Yes, toll-free traffic can originate and terminate. Advanced toll-free features, such as Enhanced Call Routing, are currently in development.
Authentication and Validation are the primary security features used by the phones. Authentication validates the usernames and passwords to ensure only trusted users are on the network. For IP Phones, authentication is performed by SIP digest user authentication. For a PBX with a router/gateway, authentication is performed via IP Sec.