ITSPA advises on secure IP PBX deployment

The Internet Telephony Service Providers' Association (ITSPA) has published new guidance for end-users on the secure deployment of IP PBX systems.

In the ten-page document, topics ranging from VoIP and network security in general to the specific types of threat that may be encountered are covered.

Later chapters look at securing against these threats - through the use of firewalls, SIP gateways, static IP addresses, call barring and the analysis of communication patterns.

"The recommendations in this document are relevant for IP PBX installations," ITSPA says. "Please refer to the ITSPA Security Documents for recommendations to secure hosted telephones."

Companies with secure networks already in place could find their VoIP phones are protected as a natural extension of this.

ITSPA points out that many VoIP phones are "more computer than phone", meaning the kinds of attacks they see are largely limited to the usual virus, worm or denial of service threats.