Networking: Deploy UC100 device at enterprise headquarters to provide DDNS service for the access of exterior devices. Deploy UC100 devices at enterprise branches to provide VPN for inter-communication between branches (VPN server is not needed). Insert local SIM card to UC100 device or connect UC100 device to PSTN, so as to change remote calling into local calling, and thus reduce call cost between branches.

Advantage: With flexible networking, UC100 helps achieve mobile office and inter-communication between enterprise branches. UC100 can be deployed independently (without SIP server and IP PBX), and can work as an IP PBX. Provide DDNS service to allow data/voice communication through mobile App. Help enterprise’s headquarters and branches inter-communicate via PPTP, L2TP, OPenVPN, IPSec and GREc. Allow mobile APP to make or receive calls. Flexible calling strategy: connected to SIM/PSTN, UC100 can change remote calling into local calling, and thus reduce call cost.

Deployed independently, and can work as an IP PBX

Provide DDNS service for the access of exterior devices to enterprise’s office

Allow inter-communication of enterprise’s branches via PPTP,L2TP and Open VPN

Flexible calling strategy: connected to SIM/PSTN, UC100 can change

Remote calling into local calling, and thus reduce call cost

Deployed independently, and can work as an IP PBX

Provide DDNS service for the access of exterior devices to enterprise’s office

Provide DDNS service to allow data/voice communication through mobile APP

Can be controlled remotely

How should an IP telephone system be setup if there is no fixed-line internet access in some remote area? It seems impractical in the beginning. In some scenarios, it may be only for a temporary office, the investment on cabling is even unworthy. By utilizing 4G LTE technology, DINSTAR SME IP PBX gives this an easy answer.

DINSTAR SME IP PBX UC120 or UC100 with built-in 4G module, simply inserting a single 4G SIM card, you can enjoy both internet (4G data) and voice calls - VoLTE (Voice over LTE) calls or VoIP / SIP calls.

For locations with no wired internet access, using 4G LTE mobile data as internet connection makes things simple. The investment on cabling is also saved. With VoLTE, internet won’t be disconnected during voice calls. In addition, UC120 or UC100 can work as a Wi-Fi hotpot, keeps all your smart phones, tablets and laptops always in connection.

When the wired internet is down, UC120 or UC100 enables businesses to auto switch to 4G LTE as internet connection using mobile data, provides business continuity and ensures uninterrupted business operations.

VoLTE supports not only AMR-NB voice codec (narrow band), but also Adaptive Multi-Rate Wideband (AMR-WB) voice codec, also known as HD Voice. Let you feel like you are standing next to the person who speaks, HD voice for clearer calls and reduced background noise no doubt facilitates better customer satisfactions, as voice quality is really valuable when a call is really important.

Background: During the outbreak of COVID-19, the “social distancing” recommendations force most of employees of enterprises and organizations to work from home (WFH). Thanks to the latest technology, now it is easier for people to work from anywhere outside the traditional office environment. Obviously, it is not just a need for now, also for future, as more and more companies especially internet companies allow staffs work from home and work flexibly. How to collaborate each other from anywhere in a stable, secure and effective way?

Challenges: IP telephony system is one main way for remote offices or work-from-home users to collaborate. However, with internet connectivity, there comes several critical security issues – primary being defending again SIP scanners that try to penetrate end-customer networks.

As lots of IP telephony system vendors discovered, SIP scanners can find and begin attacking internet-connected IP-PBXs within an hour of their activation. Launched by international fraudsters, SIP scanners are constantly looking for poorly protected IP-PBX servers that they can hack and use to initiate fraudulent telephone calls. Their goal is to use the victim’s IP-PBX to initiate calls to premium-rate telephone numbers in poorly regulated nations.It is very important to protect against SIP scanner and other threads.

Session border controllers (SBCs) are situated at the edge of the enterprise network and provide secure voice and video connectivity to Session Initiation Protocol (SIP) trunk providers, users in remote branch offices, home workers/remote workers, and unified communications as a service (UCaaS) providers.

Session, from Session Initiation Protocol, refers to a real-time communication connection between endpoints or users. This is typically a voice and/or video call. Border, refers to the interface between networks that do not have full trust of each other.

Controller, refers to the ability of the SBC to control (allow, deny, transform, end) each session that traverses the border.

Employees working from home, or using a SIP client on their mobile phone can register through the SBC to the IP PBX, so the users can use their normal office extensions as if they were sitting in the office. SBC is providing far-end NAT traversal for the remote phones as well as enhanced security for the corporate network without the need to set up VPN tunnels. This will make the setup much easier, especially at this special time.

