...with no trust at all and its user-to-user operation make security far from trivial." A first line of defense for IPvoice networks is a Session Initiation Protocol (SIP)-enabled firewall working in conjunction with existing firewalls...
http://www.computerweekly.com/Articles/2007/07/02/225261/SIP-fundamentals.htm