BinTec X4000, User Manual

Page: 360 / 498

360 X4000 User’s Guide
Configuration of Security Functions and Firewall
10
10.5 Checklist
The following list indicates the most important critical security points that you
should observe when configuring X4000 :
■
Have you changed all four passwords for system access (admin, read,
write, http)? See chapter 4.2, page 76 .
■
Are the activities of your X4000 sufficiently accurately logged on at least
one external computer and do you check the syslog messages regularly?
See chapter 10.1.1, page 308 .
■
Have you restricted access to the local services and resources to known
computers or networks? In particular, you should only allow access via
CAPI, SNMP, HTTP, trace and telnet to known computers.
■
Are configuration files saved by TFTP kept in a safe place?
■
Have you protected all PPP accesses with a password?
■
If applicable, have you activated Network Address Translation (NAT) for the
connection to the Internet Service Provider (ISP)? See chapter 10.2.7,
page 331 .
■
Have you limited the IP data traffic at critical interfaces, if necessary with
the aid of filters, and prevented IP address spoofing? You should pay
special attention to the interfaces you have not protected with NAT! See
chapter 10.2.8, page 335 .
■
Have you restricted remote maintenance access via ISDN Login? Have you
made an entry under
CM1BRI, ISDN S0
➧
I
NCOMING
C
ALL
A
NSWERING
?
See "Incoming call answering", page 141 .
You should also observe the following additional points:
■
Do you use the Microsoft callback procedure for PPP connections? Please
refer to the information in chapter 10.2.4, page 327 .
■
Do you use an encryption protocol for line tapping security on connections
with critical security? See chapter 10.3.1, page 354 .
■
Do you use personal authentication on connections with critical security?