Solutions

 

Solutions Overview

Resources & tools:



“Our Data-Link units allow us time to fix the problem or shut equipment down before the threshold where damage is likely to occur. Not knowing of high temperatures in our equipment rooms is a big deal. To avoid the loss of telephone service, the system’s ability to notify us of alarms is crucial.”
Terry Schimon - Telecom Network Specialist for Pierce County


Remote Site Monitoring - Articles and Papers

 

 

<--See more Application Stories

 

IP Address Lists, Passwords and your PBX Security

 

Overview


Telecom managers can easily make changes to their PBXs by dialing in through a modem connection from a remote workstation. But what if a hacker wants to get into the PBX the same way? Modems have no built-in security features.


Asentria Data-Link data buffers connect directly to a PBX to collect data, recognize alarm conditions and provide remote access to the PBX via modem and TCP/IP network protocols. Unlike modems, Data-Link provides multiple layers of security before allowing users to gain access to the PBX. There are several methods of security on an Asentria Data-Link™ Pollable Remote Access Unit. The security methods are determined by user preferences and the methods of connection used. There are three ways of connecting to a Data-Link:

  • Network
  • Modem
  • Serial port

Network Access

One of the security features of Data-Link is its "IP restrictions" feature, which locks down the Data-Link so that it will only communicate with a user-defined list of IP addresses. If someone tries to access Data-Link from an IP address that is not on the list, Data-Link will completely ignore that traffic.


Users may also implement passwords for additional security. An "administrative" password is required to enter Data-Link. This password determines which level of authority a user has to administer the device. There is an additional password to pass through Data-Link to gain access to the PBX (or any other connected device). Each Data-Link serial port has its own password, so user X may have authority to access the PBX via serial port 6, but not any other devices.


Modem Access

Modem connections to a Data-Link device may require the same passwords for network connections. A password is required to enter Data-Link, as well as to pass through it. To establish a modem connection via PPP protocol, a separate password may also be used. Again, the passwords can be turned on or off according to an administrator’s preferences.


Customers often ask, "Is there a method by which hackers can connect via the modem and gain access to the network?" The answer is simply, "no." There are no software or hardware hooks within a Data-Link that would allow someone to pass through a Data-Link to a device on the network. This is sometimes referred to as "hop-off" prevention.


Serial Ports

If someone is trying to gain access to your PBX via serial port, they are already in the telecom closet. Data-Link may require a password for serial port access, but someone could bypass this feature by plugging directly into the PBX. In this case, Asentria recommends that customers implement a door contact closure, wired back into Data-Link, to receive notification when someone enters the telecom closet.


The Company

Asentria develops remote site monitoring and telemanagement solutions that enable providers of critical communications infrastructure to more efficiently and reliably run their networks. Asentria’s products help ensure quality of service and lower operational costs, while making it easier to provision, maintain and support remote equipment. Our strategic solutions fit both large and small communication networks and provide high-value, cost-effective and competitive differentiators to our customers.


Asentria helps administrators cost-effectively manage their call reporting data and remote site infrastructure, while extending confidence and security to ensure availability, integrity and performance. Asentria enables administrators to avoid failures from poor performing equipment that threaten end-user service expectations, while providing better control to predict the performance of remote infrastructure. These new levels of protection shield end-users from remote site equipment failure. Our service provider and enterprise customers trust their remote equipment sites to Asentria. The company is headquartered in Seattle, Washington.