Oracle Enterprise Session Border Controller - Datasheet Oracle

Transcription

Data SheetOracle Enterprise SessionBorder ControllerThe Oracle Enterprise Session Border Controller (E-SBC) protectsIP communications networks from cyber-threats and fraud,it mitigates the effects of network impairments and outages, andcures interoperability problems so that the users of your networkscan enjoy highly secure and reliable voice, video, and unifiedcommunications services.OverviewKey business benefitsWith the decentralization of IT and speedy adoption to cloud, the oncecentralized “edge” of the enterprise is expanding. This creates greater security,management, and control challenges for enterprises. Moreover, applicationsare becoming more mobile as workloads are moved to flexible and efficientinfrastructure both on and off premises. Similarly, users, like applications, arebecoming more decentralized and mobile making it difficult to maintainconsistent and superior quality of experience. Protects IT-based services,applications andinfrastructureAs a result, enterprise voice, video and unified communications services arevulnerable to cyber-attacks, outages and interoperability problems that canoccur when communications sessions traverse IP network borders. Attacks andoutages can disrupt business operations, endanger revenues and tarnish thebrand image. Interoperability problems can reduce business agility, delayprojects and put IT investments at risk.The Oracle E-SBC is a field-proven solution for connecting a wide range ofmultivendor VoIP, Unified Communications and Contact Center systems topublic network services, including SIP trunking services, the Internet and cloudapplications. It is also an important element for granular migration to cloudservices such as UCaaS and CCaaS. Guards against cyberattacks Accelerates servicedeploymentApplications Bring your own carrier(BYOC) deployments forUCaaS and CCaaS Connect to SIP trunkingservices and the Internet Access cloudcommunications services Communicate securely withremote workers Connect contact centerlocations and businessprocess outsourcing (BPO)servicesFigure1. Oracle Enterprise SBC solves the challenges posed by decentralization of IT with faster adoption toClouds, and application and users becoming remote.1Data Sheet / Oracle Enterprise Session Border Controller / Version 9.1Copyright 2022, Oracle and/or its affiliates / Public

Oracle Enterprise SBC advantagesStrong securityIP communications are susceptible to cyber-security threats, includingDistributed Denial of Service (DDoS) attacks, fraud and privacy breaches thatresult in lost revenue and productivity, poor customer experiences, complianceviolations and damages to the corporate brand. The Oracle E-SBC protectsIP-based systems and services from these threats and delivers secure, privatevoice, video and UC sessions across trusted and untrusted networks alike.The Oracle E-SBC incorporates Oracle’s S.A.F.E. Architecture, a comprehensivevision focusing on world-class Security, being Application aware, Flexibledelivery and Extensible platforms. The Oracle E-SBC’s own architectureprotects communications confidentiality and integrity and ensures theavailability of services, systems and applications. It uses dedicated resourcesand deep packet inspection technology to identify and block denial of serviceattacks at line rate while enabling valid communications to continue to flowduring an attack.The Oracle E-SBC can block calls to known fraudulent destinations, limit calls tounusual or suspicious destination ranges and apply policies to users based ontime of day and other parameters. The Oracle E-SBC provides topology hidingto prevent reconnaissance and enumeration by hackers and DTMF suppressionto enable PCI compliance in contact centers.Oracle Advantage Advanced Denial of Service(DoS) and overloadprotection Fraud prevention SIP protocol normalization Header Manipulation Rules H.323 to SIP protocolinterworking 1:1 high availability On-board Oracle EnterpriseOperations Monitor probe Scalable from 25 to 160,000RTP sessions Scalable to 40,000 SIPRECsessions Proven multivendor UC andService Providerinteroperability Microsoft Teams certifiedfor Direct Routing, in bothnon-Media Bypass andMedia Bypass modesFor enhanced communications privacy, the Oracle E-SBC is both FederalInformation Processing Standard (FIPS) 140-2 and Joint InteroperabilityTesting Command (JITC) compliant. Microsoft AzureCommunications Services(ACS) Direct RoutingcertifiedEasy interoperability Zoom Premise Peering(BYOC) certifiedIT managers frequently encounter interoperability problems when connectingon-premises systems to each other and to cloud communications services.These problems can reduce network agility and reliability, delay projects,increase costs and put investments at risk of obsolescence.The Oracle E-SBC features header manipulation capabilities that can resolve awide range of protocol interoperability problems. An extensive library ofapplication notes dramatically simplifies and accelerates the configuration anddeployment of any UC network and SIP trunking service.An IETF compliant SIPREC trunk recording interface provides a lower cost andmore efficient alternative to conventional line-side interfaces for connecting acall-recording server to the network. The Oracle E-SBC’s open standard SIPRECinterface is field-proven for interoperability with a wide range of 3rd-partySIPREC compliant Session Recording Servers (SRS), has a rich SIPREC loadbalancing functionality, and supports up to 10 simultaneous SRS destinations(e.g. connecting to Biometrics, Compliance, Speech Analytics in parallel, as wellas using geographically redundant recording solutions). Genesys PureEngagecontact center certified Oracle CommunicationsSecurity Shield (OCSSC)provides an always-on, realtime communicationssecurity solution to protectyour network Oracle Session DeliveryManagement Cloud(OSDMC) provides a simple,more insightful way tomanage your network Oracle SD-WAN delivers areliable, secure, highperformance network forbusiness-critical services VNF HEAT Templates REST APIs FIPS 140-2/JITC Compliant Minimal touch instantiationand configuration usingTerraform scripts to deployOCI and AWS2Data Sheet / Oracle Enterprise Session Border Controller / Version 9.1Copyright 2022, Oracle and/or its affiliates / Public

