[cisco-voip] Comparison between using SIP Trunk Encryption and IPSec encryption

[ROZA, Ariel]

Hi, guys and gals!

 

I wanted to know the opinion of the members of the list about the best strategy for encryption of voice calls.

 

I am implementing call encryption for a customer´s internal IP telephony infrastructure. 

So far I have configured encryption for IP Phones (using tokens) and Analog phones (SRTP, + IPSec between CUCM and each gateway).

 

Now I am planning to encrypt the calls going through a couple of SIP trunks. The trunks are between the CUCM servers and Cisco 2800 gateways)

A coworker of mine specialized in security suggested me implementing IPSec between  the CUCM Servers and the gateways configured with SIP, instead of using the official approach (TLS with certificates). He claims that it will be simpler to deploy (no troubles with CAs and loading certificates into CUCM) and will offer the same level of protection.

 

I would like to know if anyone faced this possibility before, and your insight about this.

 

Thanks everyone in advance!

 

 

ARIEL ROZA
Advanced Engineering

 

LOGICALIS
Perú 327 1er Piso - C.A.B.A. - Argentina - C1067AAG
Tel/Fax: +54 (11) 4344-0300
ariel.roza at la.logicalis.com <mailto:ariel.roza at la.logicalis.com> 
www.la.logicalis.com <http://www.la.logicalis.com> 
www.logicalisnow.com <http://www.logicalisnow.com> 

	Por favor, piense en el medioambiente antes de imprimir este email. 
La presente información se envía únicamente para el destinatario, y contiene información de carácter CONFIDENCIAL o PRIVLEGIADA.
La modificación, retransmisión, difusón, copia u otro uso de esta información por cualquier medio, por personas distintas al destinatario, están estrictamente prohibidas.

 

 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://puck.nether.net/pipermail/cisco-voip/attachments/20120328/5c3c015c/attachment.html>