CheckPhone

ETSS

Software
W
O
R
S
T

SecureSoftphone

A
T
I

IP packet
Applications

S E C U R E S O F T P H O N E

D R I V E R

SIP detection and virtual interface selection

VoIP
packet

O
N

Non VoIP
packet

Logical packet separation

( VL AN tagging)

VoIP Ethernet
virtual interface

VoIP
tagged
packet

Data
tagged
packet

Data Ethernet
virtual interface

Workstation's physical
Ethernet interface

Switch's port

L
A

VoIP
tagged
packet

Switch 802.1Q

Data
tagged
packet

Physical packet separation

VoIP
VLAN

Data
VLAN

SecureSoftphone secures voice networks that use softphones. SecureSoftphone separates voice and data
flows directly on workstations using softphones.

Softphone Security

Key Benefits
Application type: network driver specialized in separating voice flows and data
flows with protocolar filters and VLAN tagging.

Voice Network
Protection

Supported operating system: MS Windows XP Professionnal.

Supported protocol: SIP.
Supported technologies: VLAN-tagging, VLAN priority.

Voice & Data

flows

SIP Protocol

Software filtering

VLAN Tagging

Description
SecureSoftphone is an Ethernet driver that detects SIP packets at procotol level.
On one hand, SIP packets are tagged with the voice VLAN ID and are filtered so
that they cant access the data network, and on the other hand other data packets
(non-VoIP packets) are tagged with the data VLAN ID and are filtered so that they
cant access the voice network.
SecureSoftphone creates virtual Ethernet interfaces: voice and data. These
interfaces allow already VLAN-tagged packets to pass through the physical Ethernet
inferface of the workstation using a softphone.
SecureSoftphone will only allow SIP packets to pass through the voice virtual
Ethernet interface. Tagged packets are sent by the network switch (supporting
802.1q standard) to their very own network (voice or data). Voice and data
packets are separated at workstation level, using a single secured physical Ethernet
interface.

Software
W

IP packet

O
R

Applications

S
T
A
T

S E C U R E S O F T P H O N E

D R I V E R

SIP detection and virtual interface selection

VoIP
packet

I
O
N

Non VoIP
packet

Logical packet separation

(VLAN tagging)

VoIP Ethernet
virtual interface

VoIP
tagged
packet

Data
tagged
packet

Data Ethernet
virtual interface

Workstation's physical
Ethernet interface

Switch's port

L
A

VoIP
tagged
packet

Data
tagged
packet

Switch 802.1Q
Physical packet separation

Data
VLAN

VoIP
VLAN

CheckPhone Technologies
1 Bis rue Bartholdi
92100 Boulogne-Billancourt

Fax : +33(0)1 55 60 56 31
Tel : +33(0)1 55 60 56 30
www.checkphone.com