Assured reliabilityImpairments and failures can occur anywhere in a communications network –including the Oracle E-SBC – and they can be difficult to isolate and repair.The Oracle E-SBC includes a complete set of carrier-grade routing andsurvivability features to ensure business continuity during network failures orimpairments.All models feature 1:1 high availability that continuously monitors the OracleE-SBC’s health and routes sessions from active to standby units with no loss insession state or impact to user experience. The Oracle E-SBC dynamicallyroutes sessions to protect against failures anywhere in the network. It canoptimize performance across multiple SIP trunk services by routing sessionsbased on observed QoS and balancing loads.To help IT managers monitor and troubleshoot their networks, theOracle E-SBC features a monitoring and tracing tool that enables them toquickly visualize complex session information. An embedded probe enables theOracle E-SBC to integrate with the sophisticated troubleshooting capabilitiesprovided by Oracle Enterprise Operations Monitor.The Oracle E-SBC also is an enforcement element for Oracle CommunicationsSecurity Shield Cloud, which evaluates SIP-based calls and enforces actions foreach call it processes, based on reputation assessment, or deny lists.ApplicationsBusinesses install the Oracle E-SBC at SIP network borders where enterprisecommunications systems connect to public network services or wheredisparate multivendor systems must be interconnected.They use the product to: Connect to SIP trunking services and the Internet Access cloud communications services Communicate securely with remote workers Connect contact center locations and business process outsourcing(BPO) servicesFigure2. Oracle Enterprise Session Border Controller connects disparate IP communications networkssecurely.3Data Sheet / Oracle Enterprise Session Border Controller / Version 9.1Copyright 2022, Oracle and/or its affiliates / PublicNew features Enhanced Web GUI Support for OCI resourcemanager Additional SIP KPI TrFo for Asymmetricpreconditions to avoidunnecessary transcoding

