Alternative SBC 6

[Johnhyde]

Does anyone have any other suggested manufacture for SBC for remote working (Workplace/WebRTC/JXXX phones) other than Avaya ones?

Thanks

John

 

[IamaSherpa]

AudioCodes

 

[Ekster]

We have customers on Audiocodes but be aware, if you use a J100 phone as a remote user they will consume a session licence for the entire time the phone base extension is logged in, this is due to the constant CCMS messages passing between the IPO and phone for button updates etc. The Audiocodes SBC sees the CCMS link as a session, but no other session is required when making actual calls on the J100 phone.

For example, if you have 10 session licences, 20 far end user licences and 8 J100 phones connected, you will only have 2 session licences free. If you then have 12 Workplace users logged in too (this uses all the fare End user Licences), then you can only have 2 simultaneous calls from the Workplace users before you run out off session licences.

Another thing to watch out for in this case, is the Workplace client login and re-registration will also use a session licence for a short period while the SIP messages are exchanged.
In the above example if you have 8 phones logged in, 2 Workplace users on calls then no other Workplace user will be able to log in until one of the 2 calls is ended.

Hope this makes sense ^_^



“Some humans would do anything to see if it was possible to do it.
If you put a large switch in some cave somewhere, with a sign on it saying 'End-of-the-World Switch. PLEASE DO NOT TOUCH'.
The paint wouldn't even have time to dry.”

Terry Pratchet

 

[jamie77]

Also, no other SBC than Avayas own will support SRTP on endpoints becuase of the way that Avaya have implemented it. Same as SRTP won't work on any 3rd party device (that I have ever found anyway!!)

TLS signalling does work OK though.

Audio Codes have implemented an NGINX proxy so you can push http(s) through it. Ribbon for example don't have this, so makes it more difficult when it comes to remote workers and phones.

Jamie Green

[bold]A[/bold]vaya [bold]R[/bold]egistered [bold]S[/bold]pecialist [bold]E[/bold]ngineer

 

[G van Hamburg]

Why would you want an other SBCE?

Freelance Certified Avaya Aura Engineer

 

[jamie77]

Why would you want an other SBCE?

Server spec, especially when hosting.

minimum spec Avaya Vs Audio Codes/Ribbon: 4 CPU, 8GB RAM, 160 Disk Vs 1 CPU, 2GB RAM, 15GB Disk. Massive difference in monthly cost.

Jamie Green

[bold]A[/bold]vaya [bold]R[/bold]egistered [bold]S[/bold]pecialist [bold]E[/bold]ngineer

 

[G van Hamburg]

Understood, that’s a valid argument!

Freelance Certified Avaya Aura Engineer

 

[Johnhyde]

Is an SBC really needed on server edition as this has user agent control?
Containerised didn't have an SBC and only used agent control.

IP500 a little more difficult, but wouldn't a good firewall along with a self-cert be suitable?

The problem we find is the cost, power user, SBC, install soon adds up and customers then move to a hosted system etc.

 

[BFG9K]

Techincally the IPOSE can do remote workers directly off the IPO interface with UA control, but it still opens up the IPO to attackers a bit more than I'm comfortable with. Can absolutely be done though,

 

[jamie77]

Is an SBC really needed on server edition as this has user agent control?
Containerised didn't have an SBC and only used agent control.

This is all true, it can be done just using NAT. A corporate firewall also isn't technically 'needed' and you could put your PCs straight into your ISP connection, but you never would!!!! Even on a small network.

An SBC is a choice and should be considered as an extra security layer, in a multy layer defence strategy.

While containers didn't have an SBC (becuase it will work without), I imagine there also wasn't stricktly other servers on the same LAN segment alongside the IP Office.

An SBC should form part of an overall network protection device, not just there to protect the IP Office.

I always say all this to a customer. If they turn down an SBC, thats fine. It is thier network to decide how much protection they want to deploy.

Same type of decision to "do I buy a Draytek or a Cisco ASA".

Jamie Green

[bold]A[/bold]vaya [bold]R[/bold]egistered [bold]S[/bold]pecialist [bold]E[/bold]ngineer

 

[nnaarrnn]

Where are you guys buying your Avaya SBCs? None of my usual distributors sell them, and none of the local MSPs/Avaya Partners use them (half of them haven't even heard of them).

I'm not finding anything online myself, except for in the UK.

 

[jamie77]

Westcon, and Scansource before they popped!!

Every Avaya disty should be able to sell you ASBCE licenses.

Westcon sell others too.

none of the local MSPs/Avaya Partners use them (half of them haven't even heard of them)

Bet they put draytek 2800s on thier 1GB ISP circuits too!!!

Jamie Green

[bold]A[/bold]vaya [bold]R[/bold]egistered [bold]S[/bold]pecialist [bold]E[/bold]ngineer

 

[nnaarrnn]

I can't even find the hardware for sale anywhere, except one single crappy picture on CDW.

I would hope a BP could get licenses.

Honestly, I've never seen a Draytek in real life and only have ever seen them mentioned on here. Always been Sophos/SonicWall/Fortinet/Cisco and sometimes Watchguard, with a pfsense box thrown in here and there.

 

[finest]

If we wanted to use an AudioCodes SBC with IPOSE, what licenses on the AudioCodes would we need for the following config:

25 SIP Trunks
20 In office J189
those users also have Avaya Workplace iOS -AND- Avaya Workplace Mac (and they're logged in to both simultaneously) - primarily use these two apps when they are working offsite.
5 Out of office J189

Thanks.

 

[jamie77]

.

 

[AvayaRed]

I have had to run Teams Direct Routing lately and i have to say, those AudioCodes SBCs are very light from a resource perspective and very powerful. I recommend those outside of ASBCE. The media packs are also very easy to use for analog vs bringing an entire G450 for the cards on the Aura side.