1. 1 SIP Trunking

2. What is SIP Trunking? Termination of SIP calls directly to Service Provider(s) via IP.  For Session Initiation Protocol (SIP) based IP-PBXs  For legacy PBXs with a gateway to SIP. Benefits for the Enterprise  No need to have local PSTN Gateways on the LAN.  No need to pay expensive monthly fees for PRI/BRI lines  Flexible growth in # of lines up to the capacity of the link No need to invest in more capacity in PSTN Gateways. No need to add another BRI/PRI just to get one more line. Benefits for the Service Provider  Able to deliver both data and voice services in same link.  More services means lower churn.  Compelling and competitive offering.

3. Ingate SIP Proxy firewall SIP TLS S I P SIP Ingate Firewall ® Normal Firewalls With SIP-Proxy and -Registrar

4. No Need to Replace your Firewall! Ingate SIParator ® DMZ SIP-enables any firewall Ports that need to be open: -SIP Signaling port 5060 -Range of UDP/TCP ports Normal Firewalls SIP

5. Ingate takes care of the Interoperability issues Service providerEnterprise SIP Trunk Ingate SIParator -or- Ingate Firewall Confirmed IP-PBX interoperability: 3Com Asterisk Avaya Broadsoft Cisco Call Manager Mitel Pingtel SER Shoretel Sphere Swyx More in pipeline.... SIP Connect compliant Click here for more Technical details

6. Assumptions Return On Investment Calculations Customer have already a SIP compliant IP-PBX SIP Trunking + Ingate replaces existing PRI + PSTN Gateway  Only additional - not existing PSTN Gateways – are regarded as a cost All figures are based on monthly cost  Subscriptions are monthly fees.  Investment in HW/SW are distributed over 36 months. Hardware and Software prices are list prices in Sweden The prices are converted from SEK to USD Subscription fees are taken from Tele2 (Swedish SP)  Offers both TDM and SIP Trunking  Same minute rates for calls in both TDM and SIP Trunking  The call volume is not meeting the qualifying limit for free PRI. 1600 USD per month and PRI Prices and currency as of September 2006

7. Return On Investment 10,6 months Investment PSTN Gwy Vega 50 – 8 lines 2 000 USD Divided by ROI example SMB Existing TDM Internet 2 Mbit 253 USD BRI x 4 – 8 lines 165 USD Total per month 418 USD 8 lines with G.711, 80 Kbit/s per line 14 employees, average 64 Kbit/s Internet Internet overcapacity, only 0,9 Mbit/s used Replace with SIP Trunk SIP/Data trunk 2 Mbit253 USD Total per month253 USD Monthly savings 165 USD Investment Ingate Firewall ® 1180 900 USD SIP Trunking module 250 USD QoS module 300 USD 5 extra traversals 300 USD Total investment1 750 USD + 250 USD saving on the initial investment 0 If new installation!

8. Internet 2 Mbit/s TDM 4 x BRI = 512 Kbit/s Dedicated TDM - Waste of Bandwidth Number of calls Min Max Bought capacity Needed capacity Data Mbit/s Min Max Realtime critical Peak hour Data can often wait! Often bursty traffic Wasted bandwidth Share of time

9. TDM 4 x BRI = 512 Kbit/s Dedicated SIP and Data Trunk 2 Mbit/s Convergence – Optimal Bandwidth Internet 2 Mbit/s Lowest Peak TDM - Waste of Bandwidth Share of time

10. SIP and Data Trunk 2 Mbit/s Bought capacity Needed capacity Convergence – Optimal Bandwidth Number of calls Mbit/s 0 2 1 8 0 16 25 Flexibility to use extra capacity Data uses free capacity with the help of QoS settings VoIP Data

11. Return On Investment 5,3 months Investment 2 x Cisco 2811 – 60 lines 21 290 USD Investment Ingate Firewall ® 14503 390 USD SIP Trunking module 500 USD QoS module 810 USD 25 extra traversals1 400 USD Total investment6100 USD Divided by ROI example Enterprise Existing TDM Internet 100 Mbit/s 1 1 600 USD 4 x PRI – 30 lines 2 1 147 USD Total per month 2 747 USD Replace with SIP Trunk SIP/Data trunk 100 Mbit/s 1 1 600 USD Total per month 1 600 USD Monthly savings 1 147 USD +15 190 USD saving on the initial investment All figures based on Swedish operator Tele 2 offering September 2006 0 Not good enough? Please WAIT! 550 employees, average 40 Kbit/s data That is 22 Mbit/s for data 1) More economical with one 100 Mbit/s than 2x20 110 lines with G.711, 80 Kbit/s per line 2) More economical with 4xPRI than 3xPRI + 10xBRI If new installation!

12. What about growth in lines? SIP Trunk TDM All figures based on Swedish operator Tele 2 offering September 2006 WAIT! All investments distributed over 36 month. More Invest. ac# Cisco 2811 2811 +30 lines Upgrade to 45+ 10 Traversals Subscr. ac# PRI Internet 100 M SIP/Data 100 M 1 4 1 1 1 1 2 5 4 6 2 6 8 7 1 9 8 2 11 13 Growth this much over 3 years costs 65.845 USD more with TDM 14

13. Use the SIP Trunk flexibility and QoS to handle peaks What about line utilization? WAIT! Allows the use of cheaper SIParator

14. What about branch offices? The TDM way Centralized PRI Trunks HQ Service Provider PSTN WAIT! The SIP Trunking way VPN to HQ PSTN Gateways HQ SIP & Data trunk from each office Exactely the capacity you need when you need it! Single point of failure Heavy Load PBX

15. What if............. You could use codecs with compression ? You could get cheaper minutes from SIP SP ? You could support remote users ?  Transfering x% of your mobile calls to VoIP calls For remote users with PCs and softphone SIP clients. For remote users with dual handsets WiFI/SIP and mobile. Terminating calls at the most cost effective operator  Terminate calls directly in the destination country Global calls to local fees. Improve communication and collaboration with  Video, IM, Precense, File sharing, Filetransfer etc WAIT! We have been very conservative in the ROI calculations! What would the ROI then be ?

