Session Border ControllersApril 18, 202513 min read

How to Choose the Right SBC for Microsoft Teams Direct Routing: The Decision Framework

Chandra

Chandra

SwiftM365 | Building for the M365 community

Selecting an SBC for Microsoft Teams Direct Routing is not a simple product comparison. It's an architectural decision that affects your voice infrastructure for the next 5-7 years. Pick wrong and you're either over-provisioned and bleeding money, or under-provisioned and scrambling during peak hours.

After sizing and selecting SBCs for organizations ranging from 30-person law firms to 80,000-user global enterprises, I've developed a systematic framework that consistently delivers the right answer. This guide walks you through it.

Step 1: Understand the Three SBC Deployment Models

Before comparing vendors, you need to decide your deployment model. Each has distinct trade-offs that map directly to your organization's priorities.

Physical SBC (Hardware Appliance)

A physical SBC is a purpose-built hardware appliance that sits in your data center or server room. Think AudioCodes Mediant 800, Ribbon SBC 2000, or Oracle AP3950.

DimensionPhysical SBC
DeploymentOn-premises hardware in your rack
AdvantagesRobust hardware, physical control, highest performance, dedicated resources
DisadvantagesUpfront CAPEX, limited scalability without new hardware, longer deployment
Best ForOrganizations with existing DC infrastructure, predictable call volumes, strict security
When I recommend physical: When the organization has a well-staffed data center, needs PRI connectivity (physical T1/E1 ports), or operates in a regulated industry where physical control over voice infrastructure is mandated. Also when latency is critical — a local hardware SBC will always have lower latency than a cloud-based option.

Cloud SBC (SBC-as-a-Service)

A cloud SBC runs on the vendor's or a third-party cloud infrastructure. Examples include AudioCodes Live (cloud-hosted), Ribbon Connect, or managed SBC services from SIP trunk providers.

DimensionCloud SBC
DeploymentCloud-hosted infrastructure — vendor managed
AdvantagesNo hardware needed, OPEX model, rapid deployment, automatic updates
DisadvantagesInternet dependency, limited infrastructure control, potential security concerns
Best ForCost-conscious orgs, no hardware team, rapid deployment needs, distributed workforce
When I recommend cloud: When the organization has no data center presence, wants zero hardware management overhead, or needs to deploy Teams voice in under a week. Also excellent for organizations where 90%+ of workers are remote — putting an SBC in a cloud close to Microsoft's network edge gives better voice quality than routing through a corporate data center.

Virtual/SE Edition SBC (VM-based)

A virtual SBC runs as a virtual machine on your existing hypervisor infrastructure (Hyper-V, VMware, KVM) or in Azure/AWS. Examples include AudioCodes Mediant VE, Ribbon SBC SWe, Oracle VME.

DimensionVE/SE Edition SBC
DeploymentVirtual machine on existing or cloud infrastructure
AdvantagesFlexibility, scalability, cost-effective, leverages existing VM infrastructure
DisadvantagesRequires VM management expertise, shares resources with other VMs, variable performance
Best ForOrganizations with existing virtualization, hybrid cloud strategies, dynamic scaling needs
When I recommend virtual: When the organization already has a mature VMware or Hyper-V environment, wants to avoid dedicated hardware but needs more control than a cloud SBC offers, or plans to deploy in Azure/AWS alongside other workloads. This is the sweet spot for most mid-to-large enterprises today.

Step 2: Match Your PSTN Infrastructure

Your existing PSTN connectivity dictates which SBC models are even viable:

Existing PSTN InfrastructureRecommended SBC TypeWhy
PRI Lines (T1/E1/BRI)Physical SBC onlyNeed physical DSP cards for TDM-to-SIP conversion
SIP TrunksAny type (Physical, Cloud, or Virtual)Pure IP — no hardware dependency
Hybrid (PRI + SIP)Physical SBC + Cloud/VE for SIPPhysical for PRI conversion, virtual for SIP scalability
No existing PSTN (greenfield)Cloud or Virtual SBCNo legacy constraints — go cloud-first
Critical insight: If you have PRI lines and plan to keep them, your only option is a physical SBC with T1/E1 interfaces. No cloud or virtual SBC can terminate a PRI circuit. However, I strongly recommend planning your migration from PRI to SIP — PRI is a dying technology, and the cost savings from SIP trunking typically pay for the migration within 12 months.

