Secure SIP boundary
Topology hiding, SIP normalization, call admission control, TLS, SRTP and rule-based routing protect the enterprise-to-carrier edge.
A Microsoft Teams-certified SBC portfolio spanning virtual, compact and modular appliance deployments, with DGW security, SIP normalization, survivability and rule-based routing.

The Sentinel portfolio provides the same DGW-based secure SIP control plane across virtual, compact and modular hardware platforms. Select the platform by session capacity, deployment model and required telephony interfaces.
Topology hiding, SIP normalization, call admission control, TLS, SRTP and rule-based routing protect the enterprise-to-carrier edge.
Deploy virtually with Sentinel CS, at the compact edge with Sentinel Mini, or on appliance platforms with Sentinel 100 and Sentinel 400.
SIP failover, registration caching, survivability, monitoring and diagnostic tools support controlled voice operations.
Download the PDF files directly. Use the documentation portal for configuration guides, installation procedures and release-specific information.
A starting point for your project. Review the model data sheet before ordering.

A compact SBC for a branch or a dedicated SIP edge.

A rack appliance when SIP security and legacy connectivity must share one platform.

A modular voice edge for sites with mixed telephony interfaces.

An SBC deployed on your virtual infrastructure.
A product decision is only correct when both sides of the interface, the security boundary and the operating model are considered together.
Local phones, a local IP PBX, Mediatrix gateways and Sentinel can exchange SIP calls entirely inside the organization. The voice path can remain on a private LAN, VLAN, campus network or isolated operational network.
An external connection is used only when calls must reach public numbers, remote sites or hosted services. If the required call path is entirely local, the system can stay on the private network.
Existing call control and dial plans remain on the trusted side.
Approved calls reach phones, agents and business applications.
Analog phones, fax, modems or PBXs can enter the SIP architecture without bypassing policy.
A common DGW security and routing model across appliance and virtual deployments.
Cloud users connect through a certified Direct Routing boundary.
Public numbers and inbound or outbound calling arrive from the service provider.
Conceptual architecture — final topology, capacity and interface configuration require validation.
Start with scale and deployment model, then validate interfaces, high availability, carrier interoperability and lifecycle requirements.
Published maximums are selection guides, not a substitute for sizing against codec, transcoding, recording, redundancy and traffic assumptions.| Selection factor | Sentinel Mini | Sentinel 100 | Sentinel 400 | Sentinel CS |
|---|---|---|---|---|
| Deployment | Compact appliance | 1U appliance | Modular 1U appliance | Virtual / cloud |
| Concurrent sessions | Up to 400 | Up to 120 | Up to 2,000 | Up to 20,000 |
| Registered users | Up to 1,200 | Up to 500 | Up to 6,000 | Up to 30,000 |
| Legacy voice | External gateway | Optional interfaces | Modular PRI / BRI / FXS / FXO | External gateway |
| Typical fit | Branches and focused edges | SMB and hybrid sites | Large hybrid voice environments | Centralized and cloud voice |
Share the product, deployment and target outcome. M5 will identify the right technical and commercial path.