Securely Access Corporate Communications Systems Over the Internet
The 3Com® IP Telecommuting Module enables remote users to access Session Initiation Protocol (SIP)-based communications services over the Internet. Working in conjunction with existing firewalls, the module provides access to corporate SIP IP communications systems while blocking other protocols. A choice of DMZ or standalone configuration offers flexible connection options. No special hardware or software is required at the user end.
This 3Com solution avoids the security risks that can result from the inability of conventional firewalls to recognize SIP dynamic port allocation. The only way to enable these firewalls for SIP traffic is to open the ports, exposing the enterprise network to security risks. The 3Com IP Telecommuting Module, however, provides SIP-aware security by first monitoring SIP signaling protocols as they arrive, then assigning and managing the dynamic addresses by performing SIP proxy and registrar functions. Because the registrar contains the private IP addresses of users inside the network, a firewall is able to securely relay SIP signaling to the proper destinations through UDP or TCP ports.