The Avaya IP Office platform is the ultimate in converged voice and data technology. IP Office brings a combination of voice and data applications formerly reserved for only the largest corporations. Cutting edge customer service with easy to use tools is now available to the smallest of businesses.
Firewall Profile Form Overview
The IP Office can act as a firewall, allowing only specific types of data traffic to start a session across the firewall and controlling in which direction such sessions can be started.
IP Office firewall profiles can be applied in the following areas of IP Office operation.
System
A firewall profile can be selected to be applied to traffic between LAN1 and LAN2 on IP Office Small Office Edition and IP412 systems.
User
Users can be used as the destination of incoming RAS calls. For those users a firewall profile can be selected on the user's Dial In tab.
Service
Services are used as the destination for IP routes connection to off-switch data services such as the internet. A Firewall Profile can be selected for use with a service.
Logical LAN
Where a logical LAN is created for use as an IP Route destination, a Firewall Profile can be selected for use with the logical LAN.
If Network Address Translation (NAT) is used with the firewall (which it typically is), then you must also configure a Primary Incoming Translation Address (see IP tab of the Service configuration form) if you wish sessions to be started into your site (typically for SMTP) from the Internet.
Firewall | Standard
By default, any protocol not listed in the standard firewall list is dropped unless a custom firewall entry is configured for that protocol.
Settings
Action
Operator Rights View
Mergeable
System
Level
Administrator
Manager
Operator
SOE
2.1
View
Pre-3.2
3.2
IP403
3.0DT
Edit
IP406 V1
3.0
New
IP406 V2
3.1
Delete
IP412
3.2
Name:Range = Up to 31 characters
Enter the name to identify this profile.
Protocol Control
For each of the listed protocols, the options Drop, In, Out and Both Directions can be selected. Once a session is started, return traffic for that session is also able to cross the firewall.
Drop
All matching traffic is dropped.
In
Incoming traffic can start a session.
Out
Outgoing traffic can start a session.
Both Directions
Both incoming and outgoing traffic can start sessions.
Protocol
Default
Description
TELNET
Out
Remote terminal login.
FTP
Out
File Transfer Protocol.
SMTP
Out
Simple Mail Transfer Protocol.
TIME
Out
Time update protocol.
DNS
Out
Domain Name System.
GOPHER
Drop
Internet menu system.
FINGER
Drop
Remote user information protocol.
RSVP
Drop
Resource Reservation Protocol.
HTTP
Out
Hypertext Transfer Protocol.
POP3
Out
Post Office Protocol.
NNTP
Out
Network News Transfer Protocol.
SNMP
Drop
Simple Network Management Protocol.
IRC
Out
Internet Relay Chat.
PPTP
Drop
Point to Point Tunneling Protocol.
IGMP
Drop
Internet Group Membership Protocol.
H323
Drop
This option is not supported and so is grayed out.
User
