OPSEC Partners
Check Phone
Product Version Certified: ETSS® Security Version 3.0
Certified For Use With: Check Point NGX, Web Intelligence
Product Description: The Expert Telecom Security System (ETSS®) provides real-time security protection for enterprise telephony applications. The ETSS® includes ETSS® Expert and ETSS® Security.
The ETSS® Expert allows enterprises to assess security vulnerabilities in their telephony network by importing configuration from every PBX/IP-PBX in the network into the application and analyzed for voice network vulnerabilities.
The ETSS® Security allows enterprises to centrally monitor and manage security throughout their entire voice network in real-time.
The system's Security Probes seamlessly safeguard the network against unauthorized voice traffic in a localized way and virtually integrate into all types of enterprise voice networks, whether the voice network is Time Division Multiplex (TDM) based, IP centric or at any stage of the transition to IP.
The ETSS® provides the security administrator with a uniquely versatile tool, a robust security feature set and an easy-to-use user interface.
In the current interconnection with Check Point VPN-1/FireWall-1, ETSS® Security is deployed with SIP and the ETSS® Security voice engine.
Company Description: CheckPhone, a voice security leader, offers advanced products and services to provide real-time protection for enterprise telephony applications.
The Expert Telecom Security System (ETSS®) is a multi-vendor, multi-technology platform for VoIP, legacy PBXs and hybrid environments, enabling centralized telephony security management. Checkphone's ETSS® is an easy to use and proactive security management tool. ETSS®'s intuitive user interface enables users to efficiently establish voice security policy and then implement it throughout the network with one click. On the border, each communication is deeply inspected for policy compliance. A company's entire network configuration, modifications and logs can be tracked, analyzed and audited via a centralized management interface.
CheckPhone is the ideal partner to efficiently address the increased complexity of securing IP based voice communications and enabling a seamless and secure VoIP migration.
Key Features and Benefits
ETSS® Security Key Features
- SIP 2.0 Support
- Security Policy Management
- Real-time Policy Application
- Call Monitoring, Call Tagging, Call Blocking
- Automated Statistics & Alerts
- Secured SSL System Links
- Real-time Probe Status & Call Traffic
- Call History
- Antifuzz Profiles
Key Benefits
- Centralized definition and management of the voice security policy
- Simple download command for implementation throughout the network
- Call traffic statistics captured by Security Probes are available for viewing at the Security Manager's station
- Voice security policy can be established to conform to two operating modes: Monitoring or Drop/Insert mode.
OPSEC Integration
ETSS® Security
The ETSS® Security Check Point connector has been tested with Check Point NGX R60.
The ETSS® Security voice engine is connected by a bridge to the Check Point VPN-1 / FW-1. The ETSS® Security voice engine is connected to the ETSS® Security supervisor and ETSS® Security Check Point connector. Please refer to the Configuration Manual and Test Plan provided under the Additional Information column.
All incoming and outgoing data flows are filtered by CheckPhone ETSS® and by the Check Point VPN-1/FireWall-1. ETSS® Security voice engine filters the SIP calls, and Check Point VPN-1/FireWall-1 filters the RTP flow. The ETSS® is a high-level filtering module. It inspects each communication event with call-related pre-administrated policies, and can tag, drop, ban or pass a communication event.
Additional Information