Contact Us Now
  Request a Call Back
  Request a Free Quote
 
 

Request a Demo >>

Let us demonstrate to you how BCM system Can transform your business >

 
 

Contact Us >>

Contact us now for fantastic
telephone system sales, support
and advice

Contact us now >>

 
 
Secure Multimedia Controller 2450 - Overview

The Secure Multimedia Controller (SMC) 2450 is an extension of the Nortel Enterprise Multimedia portfolio and a significant component of the Nortel Layered Defense approach to security. The SMC 2450 is a purpose-built application firewall, delivering an integrated inside threat security solution to protect Nortel's IP phones and multimedia communication servers. The SMC 2450 creates a secure multimedia zone around the converged infrastructure to protect against Denial of Service attacks and other security threats. Pre-configured policy settings simplify deployment and ensure the integrity and availability of this business critical converged, multimedia infrastructure.

Key Features:

  • A stateful filter protects services running within the secure multimedia zone by employing automatically generated access control lists and filtering policies
  • An embedded DoS (Denial of Service) defense engine secures VoIP servers against an exhaustive list of common DoS and DDoS (Distributed Denial of Service) attacks
  • Acts as a transparent secure proxy between the UNIStim IP Phone and communication server, providing UNIStim signaling encryption
  • Integrated configuration and management with simplified, pre-configured, policies
  • High availability resilient solution, supporting active-standby configurations
Features & Benefits

Features:

  • Secure Multimedia Zone
    • An embedded stateful filter protects services running within the secure multimedia zone by employing automatically generated access control lists and filtering policies, which can be customized to handle all types of traffic that originates or terminates on the multimedia devices
    • Detection of non-compliant state changes in a protocol
    • Denial of Service attack protection secures VoIP servers against an exhaustive list of common DoS and DDoS (Distributed Denial of Service) attacks
    • Provides flow control and rate-limiting features tied to stateful filtering policies
  • Secure UNIStim Transparent Proxy
    • The secure UNIStim proxy transparently converts between the Secure UNIStim protocol, which is employed by devices/phones in the LAN/WAN, and standard UNIStim, which is used by the communication servers in the secure multimedia zone
    • The secure UNIStim proxy intercepts client requests addressed to UNIStim servers within the secure multimedia zone, maintaining a connection table that stores the current state of all client flows and provides statistics for the session
    • Generates, imports, and exports RSA keys used for Secure UNIStim, in addition to displaying the corresponding key fingerprints
    • Secure UNIStim policies can be specified for individual hosts or subnets, allowing administrators to customize requirements for secure UNIStim connections and to determine how often encryption keys should be renewed
  • High Availability
    • The SMC 2450 can be deployed in an active-standby configuration
    • The master key used in the Secure UNIStim proxy is synchronized across both machines in the High Availability configuration, to allow for faster connection re-establishment on a failover
  • Comprehensive Administration
    • Element management is performed through a common Web User Interface or application specific CLI
    • Security management is separated into distinct security zones, each of which is tied to an interface, port, and set of access control policies
    • Role-Based Administration allows separate management access restrictions for administrators and operators
    • SNMP v1, v2c, and v3 are supported, including MIB-II features and several monitoring and trap capabilities
    • Maintains a log of configuration user accesses and modifications, which can further be directed to a RADIUS accounting server
    • Both local and remote system logging and log archiving are supported including logs for the stateful filter and USECP proxy, detailing security issues and violations

Benefits:

  • Secures multimedia communications with an application firewall protecting critical business services from within the secure multimedia zone
  • Encrypts and secures the signaling path for IP phones improving the confidentiality and integrity of the converged multimedia solution
  • High availability options increase the resiliency of the solution, ensuring a protected environment suitable for all customer configurations
  • Simplified administration and management decreases startup time and reduces the overall cost of securing multimedia communications
Technical Specifications

Hardware:

  • 2.8G Pentium 4 based CPU
  • 512Mb RAM
  • Two-on-board Gigabit Ethernet
  • Quad Gigabit card

Software:

  • Hardened version of the LINUX OS (similar to other Nortel Firewall products)
 
 
If you have any queries or would like more information about any of the solutions outlined, please contact us or request a call back. Alternately, you can call us on 905 695 2241 or 877 888 3588 for more immediate help and advice.
 
 Links
 


Secure Network Access

 
   
 
     

Services | Solutions |Telephone Systems | System Add Ons | Telephones | Headsets | Data Products | Support | Case Studies

All Brand Names, Manufacturer Names, Marks and Logos are registered trademarks of their respective organizations.
Copyright © 2009 BCM50.com All rights reserved.Powered by Rebelnetworks