Network topology hiding: SBCs use network address translation (NAT) at the Open Systems Interconnection (OSI) Layer 3 Internet Protocol (IP) level and the OSI Layer 5 SIP level to keep internal network details hidden.

Voice application firewall: SBCs protect against telephony denial of service (TDoS)attacks, distributed denial of service (DDoS) attacks, fraud and theft of service, access control, and monitoring.

Encryption: SBCs encrypt the signaling and media if the traffic traverse enterprise networks and the Internet using Transport Layer Security (TLS) / Secure Real-Time Transport Protocol (SRTP).

IP trunk load balancing: SBC connects to the same destination over more than one SIP trunk group to balance call loads evenly.

Alternative routing: multiple routes to the same destination over more than one SIP trunk group to overcome overload, service unavailability.

High availability: 1+1 hardware redundancy ensure your business continuity Interoperability

Transcoding between various codecs and between different bitrates (for example, transcoding G.729 in enterprise network to G.711 on SIP service provider network)

SIP normalization via SIP message and header manipulation. Even you are using different vendors’ SIP terminals, there won’t be compatibility issue with the help of SBC.

Connects WebRTC endpoints to non-WebRTC devices, such as calling from a WebRTC client to a phone connected through the PSTN

A Session Border Controller(SBC) is a network element deployed to protect SIP based voice over Internet Protocol(VoIP) networks. SBC has become the de-facto standard for telephony and multimedia services of NGN / IMS.

A communication between two parties. This would be a call’s signaling message, audio, video, or other data along with information of call statistics and quality.

A point of demarcation between one part of a network and another.

The influence that session border controllers have on the data streams that comprise sessions like security, measurement, access control, routing, strategy, signaling, media, QoS and data conversion facilities for the calls they control.

No voice / one-way voice caused by NAT between different sub-networks.

Interoperability between SIP products of different vendors is unfortunately not always guaranteed.

Intrusion of services, eavesdropping, denial of service attacks, data interceptions, toll frauds, SIP malformed packets would cause big losses on you.

NAT modify private IP to external IP but can’t modify application layer IP.

Destination IP address is wrong,therefore can’t communicate with endpoints.

NAT Transversal

NAT modify private IP to external IP but can’t modify application layer IP.

SBC can identify NAT, modify IP address of SDP. Therefore obtain correct IP address and RTP can reach endpoints.

Session Border Controller acts as a proxy for VoIP traffics

Zoom is one of the most popular Unified Communications as a Service (UCaaS) platforms. More and more enterprises are using the Zoom Phone for their daily communications. Zoom Phone allows modern enterprises of all sizes to move to the cloud, eliminating or simplifying the migration of legacy PBX hardware. With Zoom’s Bring Your Own Carrier (BYOC) feature, enterprise customers have the flexibility to keep their current PSTN service providers. DINSTAR Session Border Controllers offer connectivity for Zoom Phone to their preferred carriers securely and reliably.

Connectivity: How to connect Zoom Phone with your current service providers and existing phone system? SBC is an essential element in this application. Security: Even as powerful as the zoom phone, the security issues at the edge of the cloud platform and enterprise network must be solved.

Enterprises can get started with the Zoom Phone through the following three simple steps:

1. Get a Zoom Phone license.

2. Get a SIP trunk on Zoom Phone from your carrier or service provider.

3. Deploy a Session Border Controller to terminate the SIP Trunks. DINSTAR offers SBCs hardware-based, software edition, and on your own Cloud.

Connectivity: SBC is a bridge between Zoom Phone and your SIP trunks from your service provider, offers seamless connections, allows customers to enjoy all of the benefits and features of Zoom Phone while keeping their existing service provider contracts, phone numbers, and calling rates with their preferred carrier. Also SBC offers connectivity between Zoom Phone and your existing phone system, this could be important if you have distributed branch offices and users, especially at this working-from-home stage.

Security: SBC acts as a secure voice firewall, using DDoS, TDoS, TLS, SRTP and other security technologies to protect the voice traffic itself and prevent bad actors from entering the data network through the voice network.

Interoperability: The key parameters can be adjusted to quickly connect the Zoom Phone and SIP trunks, making the deployment simple and barrier-free.

Compatibility: Through the standardized operation of SIP messages and headers, and the transcoding between various codecs, you can easily connect with different SIP trunks service providers.

Reliability: All Dinstar SBCs offer high availability HA features to ensure your business continuity.