannot be combined with any other discounts, promotions or plans and is not applicable to past purchases. Good while supplies last. Allow up to 2 weeks for shipping. Other restrictions may apply.

1Unlimited calling and other services for all residential plans are based on normal residential, personal, non-commercial use. A combination of factors is used to determine abnormal use, including but not limited to: the number of unique numbers called, calls forwarded, minutes used and other factors. Subject to our Reasonable Use Policy and Terms of Service.

2Shipping and activation fees waived with 1-year agreement. An Early Termination Fee (with periodic pro-rated reductions) applies if service is terminated before the end of the first 12 months. Additional restrictions may apply. See Terms of Service for details.

HIGH SPEED INTERNET REQUIRED. †VALID FOR NEW LINES ONLY. RATES EXCLUDE INTERNET SERVICE, SURCHARGES, FEES AND TAXES. DEVICE MAY BE REFURBISHED. If you subscribe to plans with monthly minutes allotments, all call minutes placed from both from your home and registered ExtensionsTM phones will count toward your monthly minutes allotment. ExtensionsTM calls made from mobiles use airtime and may incur surcharges, depending on your mobile plan. Alarms, TTY and other systems may not be compatible. Vonage 911 service operates differently than traditional 911. See for details.

** Certain call types excluded. is not an official Vonage support website & is independently operated.
All logos and trademarks are property of their respective owners. All comments are property of their posters.
All other content is © Copyright 2002 - 2013 by 4Sight Media LLC.

Thinking of signing up for Vonage but have questions?
Business and Residential customers can call Toll Free 24 hours a day at: 1-888-692-8074
No Vonage Promotion Code or Coupon Codes are required at to receive any special,
best Vonage cheap deals, free sign up offers or discounts.

[ | | | | | ]

Vonage Forum Site Maps

Vonage | VoIP Forum | How VoIP Works | Wiring and Installation Page Two | International Rate Plans 2 | Internet Phone
Promotion | Vonage Review | VoIP | Broadband Phone | Free Month | Rebate | Vonnage | Vontage | VoIP | Phone Service
Phone | llamadas ilimitadas a Mexico | Latest News | VoIP Acronyms | Deal | Philippines Globe Phone | Site Maps

The Vonage Forum provides the Vonage sign up Best Offer Promotion Deal.
If you are considering signing up for Vonage and have found our Vonage News, Customer Reviews, Forums
& all other parts of this site useful, please use our Vonage Sign up page.

Vonage VoIP Phone Service is redefining communications by offering consumers
& small business VoIP Internet phones, an affordable alternative to traditional phone service.
The Vonage VoIP Forum Generated This Page In: 1.07 Seconds and Pages In The Last 60 Seconds
The Vonage VoIP Forum