Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 423
  • Last Modified:

VoIP and data traffic merging

I've been told by one of our guys in IT that our VoIP network is separated from the data network using a VLAN.  From what I understand for security these two networks should never interact with each other (unless through firewalls etc perhaps?).

Last week one of the guys who administrates the VoIP setup told me that certain services like DHCP are shared services so they are used by the data network and the VoIP network.  Is this acceptable or can this pose a significant security risk?
0
jdc1944
Asked:
jdc1944
2 Solutions
 
JRSCGICommented:
If properly implemented, a VLAN is a perfectly acceptable way to securely separate voice an data traffic.  Things like DHCP must be shared, but pose no additional security risk.  Both the VoIP phones and the computers on the network need to get an IP address via DHCP.  You do not need to separate them with a firewall.

The VoIP and data vendors really do have this figured out now - after about 14 years of learning the best ways to accomplish it.
0
 
agonza07Commented:
Depends what you think a significant security risk is.

I don't have any firewalls between my voice and data network, I pretty much only split them for Quality of Service and to make sure my voice vlan is not affected by any data.

Sure, the IP phones are just any other endpoint and should be secured, but the same thing can be said about printers and any other network devices. Do you have your printers behind a firewall from the rest of your network?

Most likely, and as I've seen it 100% of the time, your only firewall is the one between the internet and your internal network.
0

Featured Post

Keep up with what's happening at Experts Exchange!

Sign up to receive Decoded, a new monthly digest with product updates, feature release info, continuing education opportunities, and more.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now