Network security features

●ASG authentication for remote service logins. ASG is a challenge-response authentication method that is more secure than password authentication and does not require a static password.

Network security features

The Avaya G250/G350 Media Gateway provides the following network security features:

●Private secure connections can be configured between the G250/G350 and a remote peer, using VPN (Virtual Private Network). VPN at the IP level is deployed using a standards-based set of protocols defined by the IETF called IPSec. IPSec provides privacy, integrity, and authenticity to information transferred across IP networks.

●Access to the G250/G350’s LAN ports is authenticated using the 802.1x protocol. On the G350, you can enable 802.1x on the MM314 and MM316 media modules’ 10/100 Ethernet ports. On the G250, you can enable 802.1x on the eight Ethernet LAN PoE ports located on the G250’s front panel. The 802.1x protocol standard is extended to support an optional mode for authenticating multiple supplicants.

●Protection against DoS (Denial of Service) attacks via:

-MSS notifications. The G250/G350 identifies predefined or custom-defined traffic patterns as suspected DoS attacks and generates SNMP notifications, referred to as Managed Security Services (MSS) notifications. MSS notifications are intercepted and, if certain conditions are met, may be forwarded to the Avaya Security Operations Center (SOC) as INADS alarms. The SOC is an Avaya service group that handles DoS alerts, responding as necessary to any DoS attack or related security issue.

-SYN cookies, which protect against a well-known TCP/IP attack in which a malicious attacker targets a vulnerable device and effectively prevents it from establishing new TCP connections.

Alarms and troubleshooting features

The Avaya G250 and Avaya G350 Media Gateways have extensive features for error detection, alarms, and troubleshooting. Detailed diagnostic information and troubleshooting are provided by software-based solutions accessible by laptops in the field or remotely from an administrator’s computer. Administration for the Avaya G250 and Avaya G350 Media Gateways, 03-300436, provides a comprehensive guide to configuring and using these solutions.

Issue 5 June 2008 55