16. +81+1+33 DMZ SIP-unaware Firewall IP-PBX Connect to multiple Service Providers Swedish office Service Provider Japan Service Provider France Service Provider B USA PSTN Ingate SIParator ® SIP Trunking Module Swedish Office Service Provider A USA Authentication Least cost routing Fail over to secondary

17. Authentication with Service Providers TLS Authentication with SP  Prevent unauthorized use of your SIP Trunk Register the Ingate box at single user accounts  Let all users use the single user account service for outgoing calls.  Useful for example as a low cost back-up “SIP Trunk”.

18. Call From: 603 883 6045 Call From: 603 883 5003 Different Service levels for different users DMZ SIP-unaware Firewall IP-PBX PSTN Ingate SIParator ® SIP Trunking Module Service Provider B Service Provider A Call Center Back Office 603 883 6000 to 603 883 6900 Numbers: 603 883 5000 to 603 883 5040

19. Call to: +1-972-678-0464 ENUM Call to: +1-603 883 6569 DMZ SIP-unaware Firewall IP-PBX PSTN Ingate SIParator ® SIP Trunking Module IP-clients and IP-PBXs +1-972-678-0464 +1-603 883 6569 SIP: steve@ingate.com ENUM Any entry for: 4.6.4.0.8.7.6.2.7.9.1.e164.arpa ? Yes: steve@ingate.com No ! Service Provider Any entry for: 9.6.5.6.3.8.8.3.0.6.1.e164.arpa ? ENUM emulates the DNS hierarchy by reversing the phone number including the country code with a dot between each digit and adding “e164.arpa” as the top domain. x.x.x.x.x.x.x.x.e164.arpa Top domain for US is 1.e164.arpa

20. Now you dare to connect over Internet The basic architecture of all Ingate products is an enterprise firewall. SIP specific Security features includes  Topology hiding of private IP addresses information  Validation of the SIP signalling with strict SIP parser Prevents admission of malformed and possibly malicious packets  Dynamically open media ports Only for the duration of the session Only between the parties of the call  Termination, transcoding and pass-through of TLS (signaling) and SRTP (media) To encrypt some or all sessions to insure privacy.  Extensive SIP filtering  Extensive SIP logging

21. The Ingate family Firewall ® 1180 & SIParator ® 18 Firewall ® 1900 & SIParator ® 90 30 Calls* 30 Mbit/s Firewall ® 1450 & SIParator ® 45 Firewall ® 1450+ & SIParator ® 45+ 150 Calls* 120 Mbit/s 240 Calls* 310 Mbit/s 1 500 Calls* 2 600 Mbit/s Possible to SW upgrade 500 Calls* 385 Mbit/s Firewall ® 1600 & SIParator ® 60 *) Calls = Concurrent RTP Sessions

22. The function of Ingate SIP Proxy Ingate SIP Proxy SIP Proxy/Registrar SIP Signaling 10.x.xx168.x.xx 1.Check the SIP signaling, packet inspection - Full flexibility to handle future threats 2.Rewrite for the different address spaces 3.Forward the signaling to the correct SIP proxy or client 4.Open ports (UDP/TCP) in the firewall for the media -Only for the duration of the call -Only between the exact endpoints 5.Media flows through the ports Media 6.Close ports after the call

23. Ingate SIP Trunking module solves this problem ! What if the Service Provider can’t handle domains ? Most Service Providers can’t handle domain names IP-PBX Ingate SIParator ® IP 10.500.10.13IP 168.105.45.19 IP 168.203.30.11 DMZ 603-883-6569 IP 10.200.10.16 with SIP Trunking Module 6038836569 @168.105.45.19 10.200.10.16 972-678-0464 SIP-unaware Firewall With domain name, no problem ! Can only address the known public IP-address of the SIParator. 6038836569 @168.105.45.19 Rewrites the domain part DNS record pbx.ingate.com resolves to IP 168.105.45.19 DNS override pbx.ingate.com  10.200.10.16 6038836569 @pbx.ingate.com

24. Without Support for OP With Support for OP 9726780464 @10.500.10.13 Default Gwy: 10.500.10.11 Outb. Proxy: - 9726780464 @168.203.30.11 Default Gwy: 10.500.10.11 Outb. Proxy: - 9726780464 @168.203.30.11 Default Gwy: 10.500.10.11 Outb. Proxy: 10.500.10.13 603-883-6569 Many IP-PBXs can’t handle outbound Proxy SIP-unaware Firewall IP-PBX Ingate SIParator ® IP 10.200.10.16 Outbound Proxy IP 10.500.10.13 IP 168.105.45.19 IP 168.203.30.11 DMZ Default Gateway IP 10.200.10.11 with IP-packets to destinations outside the logical network is sent to the Default Gateway for routing. Outbound Proxy is the equivalence to Default Gateway, but for SIP. 972-678-0464 SIP Trunking Module Configure IP-PBX to ”pretend” that Ingate is the Service Provider 9726780464 @10.500.10.13 168.203.30.11 Rewrites the domain part Click here to go back