Elastix SIP Firewall

Elastix SIP Firewall is a frontier device, designed to be placed alongside a VoIP IP PBX in order to add an additional security layer. It blocks specific IPs or countries, protecting your PBX against potential intruders trying to get in with usernames and passwords. It even prevents DoS (Denial of Service) attacks.

Feature Highlights

  • Low price
  • Small size
  • Low power consumption
  • Easy installation and setup (e.g. predefined rules)

 

SIP Firewall

How does Elastix SIP Firewall meet these objectives?

By using a real-time packet-inspection engine based on SNORT, the SIP Firewall analyzes each SIP packet going into the system, identifying those who look malicious or abnormal, and blocking their source IP address.

Key Features

  • Supports up to 50 concurrent calls
  • Analyze SIP packets using the Snort based Real time Deep Packet inspection engine
  • SIP Protocol Anomaly, with configurable detection parameters.
  • Detection and Prevention of the following categories of SIP based Attacks:
  1. Attacks Recognition (SIP Devices Fingerprinting, User enumeration, Password Cracking Attempt)
  2. Dos/DDos Attacks
  3. Cross Site Scripting based attacks
  4. Buffer overflow attacks
  5. SIP Anomaly based attacks
  6. 3rd Party vendor vulnerabilities
  • Toll Fraud detection and prevention
  • Protection against VOIP Spam & War Dialing
  • Attack response includes the option for quietly dropping malicious SIP packets to help prevent continued attacks
  • Dynamic Blacklist Update service for VOIP, SIP PBX/Gateway Threats
  • Configurability of Blacklist/Whitelist/Firewall rules
  • Support for Geo Location based blocking
  • Provides the option to secure against PBX Application vulnerabilities
  • Operates as a Layer 2 device thus transparent to existing IP infrastructure – no changes required to add the device to your existing network
  • Web/SSL based Device Management Access which will allow to manage the device anywhere from the Cloud
  • Ability to restrict the device management access to specific IP/Network
  • Provide System Status/Security events logging option to remote syslog server
  • Provides the SIP throughput upto ~10Mbps

Tech Specs

Tech Specs

Functional Mode Transparent Firewall with SIP Deep Packet Engine
SIP Intrusion/Prevention ~400+ SIP Attack Signatures Support
Throughput ~10Mbps
Concurrent Calls Supported 50 concurrent calls
Logging Local Security Event Console, Remote Syslog
Device Management Web GUI via Https & SSH CLI
Hardware MIPS based 32bit Processor Single core, 300MHz
Primary Storage 16 MB Flash
RAM 64 MB
Secondary Storage USB Storage devices support for logging (Optional)
Interfaces Two Fast Ethernet Interfaces

Physical & Environmental

Operation Temperature 10°C to 40°C (50 F to 104 F)
Storage Temperature 0°C to 50°C (32°F to 122°F)
Operating Humidity 10% to 90%, Non-condensing
Storage Humidity 5% to 95%, Non-condensing
Dimensions 170mm X 140mm X 34mm
Weight 320 gr
Power Input 05V DC / 2.0 A

What’s in the box

  • 1 Elastix Sip Firewall Appliance
  • 1 USB Power Adapter
  • 1 Serial Console Cable
  • 1 Ethernet Cable

Awarded

2015itpotyb

0 replies

Leave a Reply

Want to join the discussion?
Feel free to contribute!

Leave a Reply

This site uses Akismet to reduce spam. Learn how your comment data is processed.