VoIP

[David Newman]

Good luck.

One known problem with most VPN gateways is that they break VoIP flows, or
prevent calls from getting set up in the first place. That's because
gateways encrypt traffic -- including the ASN.1 strings used in H.323 (and
various other voice-over-packet technologies) to set up calls.

I've heard of two vendors working on fixes: Last fall Nokia/Check Point were
gonna do a special build of FW-1 that dealt correctly with VoIP flow, but I
don't know the status of this project. And Cisco supposedly decrypts and
then re-encrypts such strings on the fly, but their own engineers described
this approach to me as "ugly" -- by which I presume they mean there's a big
performance hit.

My info is a few months old. If anyone else is aware of a better way to do
VoIP through IPSec gateways please share it with the list.

Regards,
David Newman


 -----Original Message-----
From: VPN Mailing List [mailto:VPN at SECURITYFOCUS.COM]On Behalf Of Chavdar
Parvanov
Sent: Friday, May 19, 2000 2:32 AM
To: VPN at SECURITYFOCUS.COM
Subject: VoIP



Hello,
I need more invormation about implementing VoIP over VPN - devices (FXO,
FXS), standards, etc.

VPN is sponsored by SecurityFocus.COM