Step 3: Choosing the Right SBC — The 10 Considerations Matrix

This is the core of the decision framework. Evaluate each consideration against the three deployment models:

Cost

FactorPhysical SBCCloud SBCVirtual SBC
Upfront costHigh ($5K-$80K hardware)None — OPEX onlyLow-moderate (license + VM resources)
Ongoing costMaintenance 15-20%/yearMonthly subscriptionLicense renewal + VM hosting
TCO (3-year) for 500 sessions$25K-$50K$20K-$40K$15K-$35K
TCO (3-year) for 5,000 sessions$60K-$120K$80K-$150K$40K-$80K
Insight from deployments: Cloud SBCs are cheapest at small scale but become the most expensive at large scale because per-session monthly fees compound. Virtual SBCs offer the best TCO at mid-to-large scale. Physical SBCs have the highest upfront cost but the lowest ongoing cost if you amortize the hardware over 5-7 years.

Scalability

FactorPhysical SBCCloud SBCVirtual SBC
Max sessionsFixed by hardware modelElastic — scales on demandScales with VM resources
Scaling speedWeeks (order + install new hardware)Minutes (provision more capacity)Hours (allocate more CPU/RAM)
Scale-downCannot — hardware is purchasedYes — reduce subscriptionYes — deallocate resources
Real-world scenario: A retail client with 2,000 normal sessions spiked to 8,000 during Black Friday. Their cloud SBC handled it seamlessly. Had they been on a physical Mediant 2600 (max 600 sessions), they would have been dead in the water.

Deployment Speed

FactorPhysical SBCCloud SBCVirtual SBC
Time to production2-6 weeks (procurement + install + config)1-3 days (provision + config)3-7 days (VM deploy + config)
Network readinessFirewall rules, rack space, power, cablingFirewall rules onlyVM infrastructure + firewall rules
Configuration complexityMedium-highLow (often wizard-based)Medium

Infrastructure Control

FactorPhysical SBCCloud SBCVirtual SBC
Control levelComplete — you own everythingLimited — vendor manages infrastructureHigh — you manage the VM
Firmware updatesYou decide when to updateVendor pushes updatesYou decide when to update
CustomizationFull access to all settingsLimited to vendor's portalFull access to all settings

Connectivity & Location Flexibility

FactorPhysical SBCCloud SBCVirtual SBC
Geographic flexibilityFixed to data center locationDeploy anywhere globallyDeploy on any hypervisor/cloud region
Multi-siteNeed hardware at each siteSingle instance serves allDeploy VMs per region
WFH/RemoteRoutes through corporate networkDirect cloud accessCan deploy edge instances

Resource Utilization

FactorPhysical SBCCloud SBCVirtual SBC
ResourcesDedicated hardware — always onShared cloud — pay for what you useShared hypervisor — can over-provision
Idle costFull cost even at 5% utilizationScale to zero possibleVM running cost even when idle
Peak handlingLimited by hardwareBurst capabilityLimited by allocated resources

Security

FactorPhysical SBCCloud SBCVirtual SBC
Physical securityYour data center controlsCloud provider's data centerYour data center or cloud provider
Network isolationComplete — on your networkShared infrastructureVLAN/subnet isolation
ComplianceEasiest for strict compliance (HIPAA, PCI)Depends on cloud provider certsDepends on hosting environment
Encryption controlFull TLS/SRTP configurationVendor-managedFull TLS/SRTP configuration

Maintenance & Management

FactorPhysical SBCCloud SBCVirtual SBC
Hardware maintenanceYour responsibilityVendor's responsibilityHypervisor team's responsibility
Firmware updatesManual — schedule maintenance windowAutomatic — vendor handlesManual — schedule maintenance window
MonitoringYour SNMP/monitoring toolsVendor dashboardYour monitoring tools
SupportVendor support contractIncluded in subscriptionVendor support contract

High Availability

FactorPhysical SBCCloud SBCVirtual SBC
HA modelActive/Standby pair (2x hardware cost)Built-in (vendor-managed)Active/Standby VMs
Failover timeSub-secondVendor-dependent (typically < 5s)Sub-second to seconds
Geographic HANeed hardware in 2 locationsMulti-region by defaultDeploy VMs in 2 locations
Cost of HADouble the hardware investmentOften included in subscriptionDouble the VM resources

Analytics & Reporting

FactorPhysical SBCCloud SBCVirtual SBC
CDR generationLocal CDR storage + exportCloud CDR dashboardLocal CDR storage + export
Real-time monitoringSNMP + vendor dashboardVendor portalSNMP + vendor dashboard
Call quality metricsSBC-side metrics + CQDVendor analyticsSBC-side metrics + CQD
IntegrationSCOM, Grafana, customVendor APISCOM, Grafana, custom

Step 4: The 10 Key Questions Checklist

Before signing any purchase order, answer these questions:

  • How many users will be registered? — This determines your session count (typically 10-15% of users need concurrent sessions during peak)
  • What is the concurrent call capacity needed? — Not just average — what's your peak? Add 30% headroom for growth
  • Is the SBC compatible with both PRI and SIP? — If you have legacy PRI, you need T1/E1 ports. If SIP-only, you have more options
  • Is it certified for Microsoft Teams Direct Routing? — Non-negotiable. Only use Microsoft-certified SBCs
  • Does it provide adequate security? — TLS 1.2+, SRTP, intrusion detection, DDoS protection, certificate management
  • Does it offer advanced routing options? — Least-cost routing, time-based routing, failover routing, manipulation rules
  • Can it provide call quality analytics? — CDR generation, real-time dashboards, integration with Microsoft CQD
  • Does it support high availability? — Active/Standby, geographic redundancy, sub-second failover
  • What is the total cost of ownership? — Include hardware, licensing, maintenance, support, power, rack space, admin time
  • Have you tested it in a lab/trial? — Every vendor offers trial licenses. Test before you buy. Period.
  • My Decision Flowchart

    Based on hundreds of deployments, here's how I guide clients:

    Start: Do you have PRI lines to keep?

  • Yes → Physical SBC (need T1/E1 ports) → Plan SIP migration roadmap
  • No → Continue
  • Do you have a data center or VMware/Hyper-V environment?

  • Yes → Virtual SBC (best TCO, most flexibility)
  • No → Continue
  • Do you need voice deployed in under 1 week?

  • Yes → Cloud SBC (fastest time to value)
  • No → Virtual SBC in Azure/AWS (your cloud, your control)
  • Are you a service provider or need 10,000+ sessions?

  • Yes → Ribbon SBC 5400/7000 or Oracle (carrier-grade scale)
  • No → AudioCodes VE or Ribbon SWe Lite (best for enterprise)
  • Is this a regulated industry (healthcare, finance, government)?

  • Yes → Physical or Virtual SBC in your controlled environment
  • No → Any deployment model works
  • Real-World Sizing Examples

    Example 1: 200-User Law Firm (Single Office)

  • Concurrent sessions needed: ~30 (15% peak)
  • PSTN: SIP trunk from local provider
  • Recommendation: AudioCodes Mediant VE on existing server, or Cloud SBC
  • Why: Simple, low session count, no PRI, minimal IT staff
  • Estimated cost: $3K-$5K/year
  • Example 2: 5,000-User Enterprise (5 Offices, 2 Countries)

  • Concurrent sessions needed: ~750 (15% peak)
  • PSTN: SIP trunks in each country + PRI in one legacy office
  • Recommendation: Physical SBC for PRI office + Virtual SBCs in Azure for SIP
  • Why: Hybrid approach — physical where needed, virtual for scale
  • Estimated cost: $15K-$25K/year
  • Example 3: 50,000-User Global Enterprise (20 Countries)

  • Concurrent sessions needed: ~7,500 (15% peak)
  • PSTN: SIP trunks globally, PRI in 3 countries
  • Recommendation: Ribbon SBC SWe cluster (primary) + Physical SBCs for PRI sites + AudioCodes SBA for branch survivability
  • Why: Carrier-grade virtual for scale, physical where PRI exists, SBA for critical sites
  • Estimated cost: $80K-$150K/year
  • Final Thoughts

    The SBC market has matured enormously. Five years ago, physical appliances were the only serious option. Today, virtual and cloud SBCs handle enterprise-grade workloads reliably. The right choice depends on your specific combination of scale, PSTN infrastructure, security requirements, and operational maturity.

    Don't let a vendor push you into their most expensive model when a virtual edition would serve you better. And don't cheap out on a cloud SBC when your call volumes justify dedicated infrastructure.

    Once you've selected your SBC, SwiftM365 can generate the complete Teams voice configuration — dial plans for 203 countries, voice routing policies, PSTN usages, and voice routes — saving you days of manual configuration work.

    ---

    Need help sizing an SBC or planning your Direct Routing architecture? Reach out via our feedback page or contact me directly at +91 9011070193.

    Chandra

    Written by Chandra

    Passionate about simplifying Microsoft 365 administration for the community. Building free tools so admins can focus on what matters.

    0
    0

    Comments (0)

    Sign in to join the conversation

    No comments yet. Be the first to share your thoughts!

    Subscribe to our blog

    Get the latest posts delivered to your inbox