apter 9: Questions to Ask of a Service Provider Offering and an SBC Vendor need to check with your SBC vendor to find whether the product supports the following accounting features: Real-time events Local CDR storage with FTP push CDR Redundancy for locally stored CDRs Start, Stop, and Interim (Intermediate) events RADIUS attribute filtering RADIUS server load balancing QoS statistics (jitter, latency, packet loss, total packets, and total octets) Media flow attributes (realm, IP addresses, codec, and SO on) Basic call attributes Security Secure Unified Communications is becoming increasingly important as the adoption of IP telephony accelerates and the growing popularity of VoIP makes it a target for attacks. Your network will experience denial of service (DOS) attacks, hijacking of calls, leaves- dropping, man-in-the-middle attacks, toll fraud, spam, malicious attachments, malformed messages from overloading resources, and many other unwanted issues. You need to use tight security measurements SO that you can keep the integrity of your network. Security itself is a wide open element. Nothing can guarantee the security of your net- work; rather it can minimize the risk. In the following sections, we identify and address the security measurements. You might need to add more questions to comply with the security policy of your organization. Privacy You can ensure the privacy of the signaling and the media in many ways. Encryption is one of the proven ways to achieve the privacy. Check the product to understand the following privacy issues and answers to these questions: Does the product support TLS for Signaling Encryption (AES 256 encryption)? Does the product support MTLS for Signaling Encryption? Does the product support SRTP for Media Encryption? Does the product support IPSEC? Does the product allow for Encryption on one side and nonencryption on the other (including enforcement)? Does the product support User-level privacy (for example, caller ID, P-asserted identity)? 174 SIP Trunking Firewall Integration Y