TechVisionAir-Gapped Phone Systems: Requirements, Design And What To Ask
What an air-gapped phone system is, who needs one, and the design rules for licensing, updates, phones, high availability and outside calls on a closed network.
Some networks must never touch the internet: classified government systems, defence sites, prisons, critical infrastructure control rooms. They still need telephones. An air-gapped phone system is one designed to run entirely inside such a network, with nothing that calls home, nothing that downloads, and nothing that stops working when there is no outside connection.
Many modern phone systems are cloud services or depend on the cloud for licensing, updates or app notifications, so they cannot be used this way. The requirements below are what separates a system that is merely installed on site from one that can genuinely run air-gapped.
Licensing Must Work Offline
If a system checks a licence server on the internet, even occasionally, it will eventually stop or nag on a closed network. Licensing has to be validated locally, for the life of the installation.
Installation And Updates On Physical Media
Software should install from media brought on site, and updates should arrive the same way, so your team can inspect and approve them before installation. Disk encryption on the appliance protects the system if hardware leaves the site.
Phones And Gateways Provisioned Locally
Desk phones and gateways normally fetch their settings from a vendor cloud. On a closed network they must be discovered and configured by the system itself, over the local network.
High Availability On Site
Without a cloud to fail over to, resilience has to be built on site: an active and a standby server, with failover that is drilled, not assumed.
Monitoring Without The Cloud
Alerts and dashboards must run on the closed network too, notifying the people on site rather than a vendor's cloud service.
Outside Calling Is A Decision, Not A Default
Some closed networks need no outside calls at all. Others need a controlled path to the public phone network through trunks or gateways that the organisation owns and monitors. The system should support both without weakening the closed design.
Questions To Ask A Vendor
- Does anything in the system, including licensing, apps or phones, ever try to reach the internet?
- How are updates delivered, and can we inspect them before installing?
- Is the appliance disk encrypted?
- How are desk phones provisioned without a vendor cloud?
- What does failover look like, and when was it last tested?
- Can we run with no outside calling, and add a controlled trunk later?
On-Prem & Air-Gapped UC From TechVision365
Our On-Prem & Air-Gapped UC is a complete unified communications system installed on your servers, from encrypted offline media, with offline licensing and updates, local provisioning of phones and gateways, active and standby pairs, and alerts that stay on site.