German IP phone specialist
Snom just announced the availability of their new business phone, the Snom 370. They're selling the product on its security features which include TLS and SRTP, but also connecting to a PBX via an IPSec VPN tunnel.
Michael Knieling, CFO and Executive VP, Marketing and Sales for Snom said this:
| Quote: |
Most PBXs do not support application layer security functions like SRTP, TLS or SIPS, included in most VoIP phones. Our new VPN capability ensures that all voice traffic is encrypted and protected, regardless of a company’s PBX limitations.
|
Actually, many PBXes
do have TLS and SRTP, but using a key exchange system that is vendor-specific, i.e. you have to buy handsets from the PBX vendor to enjoy the security features. As an independent, Snom are often up against the PBX vendors, who would prefer you buy their own feature-phones.
Snom also point out that VPN is a useful way of stepping around NAT/firewall traversal issues, and this is true: when a VPN tunnel is made, the phone has the appearance of being 'local' inside the firewall, and this fixes a lot of problems.
The VPN (and IPSec) approach has been criticized by many in the past as being 'too heavy', and an over-engineered way to secure a VoIP device. However, with CPUs getting more powerful and cheaper by the day, it is to be expected that a lot of CPU-heavy features will make their way onto embedded devices like phones.
Link:
Snom Press Release