Obi 110 + Security Panel. Is security being compromised?

(1/2) > >>

salimashah:
I have a security system and I am incorporating OBi-110.

Earlier configuration

Telco  <--> Security_panel <--> Home_phone(s)
                 Internet_access

The connection between Security_Panel and Home_phone is considered 'secure connection' and any access through the telco side is password protected. The internet connection is also secured with password.


New Setup

Telco <--> Security_Panel  <--> Obi110 <--> home_phone(s)
                 Internet_access       Internet_access

Question:
With Obi on the unsecured port of the security panel is my security compromised?

The answer will be NO, if the internet port of obi can NOT flow to the Security_Panel.  Internet --> Obi  --XXBreakXX -- Security_panel

The answer will be Yes, if we can form this path
 internet -> Obi -> security_panel.

The answer will be Maybe if we can
Internet -> Obi --XXBlockXX -> Security Panel
where block can be password or setup option.

Salim

SteveInWA:
One issue is remotely logging into the OBiTALK portal to access your OBi's settings.  Just doing that doesn't give anyone access to your home IP network or to the security panel directly.  Either disable OBiTALK portal access entirely, or assign a very strong password (at least 14 characters, using a combination of upper and lower case letters, numerals and punctuation symbols).  Even if someone were to guess your password, they'd also have to be an OBi expert, which I doubt any criminals would be, to further manipulate your settings.

In theory, someone would need to know how to use the OBi auto-attendant, and/or change your OBi's settings to re-route telephone calls in via the auto-attendant (which you can also disable), and then know that you have a security panel, and know how to access it.  Unless you are a character in a Mission Impossible or James Bond movie, that is extremely unlikely.

If you are that concerned about security, consider that the vast number of intrusions are physically via unlocked or easy-to-force open doors or windows, or forced entry smash and grab.  Focusing on physical security is more important than any alarm system.  It would be easier to just cut your internet and phone lines than to hack your OBi.  If you are still not comfortable, then get a dedicated connection for your security system...POTS line, or cellular.

salimashah:
Thank you for a prompt reply.

Is there a finer switch that allows obi_attendant to disallow the dialing out through the telco port?

or can I set a rule that would only allow "#" to communicate to the security panel only through home_phone port.

Your view point on security is well understood. I dont want to simply put a lock on the door and leave the keys under the mat.

Salim

azrobert:
The Auto Attendant has its own DigitMap and outbound route, so you can restrict what it can do. If you don't use the AA it can disabled.

MurrayB:
Going to cellular monitoring communication eliminates any possible Obi issues or the cutting or tampering with your telco line.

Navigation

[0] Message Index

[#] Next page