Firewall rules template

The destination is Public and the services are FTP, SSH, Telnet, HTTP, HTTPS, POP3, IMAP, or ICMPechorequest.

All other incoming traffic is blocked.

Outgoing traffic to the semi-private zone that is allowed includes

Any allowed traffic from other zones

VPN traffic

Table 37: Semi-private high security firewall rules

Rule Name

Action

Source

Destination

Service

Direc

Zone

Keep

Keep State

 

 

 

 

 

tion

 

State

 

 

 

 

 

 

 

 

 

 

InBoundSe

Permit

Any

SemiPrivate

IKE_IN

In

SemiP

No

Permit incoming

miPrivateV

 

 

IP

IPSEC_NAT_T_IN

 

rivate

 

VPN and ICMP

PNAccess

 

 

PublicIP

AH/ESP

 

 

 

unreachable

 

 

 

 

ICMPDestUnreach

 

 

 

 

 

 

 

 

 

 

 

 

 

InBoundSe

Permit

Any

SemiPrivate

ICMPEchoReq(PING)

In

SemiP

Yes

Permit incoming

miPrivatePi

 

 

IP

 

 

rivate

 

PING

ngAccess

 

 

PublicIP

 

 

 

 

 

 

 

 

 

 

 

 

 

 

InBoundSe

Permit

Any

DMZNet

ICMPEchoReq(PING)

In

SemiP

Yes

Permit incoming

miPrivateto

 

 

 

FTP-Ctrl/PassiveFTP

 

rivate

 

services to DMZNet

DMZAcces

 

 

 

SSH/TELNET

 

 

 

 

s

 

 

 

HTTP/HTTPS

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

DNS-TCP/DNS-UDP

 

 

 

 

 

 

 

 

POP3/IMAP/SMTP

 

 

 

 

 

 

 

 

NNTP

 

 

 

 

 

 

 

 

 

 

 

 

 

InBoundSe

Deny

Any

DMZNet

Any

In

SemiP

No

Deny traffic to

miPrivateD

 

 

PrivateNet

 

 

rivate

 

PrivateNet,

enyAccess

 

 

Manageme

 

 

 

 

ManagementNet

 

 

 

ntNet

 

 

 

 

and DMZNet

 

 

 

SemiPrivate

 

 

 

 

 

 

 

 

IP

 

 

 

 

 

 

 

 

 

 

 

 

 

 

InBoundSe

Permit

Any

Any

ICMPEchoReq(PING)

In

SemiP

Yes

Permit clear traffic

miPrivateto

 

 

 

FTP-Ctrl/PassiveFTP

 

rivate

 

to Public network/

PublicAcce

 

 

 

SSH/TELNET

 

 

 

VPN traffic with

ss

 

 

 

HTTP/HTTPS

 

 

 

Public IP as tunnel

 

 

 

 

 

 

 

endpoint

 

 

 

 

DNS-TCP/DNS-UDP

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

POP3/IMAP/SMTP

 

 

 

 

 

 

 

 

NNTP

 

 

 

 

 

 

 

 

 

 

 

 

 

InBoundSe

Deny

Any

Any

Any

In

SemiP

No

Deny the rest of

miPrivateBl

 

 

 

 

 

rivate

 

traffic

ockAll

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

1 of 2

306 Avaya VPNmanager Configuration Guide Release 3.7

Page 306
Image 306
Avaya 3.7 manual Semi-private high security firewall rules, Ping

3.7 specifications

Avaya 3.7 represents a significant evolution in unified communications technology, designed to enhance collaboration and streamline communication workflows for organizations of all sizes. As a cornerstone of Avaya's offerings, this version incorporates a range of features and improvements that cater to contemporary business needs, emphasizing flexibility, reliability, and seamless integration.

One of the most notable features of Avaya 3.7 is its robust call management capabilities. The platform allows users to manage calls effectively through a user-friendly interface, enabling intuitive functionalities such as drag-and-drop call handling, call forwarding, and conference calling. These features help employees stay connected, facilitating better communication and teamwork across departments.

In terms of mobility, Avaya 3.7 supports mobile applications that allow users to access the system remotely. This is particularly advantageous for businesses with a workforce that relies on remote or hybrid work models. The mobile integration ensures users can make and receive calls, check voicemail, and manage their schedules directly from their smartphones, maintaining productivity regardless of location.

The system also embraces advanced collaboration tools, such as video conferencing and instant messaging. These features promote a more dynamic interaction environment, fostering real-time communication among team members. Video conferencing capabilities allow for high-definition video quality and reliable connectivity, making virtual meetings more engaging and effective.

Security is another critical characteristic of Avaya 3.7. The platform includes enhanced encryption protocols to protect sensitive communications and ensure data integrity. With cybersecurity remaining a top concern for businesses, Avaya has prioritized the security of its communications solutions, safeguarding organizations' information against potential threats.

Furthermore, Avaya 3.7 benefits from the incorporation of AI and analytics. These technologies provide businesses with valuable insights into communication patterns and user behavior, enabling them to optimize their processes. The analytics can help identify areas for improvement and drive informed decision-making, thus enhancing overall efficiency.

Interoperability with existing systems is another hallmark of Avaya 3.7. The platform easily integrates with various applications and services, allowing businesses to leverage their current technology investments and create a cohesive communication ecosystem.

In summary, Avaya 3.7 stands out as a comprehensive communication solution that addresses the modern demands of the workplace. With its advanced call management features, mobility support, collaboration tools, strong security measures, and integration capabilities, Avaya 3.7 positions itself as a vital asset for organizations aiming to enhance their communication strategies and drive business success.