Videoconferencing

In this section we list security-related issues to consider when deploying an H.323 service, in particular when joining the JANET H.323 service, using a studio system on the local campus. Using Janet Videoconferencing In the context of Janet Videoconferencing, that service will be responsible for:

It is theoretically possible that in an H.323 conference an ‘outsider’ could snoop the session, recording or relaying an apparently private conference (by inspecting data in transit) or that a snooper is able to silently join a conference (by connecting to an MCU). For an attacker, gathering data ‘on the wire’ is safer as it reduces the chance of detection and being later traced.

The acquisition, set up and deployment of an H.323 videoconferencing studio is outside of the scope of this guide; such information is available from VTAS. However, there are security considerations to be made in the deployment. In the simplest case, the site will be deploying a single, fixed-location studio-based H.323 system, to be used by university or college members who wish to participate in videoconferences with people at other JANET-connected sites. Topology considerations The main site considerations include:

When considering the security of an H.323 conferencing system, it is important to place concerns over that security into perspective.