[VOIPSEC] IPSec and VoIP Security

[Jin Wang]

Hi Passito - In response to your query about about
effectiveness of IPSec for end-to-end voip security,
our organization (a large enterprise user in North
America) is in the process of deploying a secure SIP
trunking solution from Covergence
(www.covergence.com).    This solution is based on TLS
& SRTP rather than IPSec.  We found that a SIP
TLS/SRTP-based solution offered better QoS, setup
times, and ease of use than the IPSec based approaches
we evaluated.   Tom Porter's post elaborates on some
of the actual metrics involved and our network testing
yielded similar results.

Jin   

--- Voipsec-request at voipsa.org wrote:

> Send Voipsec mailing list submissions to
> 	Voipsec at voipsa.org
> 
> To subscribe or unsubscribe via the World Wide Web,
> visit
> 
>
http://voipsa.org/mailman/listinfo/voipsec_voipsa.org
> or, via email, send a message with subject or body
> 'help' to
> 	Voipsec-request at voipsa.org
> 
> You can reach the person managing the list at
> 	Voipsec-owner at voipsa.org
> 
> When replying, please edit your Subject line so it
> is more specific
> than "Re: Contents of Voipsec digest..."
> 
> 
> Today's Topics:
> 
>    1. IPSec and VoIP Security (Alexandre Passito)
>    2. Re: softphones and VPNs (Michael Reilly)
>    3. Re: IPSec and VoIP Security (Porter, Thomas
> (Tom))
>    4. worldwide DB of Premium Nos
> (jayr111 at yahoo.com)
>    5. Re: worldwide DB of Premium Nos (Tom Harney)
>    6. Re: IPSec and VoIP Security (Gupta, Sachin)
>    7. Re: IPSec and VoIP Security (Randell Jesup)
>    8. Re: worldwide DB of Premium Nos (Randell
> Jesup)
>    9. Re: IPSec and VoIP Security (Mark Baugher)
> 
> 
>
----------------------------------------------------------------------
> 
> Message: 1
> Date: Tue, 4 Apr 2006 17:50:00 -0300
> From: "Alexandre Passito"
> <alexandre.passito at gmail.com>
> Subject: [VOIPSEC] IPSec and VoIP Security
> To: Voipsec at voipsa.org
> Message-ID:
> 
>
<6916dea20604041350y2ea3b592v8cb8ab7f0d32e32a at mail.gmail.com>
> Content-Type: text/plain; charset=ISO-8859-1
> 
> Hi ALL,
> 
> I'd like to start a discussion about using IPSec for
> end-to-end security in
> VoIP Systems. I have read some papers about the
> subject and it seens that
> IPSec is not completely suitable for this kind of
> task due to two reasons:
> damage to some QoS metrics and the problem with
> management (key sharing,
> user permissions and etc). I'd like to hear some
> ideas about it, future
> trends and if there are well deployed solutions
> being tested.
> 
> Best regards,
> 
> Passito
> 
> --
> --


__________________________________________________
Do You Yahoo!?
Tired of spam?  Yahoo! Mail has the best spam protection around 
http://mail.yahoo.com