Related productsBring your own carrier (BYOC)The best-of-breed Oracle E-SBCs enable BYOC and solve the multivendorinteroperability challenges that arise from deploying multiple solutions,transforming independent islands of technology into a cohesive enterprisecommunications network. As security devices deployed at the enterprise edge,Oracle E-SBCs also allow direct connections to new and innovative cloudservices and access to the remote workforce.Once a session border controller is deployed, organizations can swap outlegacy platforms or introduce new services at their own pace with minimaldisruption. They can decommission outdated and underused services andsystems over time to get out of expensive subscription plans and maintenancecontracts. Or they can quickly deliver newer capabilities like UnifiedCommunications as a Service (UCaaS), Contact Center as a Service (CCaaS),video conferencing, or SMS messaging to existing platforms, extendingprevious investments.Deploy a software-based architectureWith virtual and cloud-based deployments enterprises can avoidoverprovisioning and tightly align operating expenses with usage. They alsohelp them avoid hardware vendor lock-in and accelerate time-to-market.Cloud-based deployments also alleviate the responsibilities of physicalmanagement.For maximum flexibility, Oracle E-SBC supports a wide range of hypervisors &public clouds. To reduce the need for cloud expertise, orchestration usingTerraform scripts is supported on OCI and AWS.PRIVATE CLOUD (HYPERVISORS)PUBLIC CLOUDSVMware ESXiAmazon Web Services (AWS)KVMMicrosoft AzureOracle Cloud InfrastructureA trusted partner with a security mindsetOracle invests heavily in the technology necessary to remain the market leaderin session border control. Technology is constantly evolving and the securitylandscape continues to change. Our solutions are flexible, vendor independentand support interconnection with any SIP device or service. Technologycertifications from our partners give further peace of mind that our solutionsare secure and reliable. Some of our formal certifications include:4 Microsoft Teams Direct Routing Microsoft Azure Communication Services Direct Routing Zoom Premise Peering Genesys PureEngageData Sheet / Oracle Enterprise Session Border Controller / Version 9.1Copyright 2022, Oracle and/or its affiliates / Public Oracle Enterprise OperationsMonitor Oracle Enterprise TelephonyFraud Monitor Oracle EnterpriseCommunications Broker Oracle Session DeliveryManagement Cloud Oracle CommunicationsSession Delivery Manager Oracle CommunicationsSecurity Shield Cloud Oracle SD-WANOrchestration Cloud Oracle SD-WAN Edge Oracle Talari Platforms

