Avaya 3.7, Configuration Manual

Page: 302 / 326

Firewall rules template
302 Avaya VPNmanager Configuration Guide Release 3.7
Table 32: Public low security firewall rules
Rule Name Action Source Destination Service Direc-
tion Interface Keep
State
InBoundPublicA
ccess Permit Any PublicIP IKE_IN
IPSEC_NAT_T_IN
AH/ESP
ICMPDestUnreach In Public no
InBoundPublicto
DMZAccess Permit Any DMZNet HTTP/HTTPS
POP3/IMAP/SMTP In Public Yes
InBoundPublicB
lockAll Deny Any Any Any In Public No
OutBoundPublic
Access Permit PublicIP Any IKE_OUT
IPSEC_NAT_T_OUT
AH/ESP
ICMPDestUnreach Out Public no
OutBoundPublic
PingAccess Permit PublicIP
DMZNet
PrivateNet
SemiPrivate
Net
Managemen
tNet Any ICMPEchoRequest Out Public Yes
OutBoundPublic
GeneralAccess Permit Any Any ICMPEchoRequest(PING)
ALL TCP
ALL UDP Out Public Yes
OutBoundPublic
BlockAll Deny PublicIP
DMZNet
PrivateNet
SemiPrivate
Net
Managemen
tNet Any Any Out Public No
Table 33: Public VPN-only firewall rules
Rule Name Action Source Destination Service Direc-
tion Interfac
e Keep
State
InBoundPublicA
ccessVPNData Permit Any Public-IP ESP
IPSEC_NAT_T_IN In Public-IP Yes
OutBoundPublic
AccessVPNDat
a Permit Public-IP Any ESP
IPSEC_NAT_T_IN Out Public-IP Yes
InBoundPublicA
ccessVPNKeyM
gmt Permit Any Public-IP IKE-IN
IKE-AVAYA-IN In Public-IP Yes
1 of 2