IPT Attack Mitigation - Interop

More documents

Recommendations

Info

Everything Else II • VPN (IPsec) Secure Voice N+I For intra-cluster security over WANs (MGCP, H323) Provides inter-site security for control and bearer channels for private and public networks Allows secure connectivity between sites to create a virtual private IP-enable telephony environment • SSL/SSH Provides secure management of voice infrastructure and endpoints Consider SSL off-loaders that support centralized authentication databases © 2004, Cisco Systems, Inc. All rights reserved. 8
Voice Services (All) • Turn off unneeded services, harden remaining services Patch OS, services, & applications • Segment services Registration, configuration, management, database • PFW/HIDS/HIPS/AV – more than one for worms, viruses, trojans, and implementation-specific exploits Secure Voice N+I © 2004, Cisco Systems, Inc. All rights reserved. 9
Page 1 and 2: IPT Attack Mitigation Jason Halpern
Page 3 and 4: Agenda Secure Voice N+I © 2004, Ci
Page 5 and 6: Layer-3/4 Attack Mitigation • Typ
Page 7: Everything Else • IDS/IPS Provide
Page 11 and 12: Toll Fraud • Many commonly exploi
Page 13 and 14: Voice Services: IP PBX/Call-Process
Page 15 and 16: Endpoints • IP phones Harden - co
Page 17 and 18: Attack Mitigation Roles for Buildin
Page 19 and 20: Attack Mitigation Roles for Data Ce
Page 21: Questions? • Consider the SAFE IP

IPT Attack Mitigation - Interop

Create successful ePaper yourself

Delete template?

Save as template?