Best Security Practices for Video Conferencing

[equinox198]

I wanted to know if there are known or best practice use cases for Video Conferencing when deploying a MCU, VCS, VCS-E.

Also, how do you handle endpoint video security or protection, for ex, like having units with auto answer off, or if you have auto answer off, you have to have educated users put Do Not Disturb when not using the Device.  Encrypting calls whenever possible etc...

Also, how do you protect against SIP Scanning or non approved utilization of Bridge ports?

Is there a way to restrict usage of the Conference Factory feature to certain devices or subset of users?

[Wayne DeNardi]

For a quick an nasty guide, there's a blog post here.

Bear in mind that point 2 in that blog - H.323 packet inspection - is known to break more things than it fixes - so be careful if deciding to turn it on.

The auto-answer (point 3) is more of a per company, or per unit setting - there's not a one rule fits all solution - different uses will required different configurations.  We have a mix throughout or environment, some On, some On with Mic muted, some Off.

As for preventing or disrupting SIP scanning or ISDN toll fraud - there are plenty of discussions in these forums.

Wayne

--

Please remember to rate responses and to mark your question as answered if appropriate.