If that is done in a sloppy way, it could lead to trouble. Just like any type of system – it’s all in the implementation. If that is done in a sloppy way, it could lead to trouble.”Īsterisk is certainly the most popular and established open source communications engine in the world, with millions of Asterisk-based IP PBXs out there – but they are by no means particularly prone to issues of this nature. ” Just like any type of system – it’s all in the implementation. *ANY* SIP IP PBX that has an open connection to the internet (i.e., not within a VPN, or not tied down to a specific IP address, or addresses) will be subject to hacking attempts. To set the scene, PBXs, even before the advent of IP communications, have always been subject to attacks of one sort or another – all the way from people trying to hack into voicemail boxes to full scale toll fraud through PRIs or even analog lines. The mention of only Asterisk in point 5, regarding security, is extremely misleading. What VoIP security measures can Asterisk take to secure their systems from hackers?ĭD: Although there are a number of places within Asterisk that could be configured to enhance security, I would like to make some more general points: “VoIP systems built on the open-source telephone platform Asterisk are routinely subject to hacking attempts, and should be avoided. VS: In this blog post on Huffington Post, 6 Keys to a Successful VoIP Implementation, the writer, Jason Volmut ( CEO of CPUrx, states that: Asterisk configuration is performed through a number of ascii text files, and this is why a number of pre-packaged IP PBX solutions based on Asterisk have become available that allow configuration via a web GUI.ĭD: When Mark Spencer (the creator of Asterisk and CTO of Digium) decided to make Asterisk an open source project, he did this in part to liberate the stodgy, closed world of telecoms, but also to allow (and encourage) contributions to Asterisk from people all over the world that are particularly keen to see Asterisk enhanced in specific directions (like conferencing and contact centre applications). VoIP Supply: Who is the Asterisk VoIP platform designed for?ĭavid Duffet: The Asterisk IP communications engine is for anyone that wants to create a flexible and powerful communications solution. So I asked Asterisk (after I said “asked Asterisk” five times fast) and got this detailed response from David Duffet, Director of Worldwide Asterisk Community.ĭuffett ( explains that protecting your network is a not whole lot unlike fortifying your house against break-ins. When I came across a blog on Huffington Post that called Asterisk out on the security of their open source VoIP platform I just had to know, is this true?
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |