Avaya 555-245-600 manual Management access security features, Network security features

Small to mid-size enterprise

Media modules necessary for each WAN line

The table below lists which media modules to install to connect each type of outside WAN line.

Table 6: Outside WAN lines supported and matching media modules

WAN line	Media modules
Universal Serial Port	MM342
E1/T1 data lines	MM340
PPPoE (ADSL modem)	Chassis
Ethernet (DHCP/static IP)	Chassis
(cable modem)

Management access security features

The G450 features the following management security mechanisms:

●A basic authentication mechanism in which users are assigned passwords and privilege levels

●Support for user authentication provided by an external RADIUS server

●SNMPv3 user authentication

●Secure data transfer via SSH and SCP with user authentication

●ASG authentication for remote service logins. ASG is a challenge-response authentication method that is more secure than password authentication and does not require a static password.

Network security features

The Avaya G450 Media Gateway provides the following network security features:

●Private secure connections can be configured between the G450 and a remote peer, using VPN (Virtual Private Network). VPN at the IP level is deployed using a standards-based set of protocols defined by the IETF called IPSec. IPSec provides privacy, integrity, and authenticity to information transferred across IP networks.

●Protection against DoS (Denial of Service) attacks via:

-MSS notifications. The G450 identifies predefined or custom-defined traffic patterns as suspected DoS attacks and generates SNMP notifications, referred to as Managed Security Services (MSS) notifications. MSS notifications are intercepted and, if certain conditions are met, may be forwarded to the Avaya Security Operations Center (SOC) as INADS alarms. The SOC is an Avaya service group that handles DoS alerts, responding as necessary to any DoS attack or related security issue.

Issue 6 January 2008 51