[VOIPSEC] Query on typical SBC implementation

[Bob Wise]

Seems to be that proliferation of VLANs would lend itself to this view, as
well.

Assign the SBC as the keeper of the voice VLAN, and let the standard
firewall cover everything else.

 

-Bob

 

  _____  

From: Scott Keagy [mailto:Scott.Keagy at webex.com] 
Sent: Thursday, April 28, 2005 1:48 PM
To: Bob Wise; Voipsec at voipsa.org
Subject: RE: [VOIPSEC] Query on typical SBC implementation

 

I've been contemplating the same thing of late.... Seems liks firewalls are
getting so fast and operating at line rate that there's no performance hit
through firewall for keeping it inside. Seems to be more of an issue with
political/responsibility boundaries in the organization (e.g. infosec
manages firewall and anything that would act as a bastion host or firewall
equivalent; but they don't have necessary expertise for voice related
technologies).

Regards, 
Scott 

-----Original Message----- 
From: Voipsec-bounces at voipsa.org [mailto:Voipsec-bounces at voipsa.org] On
Behalf Of Bob Wise 
Sent: Wednesday, April 27, 2005 9:34 AM 
To: Voipsec at voipsa.org 
Subject: [VOIPSEC] Query on typical SBC implementation 

 

Are SBCs typically positioned behind a firewall or in front of it? 
I've done some googling on this subject and haven't found any references to
best practices for network deployments of SBCs.

I can think of arguments either way. 

In any case, doesn't it seem that the firewall and SBC appliances will
merge? 

-Bob 





_______________________________________________ 
Voipsec mailing list 
Voipsec at voipsa.org 
http://voipsa.org/mailman/listinfo/voipsec_voipsa.org