Specifications

VoIP Security
343
Voice streaming to internal voice mail, Record-a-Call and conference
Where there are internal features like voice mail, Record-a-Call or conference at the ICP, these
are considered TDM devices. Encryption applies to the packet part of the connection, so the
IP path to the gateway will be secure, where possible. The connection on the TDM devices will
remain a dedicated connection to the requested service.
A conference call with a number of users requires multiple connections to the IP gateway.
Connections between the IP end device and this gateway will be encrypted, where possible.
Connections to the conference bridge are established over the internal TDM infrastructure.
PSTN connections or TDM devices connected into this bridge will not use encryption, but will
maintain their normal dedicated connections.
Voice streaming to applications
A number of applications and end devices support encryption. There are some, however, that
do not support encryption measures. Connections to these devices will be established without
encryption. For a list of devices and applications that support encryption, refer to Table 84.
End devices that connect to the external port of the MiVoice Border Gateway (formerly
Teleworker solution) are secure, but when similar end devices are used within the LAN
environment, they may not be fully secured.
Further details can be found in the MiVoice Border Gateway Engineering Guidelines. The
MiVoice Border Gateway also terminates both internal and external secure connections. This
allows for differences in encryption methods; external secure connection and unsecured internal
connection.
MiCollab Client provides a softphone with encrypted call path and call signalling and secure
instant messaging to keep IM traffic encrypted and inside the network.
The SpectraLink wireless phones and the Mitel WLAN stands may use security on the air access
interface (radio link) such as WEP or WPA2. However, this only covers the wireless connection
and not necessarily the remaining connection across the remaining network infrastructure.
Data encryption support
A number of end devices support secure signalling and secure voice media streaming. The
following table lists the devices and security support:
Table 84: Security Support by Device
Device
Secure Signalling
(SSL)
Secure Signalling
(Secure MiNET)
Voice Encryption
Controllers/Gateway
3300 CX/AX/MXe/ISS Yes Yes Yes
SX-200 ICP CX/MX No Yes Yes
Page 1 of 3