Avaya 3.7, Configuration Manual

Page: 27 / 326

Preparing to configure your network
Issue 4 May 2005 27
Security policies
VPNmanager security policy management provides the following security features that can be
configured:
●
Firewall rules
●
Denial of Service (DoS) categories
●
Quality of Service (QoS) rules
●
Bandwidth management
In addition, encryption security options include Internet Key Exchange (IKE) with IPSecuirty
protocol (IPSec). It applies globally to the VPN.
Firewall policies
VPNmanager firewall policy management includes domain firewall rules, device firewall rules,
and firewall templates. The VPNmanager software provides multiple firewall templates that can
be used as a general rule set or as a starting point for creating a customized firewall template.
You can apply these templates at the domain level for all security gateways, for a specific
gateway, or for a defined group. The integrated SMLI (Stateful Multi-Layer Inspection) Firewall
supports firewall rules criteria based on the following:
●
Source/Destination IP address or range
●
TCP/UDP/ICMP protocol
●
Port or port ranges
●
IP protocol
●
Interface
●
Direction
A set of common network services is provided, and custom network services or objects can be
easily defined for use in both firewall and QoS policies. Firewall rules can be individually
enabled to track state information on TCP/UDP/ICMP packet flows and can be user-configured
with advanced state timers. Login can also be enabled for each rule.
Note:
Note:
Domain level rules and firewall templates are available for VPNos release 4.2
and later.
Denial of Service
The following Denial of Service (DOS) categories are enabled to protect the security gateway
from attack by hackers.