HOME   ||   COMPANY OVERVIEW   ||   SERVICES   ||   SUPPORT & HELP   ||   CONTACT US   ||   MY gr8Fone
 
            gr8 HI-PEX...
gr8 Plan Comparison
  
 
 
My gr8Fone ::
User Name :
Password :
 
Forgot Password?
 
 
The next generation broadband networks are interconnected and include elements from traditional PSTN, mobile and IP Telephony in addition to pure data. A mechanical transfer of the Class IV voice switch functionality onto IP Telephony is sub-optimal. gr8 HI-PEX takes full advantage of the features specific to IP Telephony protocols.

gr8 HI-PEX enables carriers to provision in the most secure manner thousands of VoIP gateways / gatekeepers independent of their manufacturer (including Cisco / Vocaltec / Clarent / Quintum).

A typical IP Telephony call consists of two logical parts: call control and voice streams. H.323 or SIP protocols govern call control while RTP/RTCP carries the voice. gr8 HI-PEX transmits only H.323 and SIP call signaling. The originating and terminating gateways establish a direct voice path bypassing gr8 HI-PEX that opens (closes) the session once one of the gateways declares the beginning (end) of the call.

gr8 HI-PEX reaches additional flexibility in managing voice streams because it modifies Protocol Signaling Units sent between the gateways. That allows companies connected to gr8 HI-PEX to interoperate gateways otherwise not operable because of inconsistent implementation of H.323 and/or SIP by different manufacturers.



Security

Carriers using IP Telephony face more stringent security requirements than enterprises or calling card operators due to a much larger number of gateways/gatekeepers a carrier has to manage. gr8 HI-PEX provides an elegant solution that greatly facilitates the process of secure provisioning.

gr8 HI-PEX receives a static IP address. The terminating gateway receives the control signaling (TCP) only from that address, unique to each carrier. Thus, the key security requirement for any Firewall Policy is to deny TCP (ports 1720 and 5060) to/from all external hosts except gr8 HI-PEX.

The Recommended Firewall Policy is to Permit UDP (ports higher than 1024, except 5060) to/from ANY IP addresses. Then the voice traffic (UDP) can come from the call-initiating gateway with virtually any IP address, as long as gr8 HI-PEX authorizes that particular call. This way you will ensure that all traffic authorized by gr8 HI-PEX will land at your gateway.

A Dated Firewall Policy is to permit UDP (ports higher than 1024, except 5060) ONLY to/from SPECIFIC IP addresses. This policy has a significant overhead in terms of time, costs, and security risks as the result of human errors appearing in the process of maintaining the list of trusted gateways.

Both policies have the same class of the security when it comes to VoIP calls. It may seem insecure to allow the UDP traffic from the Internet to penetrate the firewall, but in the case of H.323 calls, voice traffic over UDP will not start until the control part of a call is completed over TCP. Therefore, it is sufficient to block the TCP stream in order to prevent unauthorized traffic from being sent to/from your gateways.




»   Interoperable VoIP equipment

»   Supported Call Control Protocols

»   gr8 HI-PEX Management
   
  Back to Services | Top  
   
     Copyright © 2006. All rights reserved.