Enterprise SBC datasheetCritical features and capabilitiesFEATURECAPABILITIESSecurity Granular access controlIP address and SIP signaling concealmentLayer three through five topology hiding and signaling overload controlsIP telephony spam protectionStateful deep packet inspectionSignaling and media encryptionTelephony fraud protectionNIST Suite B cryptography (also available for WebGUI connection)FIPS Compliant and being validated, including MSRP FIPS for virtualized E-SBC,1100 & 3900 platforms. (All prior images, including SCz9.0.0 are FIPS Certified.)JITC Compliant and being validated. (Image SCz9.0.0 is JITC Certified.) SIP message normalizationResponse code translationSDP and Dual Tone Multi-Frequency (DTMF) manipulationNumber and uniform resource identifier (URI) manipulationHeader manipulation rules (HMR)SIP / H.323 signaling interworkingProtocol interworking: Transmission Control Protocol (TCP), User DatagramProtocol (UDP), Stream Control Transmission Protocol (SCTP)Encryption interworking: Transport Layer Security (TLS), Mutual TLS, SecureReal-time Transport Protocol (SRTP), IP Security (IPsec)Network address translation (NAT) and firewall traversalIP address translation: private/public, IPv4/IPv6TranscodingIETF standard SIP Recording (SIPREC) interfaceSupport for Microsoft ELIN Gateway and Avaya Personal Profile Manager proxySession routing based on LDAP (Microsoft Active Directory) queryCalling Line Identification Presentation (CLIP/COLP)Reliability Standby SIP registrar with caching for remote site survivabilityStateful signaling and media failoverQuality of service (QoS) marking, virtual local area network (VLAN) mappingRegistration storm avoidanceCall rate limit enforcementTrunk load balancingStateful session routingQoS-based routingMicrosoft Active Directory based routing enhancementsH.323 destination address based routingRegulatory Session prioritization for emergency servicesCall detail records (CDRs) with local or remote storage via RADIUSCost management Least cost routingCODEC renegotiationManagement Embedded Oracle Enterprise Operations Monitor probeBrowser-based GUISIP monitoring and tracing toolSNMP agent, XML configuration files, Syslog, SFTP, RADIUS interfacesSubnet masks for SNMPSecure WebGUI access with HTTPSSupport for orchestration on OCI and AWS using Terraform scriptsAnalog module Four FXS and four FXO portsSupport for fax interworking with T.38 transcoding One T1/E1 port (RJ-48) for TDM fallbackFour T1/E1 ports (RJ-48) for TDM fallbackInteroperability compliance(Acme Packet 1100)T1/E1 moduleSupported Enterprise SBC PlatformsAppliance-based: The Enterprise SBC is available on Oracle’s purpose-builthardware platforms, catering to the needs of different Enterprises starting frombranch offices to large enterprises. The supported hardware platforms areAP1100, AP3900, AP3950, AP4600, AP4900, AP6300 and AP6350.Virtual and cloud: The virtualized E-SBC leverages the same code base asOracle’s appliance-based E-SBCs, and can be deployed by small to very largeenterprises based on capacity needs in both On-Premises & Private Clouds andPublic Clouds environments.5Data Sheet / Oracle Enterprise Session Border Controller / Version 9.1Copyright 2022, Oracle and/or its affiliates / PublicPlatforms supported Acme Packet 1100 Acme Packet 3900 Acme Packet 3950 Acme Packet 4600 Acme Packet 4900 Acme Packet 6300 Acme Packet 6350 Private Cloud (hypervisors):-VMware ESXi-KVM Public Cloud:-Microsoft’s Azure-Amazon’s AWS-Oracle’s OCI

Capacity and performance comparison for 00AP6300AP6350Form factorVirtualized1U System1U System1U System1U System1U System3U System3U SystemSystemArchitectureMax. MediaSessionsMax. SRTP CallLegsMax. SIPRECSessionsMax.TranscodedSessions(G711 - G729)Max. Calls PerSecondData Centre/COTSPurpose BuiltPurpose BuiltPurpose BuiltPurpose BuiltPurpose BuiltPurpose BuiltPurpose ,2001,700Feature* VM configuration dependent** Software transcodingConnect with usCall 1.800.ORACLE1 or visit oracle.com. Outside North America, find your local office at: acleCopyright 2022, Oracle and/or its affiliates. All rights reserved. This document isprovided for information purposes only, and the contents hereof are subject tochange without notice. This document is not warranted to be error-free, nor subjectto any other warranties or conditions, whether expressed orally or implied in law,including implied warranties and conditions of merchantability or fitness for aparticular purpose. We specifically disclaim any liability with respect to thisdocument, and no contractual obligations are formed either directly or indirectly bythis document. This document may not be reproduced or transmitted in any form orby any means, electronic or mechanical, for any purpose, without our prior writtenpermission.6twitter.com/oracleOracle and Java are registered trademarks of Oracle and/or its affiliates. Other names maybe trademarks of their respective owners.Intel and Intel Xeon are trademarks or registered trademarks of Intel Corporation. All SPARCtrademarks are used under license and are trademarks or registered trademarks of SPARCInternational, Inc. AMD, Opteron, the AMD logo, and the AMD Opteron logo are trademarksor registered trademarks of Advanced Micro Devices. UNIX is a registered trademark of TheOpen Group. 1221Data Sheet / Oracle Enterprise Session Border Controller / Version 9.1Copyright 2022, Oracle and/or its affiliates / Public

Oracle E-SBCs also allow direct connections to new and innovative cloud services and access to the remote workforce. Once a session border controller is deployed, organizations can swap out legacy platforms or introduce new services at their own pace with minimal disruption. They can decommission outdated and underused services and