Re: [VoiceOps] Fraud Management

2015-01-28 Thread Alexander Hardie
Have you tried PinDrop Security - http://www.pindropsecurity.com/

They have a purpose built solution around calling line ID fraud.  They are 
enterprise centric - but the solution is very portable.

Alex Hardie


On Wednesday, January 28, 2015 4:53 AM, Jim Dalton jim.dal...@transnexus.com 
wrote:
 


Hello Shaun,
 
TransNexus offers a fraud detection solution, NexOSS-FC, to complement your 
Session Border Controller (SBC) and block fraudulent calls at the ingress edge 
of your network.  NexOSS-FC is a SIP redirect server.  You configure your SBC 
to route every call to NexOSS-FC.  If no fraud is detected, NexOSS-FC returns a 
404 and your SBC routes the call to the next destination in its routing table.  
If fraud is detected, NexOSS-FC returns a 603 and the SBC blocks the call.  If 
you want to divert fraudulent calls, NexOSS-FC can return a 300 redirect 
message with the destination to where the SBC should divert the call. 
 
The SIP Analytics of NexOSS-FC is better fraud protection than conventional CDR 
Analytics because it obtains the call information sooner and because SIP 
INVITES have call details for fraud detection that are not available in Call 
Detail Records.  The solution is simple and effective.  Please contact me 
offline if you want to evaluate the software.  More information is available at 
http://transnexus.com/products/nexoss-fc/
 
Jim Dalton
TransNexus
 
From:VoiceOps [mailto:voiceops-boun...@voiceops.org] On Behalf Of Shaun Gill
Sent: Wednesday, January 28, 2015 3:37 AM
To: voiceops@voiceops.org
Subject: [VoiceOps] Fraud Management
 
Hi Guys,
 
Trying to get a feel for what fraud systems are out there for VoIP service 
providers; primarily using terrestrial mediums (such as metroE; diginet) with 
clients interconnecting via IP PBXs, voice gateways and IP phones.
We have had fraud to international premium destinations which we are 
restricting based on calling profiles and originating source IPs; but neither 
is truly scalable.
Subsequently we are looking for alternatives.
 
Regards,
Shaun
 
 

___
VoiceOps mailing list
VoiceOps@voiceops.org
https://puck.nether.net/mailman/listinfo/voiceops___
VoiceOps mailing list
VoiceOps@voiceops.org
https://puck.nether.net/mailman/listinfo/voiceops


Re: [VoiceOps] BSFT Buys

2015-01-22 Thread Alexander Hardie
Overdue - now perhaps BSFT will take PS seriously - customers need easy -
this helps.

alex hardie | ahar...@bellsouth.net | +1 404 229 7635





On 1/13/15, 3:12 PM, Peter Rad. pe...@4isps.com wrote:

http://blog.tmcnet.com/on-rads-radar/2015/01/broadsoft-buys-leonid.html

-- 
Regards,

Peter Radizeski @ RAD-INFO INC
Circuits * Bandwidth * Consulting
(813) 963-5884

___
VoiceOps mailing list
VoiceOps@voiceops.org
https://puck.nether.net/mailman/listinfo/voiceops


___
VoiceOps mailing list
VoiceOps@voiceops.org
https://puck.nether.net/mailman/listinfo/voiceops


Re: [VoiceOps] Rompager vuln may affect ATA fleets in addition to consumer routers

2014-12-20 Thread Alexander Hardie
Similar to the threat mentioned above these same home gateways can also be 
compromised by hackers in building DDOS attacks.  

Please refer to the link below for more information - 

http://openresolverproject.org/


Thanks,

Alex Hardie

alex hardie | principle | ahar...@sdnnfv.net | +1 404 229 7635 | SDNNFV.net


On Friday, December 19, 2014 5:56 PM, Jay Ashworth j...@baylink.com wrote:
 


If you are responsible for fleets of such devices, you might want to read
this Ars article and the associate white paper.

The vuln is 12 years old, and the fix 9, but the piece suggests that devices
may yet be being built with vulnerable code baked in.

http://arstechnica.com/security/2014/12/12-million-home-and-business-routers-vulnerable-to-critical-hijacking-hack/

Cheers,
-- jra

-- 
Jay R. Ashworth  Baylink  j...@baylink.com
Designer The Things I Think   RFC 2100
Ashworth  Associates  http://www.bcp38.info  2000 Land Rover DII
St Petersburg FL USA  BCP38: Ask For It By Name!   +1 727 647 1274
___
VoiceOps mailing list
VoiceOps@voiceops.org
https://puck.nether.net/mailman/listinfo/voiceops___
VoiceOps mailing list
VoiceOps@voiceops.org
https://puck.nether.net/mailman/listinfo/voiceops


Re: [VoiceOps] Broadsoft / Puppet

2014-12-08 Thread Alexander Hardie
Can I ask a dumb question and ask was Puppet using the BSFT provisioning API
(OCIP)?  If so then there should be no problem.

