10 Introduction March 2004
Avaya SG5, SG5X, & SG200 Security Gateway Hardware Installation Guide
Figure 1 SG200 security gateway
Security The VSU provides data stream privacy by employing cryptographic
algorithms and keys powerful enough for the most sensitive business
communications. It supports DES and 3DES encryption, as well as the
IKE key management standards.
Data authenticity is assured by using MD5™ or SHA-1 hashing algorithms
to reject altered or forged packets. All security mechanisms employed by
the security gateway conform to IPsec standards, in order to provide
interoperability and broaden the use of VPN technology.
The security gateway also contains a powerful IP packet filtering engine
to provide extensive filtering capabilities, essential when you have a full-
time connection to the Internet. A rule-based method of packet filtering is
used, where the priority of the rule is determined by its position in the li st
(highest is top priority).