Support Services OneSSONE Platform
Guide · 6 min read

What is an SBC, and how to operate one well

A session border controller sits at the edge of a voice network. It decides who can connect, where each call goes and how it is protected. Running several of them is where the daily work lies.

What an SBC does

  • Security. It only lets in traffic from known sources, limits rates and hides the network's internal layout.
  • Interoperability. It translates between the different ways carriers and phone systems use SIP.
  • Routing. It chooses the next hop for each call using routes, prefixes and policies.
  • Media handling. It anchors media, helps calls through NAT and can change codecs.
  • Visibility. It writes the CDRs and signalling logs you need to bill and to investigate.

Why operations get hard

Routing tables drift. Endpoints go stale. A customer says calls are failing and no one knows which of several boxes from different vendors dropped them. The time a senior engineer spends on those questions is the real cost.

Common SIP responses and what they usually mean

ResponseUsual meaningFirst thing to check
403 ForbiddenThe source is not allowedThe access list or the trunk authentication
404 Not FoundNo route for that numberThe routing table and number normalisation
408 Request TimeoutNo reply from the next hopNetwork path, firewall and whether the carrier is up
480 Temporarily UnavailableThe destination cannot be reached right nowThe endpoint's registration or the carrier's status
486 Busy HereThe called party is busyNormal, unless the rate is unexpected
488 Not Acceptable HereNo common codec or media optionThe codec lists on both sides
503 Service UnavailableOverloaded or out of serviceCapacity limits, calls-per-second caps and the next hop's health

A daily checklist

  1. Look at the endpoint list for anything that has not been seen recently.
  2. Compare the routing table with your policy and look for drift or unexpected changes.
  3. Check answer rate and duration by trunk against yesterday and last week.
  4. Look at the failures by cause code, and trace one example of each new pattern.
  5. Keep a short change log, so a routing change can be tied to the problem that followed.

Tracing a failed call

Follow the call hop by hop. Find the last device that saw the request, and the first that did not. The cause code and the headers at that point usually show whether it was a policy block, a missing route, a timeout or a media problem.

In the platform

How SSONE supports SBC operations

SBC Operations gives one workflow across SBC vendors, including Genband, Ribbon, Oracle ACME and SSONE. It offers a unified endpoint inventory with live status, number-to-route and endpoint-to-carrier lookup, a visual route designer with versioned changes and bulk apply, live SIP trace with a hop-by-hop hunt and failure root cause, ANI lists at scale, and diagnostic clusters that run recovery jobs for known faults. An AI assistant answers questions with the call context and can flag routing tables that have drifted from policy.

Questions people ask

Is an SBC the same as a firewall?
No. A firewall filters network traffic. An SBC understands SIP and media, so it can authenticate a call, apply voice rules, translate signalling and route the call.
Why do calls fail with 503?
Usually the next hop is overloaded or out of service, or a calls-per-second or concurrent-call limit was reached. Check capacity and the health of the destination.
Do I need an SBC for a small voice network?
If you connect to carriers or to the public internet, you need something doing its job. The size of the box differs, but the security and routing duties do not.
Keep reading

More guides

All guides

See it on your own traffic

Book a short walkthrough and bring a real scenario. We will show what the platform does with it.

Book a demo