I don¹t want to beat a horse here ­ but I can¹t get past your original
request being so benign it shouldn¹t matter.

Alex Hardie

alex hardie | ahar...@bellsouth.net | +1 404 229 7635


From:  John Botha johnbo...@hotmail.com
Date:  Monday, December 8, 2014 at 9:06 AM
To:  Peter E peeip...@gmail.com
Cc:  Alexander Hardie ahar...@bellsouth.net, Voiceops Mailing List
voiceops@voiceops.org
Subject:  RE: [VoiceOps] Broadsoft / Puppet

Well, when we attempted to deploy the client on our *nix servers (spread of
solaris and RHN), we questioned TAC/BSFT on whether it invalidates our
support contract with them. Their reply was that NO 3d party software is
allowed unless it is a part of the broadsoft platform and supported by them.
The common understanding is - use it if you want, but do so at your own
risk. They will not be held accountable or responsible if it breaks or
interferes with the normal working of the platform, be it OS or application.
We ended up not using puppet.


CC: ahar...@bellsouth.net; voiceops@voiceops.org
From: peeip...@gmail.com
Subject: Re: [VoiceOps] Broadsoft / Puppet
Date: Mon, 8 Dec 2014 08:00:59 -0500
To: johnbo...@hotmail.com

That's what was driving my question, John. Looking to use it for change
management 


On Dec 8, 2014, at 7:57 AM, John Botha johnbo...@hotmail.com wrote:

Hoping i am not getting wires crossed or misunderstanding here. I administer
the broadsoft and sbc voip platform, our sysadmins uses puppet not for
orchestration or vm management but for configuration management with a
puppet client (http://puppetlabs.com/)
The puppet deployment we have focuses on keeping configuration files in sync
and current and have rollback in case someone badly fubar the OS platform.


Date: Mon, 8 Dec 2014 02:35:53 -0800
From: ahar...@bellsouth.net
Subject: Re: [VoiceOps] Broadsoft / Puppet
To: johnbo...@hotmail.com
CC: peeip...@gmail.com; voiceops@voiceops.org

Right - understood -

My question was around the AS/XS server - the one housing all the service
logic.  That system may be problematic since the service model is usually a
fixed number of features in inventory.  I would think you could use puppet
to spin up media servers as needed - and network servers to a lesser extent.

As for engaging  BroadSoft TAC I would ask them this  - if the server was
provisioned and placed into server in a more traditional manner - would
BroadSoft TAC allow tickets to be opened? Assuming the answer would be yes -
I would then position your Puppet deployment to BroadSoft TAC as just that -
your deployment platform (jump box to them).

Other than asking permission I doubt you would need to ask BroadSoft
anything around Puppet in particular - just tell them your servers are being
provisioned via Puppet.  If the servers are provisioned to BSFT spec then
you should be ok.

Hope this helps,

Alex Hardie
 


 
 
 
  On Monday, December 8, 2014 12:48 AM, John Botha Hotmail
johnbo...@hotmail.com wrote:
  
  

 
 Broadsoft at an application layer itself isn't aware of it. When we queried
them around the use of puppet or any other 3d party software of any kind,
their reply was that general policy is not to support any software not
loaded by Broadsoft that can even remotely possibly interfere with the
working of the application.
 
 Anything we cannot raise a TAC on is not supported.
 
 
On 07/12/2014 21:22, Alex Hardie wrote:
 
 
  
Wait - why would BroadSoft even be aware of Puppet?  I assume orchestration
was around spinning up
 
various servers - AS servers are the only ones that would be bound by
licenses.  Spinning up NS or MS should be transparent - they (BroadSoft)
wouldn't care.
 

 
 
What servers were you provisioning ?
 

 
 
Alex Hardie
 

 On Dec 7, 2014, at 1:27 AM, johnbotha johnbo...@hotmail.com wrote:
 
 
 
  
  
 
We tried using puppet, but had top remove it due to broadsoft policy on
unsupported software.
 

 
 

 
 
 
Sent from Samsung Mobile
 
 
 
 
 
  Original message 
 From: Peter E peeip...@gmail.com
 Date: 05/12/2014 22:57 (GMT+02:00)
 To: VoiceOps voiceops@voiceops.org
 Subject: [VoiceOps] Broadsoft / Puppet
 
 
 Anyone out there using Puppet to help manage their Broadsoft servers? Any
conflicts or issues? Any feedback appreciated.
 
