VoIP PBX Carroll Communications is an authorized Avaya business partner
  IP Office Platform
  Carroll Communications Home
  Avaya IP Office 500
  IP Office 406 r2
  IP Office 412
  Avaya IP Office Telephones
  Avaya Voice Mail Pro
  Phone Manager Pro
  IP Office Manager
  IP Office Soft Console
  Avaya Conferencing Center
  Compact Business Center
  Short Codes
  Avaya Data Networking
  IP Office Expansion Modules
  IP Office Licenses
  Centrales Telefonicas
  Voice over IP Phone Systems
  IP Office 403
  Phone System Quote

VoIP PBX Phone Systems

Panasonic Headsets
 
IP Office Tek Tips 1-100
IP Office Tek Tips 101-200
 
IP Office telephone systems
about us | phone equipment | voip solutions | avaya partner acs telephone systems | site map | contact us

Avaya IP Office

The Avaya IP Office platform is the ultimate in converged voice and data technology. IP Office brings a combination of voice and data applications formerly reserved for only the largest corporations. Cutting edge customer service with easy to use tools is now available to the smallest of businesses.

Avaya IP Office Technical Tips
 
732-280-3200
   

Global IP Office Technical Tip
113:Windows 2003 SP1 Security Modifications for Avaya IP Office
Voicemail Pro and Avaya IP Office Manager
*Release Date: 4 November 2005

This document outlines changes to the configuration of Windows 2003 Server SP1 that are required to run IP Office Manager and IP Office VoiceMail Pro. Microsoft has introduced a set of security technologies in Server 2003 Service Pack 1 that improves
the ability of computers running Windows Server 2003 to withstand attacks from viruses and worms. Changes have been made to DCOM, Windows Firewall and various integrated components. Microsoft has also introduced a new tool to help manage security policy called the Security Configuration Wizard (SCW).

Microsoft has published a white paper that reviews Server 2003 SP1 functionality changes.

The security policy enforced by Service Pack 1 requires modifications in order for IP Office applications to work properly and maintain functionality. The following procedure documents the modifications needed for IP Office Voicemail Pro and IP Office Manager
to function correctly.



Security Configuration Wizard Installation

Click Settings/Control panel/Add or remove programs, then select add/remove windows components.

Scroll down the list to select and install the “Security Configuration Wizard”.

Once installed, to launch the SCW, click Start, then Run, and type scw (scw.exe) or select Control Panel/Administrative tools/Security Configuration Wizard.

At the welcome screen, click ‘Next’ to start the Security Configuration Wizard.

Select “Create a new security policy” then click ‘Next’ to proceed.

Leave the hostname if it is populated correctly, then click Next (there will be a short pause), when complete click Next. If the hostname is incorrect, click ‘Browse’ to search for the correct Server.

The Select Server Roles defaults should be correct, these should be reviewed and corrected if necessary before selecting ‘Next’ to proceed. In the example above, SQL Server 2000 has been installed in order to run Compact Contact Center.

The default ‘Installed Features’ should be correct for the ‘Select Client Features’ page, but should be reviewed and amended if necessary before selecting ‘Next’ to proceed.

The default ‘Installed options’ should be accepted by selecting ‘Next’.

IMPORTANT – Confirm that all IP Office Applications have been checked before selecting ‘Next’ to continue.

MPORTANT – ‘Do not change the startup mode of the service’ MUST be selected before clicking ‘Next’ to proceed.

Review the changes made in the steps above, going back if necessary to correct the changes, before selecting ‘Next’ to proceed.

Do not select ‘Skip this section’, then click ‘Next’ to proceed.

Review the list provided, and confirm that all IP Office applications installed are selected, before clicking ‘Next’ to continue.

Notice ports used by IP Office Applications:-

VoiceMail Pro Database Service –


VoiceMail Pro Service –


NOTE – the IP Office Manager application will be added to firewall exclusion list in a later step.

Take time to review the selected ports, then select ‘Next’ to continue.

Do not select ‘Skip this section’, then click ‘Next’ to proceed.

Leave the selections as default to ensure multiple Operating System compatibility then select ‘Next’ to continue.

Check all authentication methods for maximum compatibility, then select ‘Next’ to continue.

Review the changes you have made, then select ‘Next’ to continue.

Do not select ‘Skip this section’, then click ‘Next’ to proceed.

Select an audit policy according to organizational preferences, then select ‘Next’ to continue.

Review and confirm the selected audit policy by selecting ‘Next’
Do not select ‘Skip this section’, then click ‘Next’ to proceed.


Select the options for supported Web service extensions based on current and future needs, then select ‘Next’ to continue


None of these directories are required by IP Office applications and can be left unselected unless otherwise required by alternate applications. Select ‘Next’ to continue.


This can be left un-checked to allow anonymous access if desired, or selected to increase security (recommended) if the web server is to be made available for external access. Select ‘Next’ to continue.



Review and verify the IIS settings then select ‘Next’ to continue.

Select ‘Next’ to save the security policy that has been created by the Wizard.



Enter a filename (the PCs hostname) to replace ‘hostname’, then select ‘Next’ to continue.


Select ‘OK’ to continue at the Security Configuration Wizard warning message.


Select ‘Apply now’, then ‘Next’ to make the policy active.



The Wizard will now apply policy. This may take a few minutes. Select ‘Next’ when complete.



Select ‘Finish’ to exit the Security Configuration Wizard. A reboot is not prompted for at this point, but is required for some aspects of the security policy to be implemented.
If the policy needs reviewing or amending, the Security Configuration Wizard can be run again, and the option to edit a previously saved policy selected.

After rebooting the server, run the IP Office manager application.

This warning will display:


Select Unblock to allow the IP Office Manager application to function correctly, then Login as normal:


The windows firewall has now been updated with an “exception” for the IP Office Manager application.

To confirm this, open ‘My Network Places’, select the ‘Local Area Connection’, then right click on this connection to display the properties dialog.
Select the advanced tab, then ‘Settings’ to display the Windows Firewall settings:



Notice that the IP Office applications are present in the list –“manager” is the IP Office Manager application.

An exception is also required for the IP Office Upgrade Wizard.

To add this, select the ‘Exceptions’ tab, then ‘Add Program’.

Browse to C:\Program Files\Avaya\IP Office\Manager\

Then select UpgradeWiz.exe

Select ‘OK’ to confirm the selection.


Select ‘OK’ to add the exception, then verify that the exception has been added by scrolling down to locate UpgradeWiz.exe.



Select ‘OK’ then ‘OK’ again to exit the network configuration applet.

Windows 2003 has now been set up allow IP Office Applications to work.

Call Status security changes
A Date Execution Prevention (DEP) exclusion needs to be entered for call status to work after Windows 2003 SP1 has been installed.

To do this, navigate to My computer, then select Properties, then Advanced, then Performance, settings, Data Execution Prevention.
Select the radio button for “Turn on DEP for all programs and services except those I select”.



Select add, then browse to “callstatus.exe” which by default is found at:

"C:\Program Files\Avaya\IP Office\CallStatus\

Double click callstatus.exe and you will see it is added to the “exception list”. Leave it checked, then select OK, then OK again to confirm.
The Callstatus application should now work as expected.


Avaya IP Office

1-800-429-0077

Avaya 4630 IP Telephone Compact business center: one of many tools for use with the IP Office Another great telephone by Avaya

 

about | telecommunications consulting | avaya one x quick edition | Florida phone systems | vm pro | contact us
PO BOX 186 Spring Lake, New Jersey 07762
1-800-429-0077 ::: 732-280-3200
Copyright 2006 CarrollCommunications.com All Rights Reserved.