Unified communications (UC) and voice-over-IP (VoIP) is more challenging to secure than most data traffic. That’s because most traffic is transported over TCP and, as such, is subject to the security features built into networking devices and routers. VoIP uses UDP (News - Alert)-based transport, however, and dropped packets can make a huge difference in terms of performance.

Securing UC requires a balanced approach between mitigating threats and maintaining service quality.

Billy Chia at Digium (News - Alert) offers seven tips for effectively securing UC.

First, it is important to deploy a properly configured firewall.

“A good general rule of thumb is to block all unknown traffic into your network and then only allow traffic from trusted sources, noted Chia. “In most cases, you should only allow internet traffic from your ITSP (Internet Telephony (News - Alert) Service Providor) or VoIP provider. This is the company that supplies you SIP truck or hosted VoIP services. Allow access only on the ports necessary and only to the IP or block of IPs that your provider uses.”

Second, set up a virtual private network (VPN) for remote users so there is an encrypted Internet tunnel over the public network.

Third, use strong passwords.

“Using strong (system) passwords is an extremely effective, yet often over looked security measure,” according to Chia. “Business VoIP phones should especially be protected by unique strong SIP passwords.”

Fourth, update software regularly. In addition to solving bug fixes, software updates improve security by patching potential exploits.

Fifth, turn off unused services.

Yes, we know it is hard to limit functionality. But hardening a system means turning off any service of feature that is not necessary.

“For example, if you are using voice, video and email communications but aren’t using chat, then it is best to turn off the chat functionally in the UC server,” Chia advised. “Not only does this improve security, but this will also improve performance as you will have less protocol traffic on the network and your server will be less taxed because it is doing less work.”

Sixth, monitor call logs. Most security breaches are discovered long after major damage has been done. But if you pay attention to toll calls made by your system, you can often discover security issues before they get out of hand.

Finally, one of the best ways to secure UC and VoIP is to use the security that comes with UC.

“Digium Switchvox (News - Alert), for example, comes with security tools such as Access Control Rules, Automatic IP blocking and managed tech support access. The blocked IPs tool will block IP addresses that fail multiple registration attempts. In theory, a properly configured firewall should prevent SIP scanners from being able to reach your UC server, however this additional level of security adds peace of mind and works as a functional back-up to round out your security suite,” he wrote.