AR-GEActiveR&D Product
Rosa SIP Firewall
Rosa SIP Firewall protects your corporate VoIP and IP PBX infrastructure against SIP protocol-based attacks — blocking toll fraud attempts, SIP flood attacks and unauthorized call traffic to prevent serious financial losses.
15+Features
12+Tech Details
7/24Support
MartaDeveloper
Developed by Marta Teknoloji
Mersin Technopark — R&D
Features & Capabilities
SIP protocol Deep Packet Inspection (DPI)-based firewall
Toll fraud call pattern analysis and blocking
Rate limiting against SIP flood and DDoS attacks
Real-time SIP traffic analysis and session table monitoring
Automatic and manual IP blacklist management
Geo-IP blocking (country/region-based restriction)
Instant alerts and detailed event reporting
Transparent proxy integration with FreeSwitch, Yeastar and Cisco CUCM
Concurrent call count limiting policies
SIEM and syslog integration
Active-passive high availability (HA) architecture
REGISTER flood attack and credential abuse detection
Technical Details & Architecture
1
SIP (RFC 3261) protocol Deep Packet Inspection (DPI): header and content validation of INVITE, REGISTER, OPTIONS, SUBSCRIBE and NOTIFY messages; detection and rejection of non-RFC-compliant or malformed SIP packets2
Rate limiting: maximum SIP messages per second threshold per source IP; independent counters for UDP, TCP and TLS transport layers; smooth rate control with leaky-bucket algorithm; automatic temporary (5 min) and permanent blacklisting on breach3
Multi-dimensional call pattern analysis for toll fraud detection: abnormal international destinations, high-volume calls outside working hours, premium rate number (0900, 0800, international premium) concentration and per-user concurrent call anomaly4
Integration with FreeSwitch, Asterisk, Yeastar S-series and Cisco CUCM in transparent B2BUA proxy mode; no changes to existing PBX IP addresses or SIP trunk configuration required5
Geo-IP blocking: country and AS-based SIP traffic restriction using MaxMind GeoIP2 database; restrictions on REGISTER and INVITE from foreign sources; country-based whitelist management6
Real-time SIP session table: active call and REGISTER count, per-user concurrent call limit, session duration anomaly and immediate blocking action alarm7
SIEM integration via syslog (RFC 5424) and SNMP traps; all blocking and alarm events can be forwarded to Splunk, QRadar and Elastic Stack in structured JSON/CEF format8
Active-passive high availability (HA): VRRP-based virtual IP management; passive node takeover in <1 second when primary node goes down; instant synchronisation of configuration and blacklist database between both nodesInterested in this product?
Schedule a live demo or request a technical brief from our team.
SIP firewallVoIP güvenlikSIP güvenliktoll fraudIP PBX güvenlik
Other Products
Active
LogHane
Cloud-based log retention for Law 5651: FortiGate logs are sealed hourly in the cloud without a server, timestamped and kept in a delete-proof archive.
View
Active
Kimliq SSO
Enterprise Single Sign-On (SSO) identity authentication software.
View
Active
DNS / Web Filtering
DNS filtering software that blocks harmful content and inappropriate websites at the network layer.
View
Active
Lucia Network Analysis
Domestic network analysis software for real-time monitoring and analysis of corporate network traffic.
View