 Thanks,
 Pete
 
 
 ___
 VoiceOps mailing list
 VoiceOps@voiceops.org
 https://puck.nether.net/mailman/listinfo/voiceops
   
  
 ___
  VoiceOps mailing list
  VoiceOps@voiceops.org
  https://puck.nether.net/mailman/listinfo/voiceops
  
  
  
 


  
 
  
 
   
   


___
VoiceOps mailing list
VoiceOps@voiceops.org
https://puck.nether.net/mailman/listinfo/voiceops


Re: [VoiceOps] Broadsoft MoH

2014-08-21 Thread Alexander Hardie
Music on hold is more than delivery of .mp3 files - and you are right it 
depends TOTALLY on an outside source to  Broadsoft  if you want to do anything 
that involves a richer content experience.  

This is one of the issues between a premise based solution and a hosted one.  
In a hosted solution the carrier is responsible for the distribution of content 
- the whole DRM issue is a pain.  In a CPE/PBX solution the service demark is 
in the building - technically the carrier providing the trunk never has to 
touch it.  In the hosted service they do.

There are several partners of BroadSoft - I think you can even dig up an old 
partner config guide somewhere - its been supported since R11 I think.

I can look for who the partners are and follow up on this thread - but there 
are several.  

This is more an architectural issue than a product one - and is another reason 
deployments taking full advantage of what BroadSoft does well (scale, service 
logic etc.) requires the operator to provide some level of integration - in 
this case a far bit. 


On Wednesday, August 20, 2014 8:32 PM, Colton Conor colton.co...@gmail.com 
wrote:
  


So back to the original question. It seems like Broadsoft does only allow you 
to upload one .wav file at a time, and it plays the beginning of that file 
every time. I think this is bad on Broadsoft's part. It assumes the end user 
knows how to convert a .mp3 or other audio format to a .wav file (try 
explaining that to a common end user). Plus once they figure out how to upload 
the file, they can only upload one file. Uploading another file erases the old 
file. You could combine multiple songs into one long sound file, but then 
Broadsoft only plays the beginning of the sound file. So unless the caller is 
on hold for a really long time that doesn't help. 


Broadsoft's solution from what I can see is to use an external source. What 
authorized, external sound sources are out there from Broadsoft? Ones that are 
configured and managed through Broadsoft DMS? 

I just learned of PIKA WARP Plus. This does allow you to use an external source 
like an Ipod connected to the 3.5mm audio jack. It doesn't allow you to upload 
multiple songs to the device, and stream it back to Broadsoft in a loop 
however. Plus this product is pretty expensive if just using it as a MoH 
option. It is Broadsoft certified however.  

I have heard there are some other ATA's out there that can use an FXO port as 
an audio in jack?  

Anything that can do both? audio in jack plus upload multiple sound files? and 
managed by Broadsoft? 

I hate the idea of having any other device besides the phones themselves at a 
clients site for a hosted solution.  



On Tue, Aug 19, 2014 at 2:04 PM, Colton Conor colton.co...@gmail.com wrote:

So back to the original question. It seems like Broadsoft does only allow you 
to upload one .wav file at a time, and it plays the beginning of that file 
every time. I think this is bad on Broadsoft's part. It assumes the end user 
knows how to convert a .mp3 or other audio format to a .wav file (try 
explaining that to a common end user). Plus once they figure out how to upload 
the file, they can only upload one file. Uploading another file erases the old 
file. You could combine multiple songs into one long sound file, but then 
Broadsoft only plays the beginning of the sound file. So unless the caller is 
on hold for a really long time that doesn't help. 


Broadsoft's solution from what I can see is to use an external source. What 
authorized, external sound sources are out there from Broadsoft? Ones that are 
configured and managed through Broadsoft DMS? 


I just learned of PIKA WARP Plus, and their product guide is attached. This 
does allow you to use an external source like an Ipod connected to the 3.5mm 
audio jack. It doesn't allow you to upload multiple songs to the device, and 
stream it back to Broadsoft in a loop however. Plus this product is pretty 
expensive if just using it as a MoH option. It is Broadsoft certified however. 
 


I have heard there are some other ATA's out there that can use an FXO port as 
an audio in jack? 


Anything that can do both? audio in jack plus upload multiple sound files? and 
managed by Broadsoft? 


I hate the idea of having any other device besides the phones themselves at a 
clients site for a hosted solution. 



On Tue, Aug 19, 2014 at 11:57 AM, Matthew S. Crocker 
matt...@corp.crocker.com wrote:

Under NDA so you won't get pricing from me. Several hundred thousand is a good 
estimate.   Broadworks is software. It runs on commodity hardware and Linux or 
Solaris.    Ours is running on IBM Blades and Redhat Linux.   You also want a 
good SBC.  We use acme packet (oracle)  


Broadworks is rock solid.

On Aug 19, 2014, at 11:42 AM, Adam Vocks adam.vo...@cticomputers.com 
wrote:


Anyone care to say what a Broadsoft implementation costs?  I really don’t 
even know what broadsoft sells, is it hardware box that we rack up in our