Recent blog posts - bvoip Blog | bvoip

Do Your Homework to Ensure VoIP Security

Written by George Bardissi | Apr 27, 2015 4:02:00 AM

All it takes a glance at the week’s headlines to see that cyberattacks are growing in both frequency and complexity. Internet hackers can strike anyone, even your business’s VoIP and communications systems. If you are looking to implement a Cloud IP-based phone system, ensure you can continue to reap the benefits while avoiding potential vulnerabilities.

Ensure that your Internet-telephony system is as secure as possible by taking these crucial steps:

System Security

Ensure you or your Cloud VoIP vendor have strong antivirus, antimalware and a redundant firewall in place, and check that it is regularly updated.  An intrusion detection system monitors your IP-PBX for suspicious activity (like a carrier grade DDOS strategy) that could signal an impending attack, while a firewall reduces access to non-trusted networks by IP-PBX phones. In addition, make sure your system software is frequently backed up to a secure location to combat security breaches and hacking. Also make sure you or your vendor are handling encryption at the hardware and network layers if you are an entity that has to handle compliance such as HIPAA or SOX.

Set strong passwords

Most VoIP servers are configured through a web interface that uses a password to gain access. As such, a weak password can leave a potential security gap which hackers can easily exploit. To that end, ensure that strong passwords are set and frequently changed on IP phones that access the same system. Also be sure to discard the default password your IP-PBX system came with. Instead, set a strong password that contains a combination of lower and upper case letters, numbers, symbols, and avoids spelling out recognizable words and dates. The same goes for voicemail or extension pin numbers. You need to make sure your end users do not set simple passwords like 1111 or 1234 that are easily guessable.

Monitor system usage

Network attacks will often emerge in the form of unusual or increased network activity. Monitor network usage through aggregating pertinent information about network users, applications, and peak usage times. Use visual tools such as graphs to help pinpoint unusual activity. In doing so, you’ll be able to more easily detect whether the traffic is a true security threat. Mature Cloud VoIP providers have Network Operation Center’s in place to monitor this information on a daily basis to protect you and them. If you are implementing VoIP on your own this now rests on your hands.

The saying is true, “it’s better to be safe than sorry.” Take the right steps to on your own ot make sure you have the right vendor to ensure you can make the most out of your advanced IP PBX system by ensuring optimal security.