Mitel MIVOICE OFFICE 250, Руководство по установке и администрированию

Страница: 464 / 585

MiVoice Office 250 Installation and Administration Guide
436
Firewall Configuration
In computer networks, a totally secure network is practically impossible. In general, the more types
of communications allowed from the Internet, the less secure the network. Therefore, a network
should be configured so as to allow only the minimum level of communication unless other
capabilities are required. An example is shown in the following illustration.
In some environments, it will be necessary to allow additional types of communications through the
firewall. As stated above, these communications should be allowed only when necessary. Although
strong passwords are always a good idea, this is especially important when applications are opened
to the Internet.
Private Networking
This is the protocol used to allow MiVoice Office 250 systems to communicate with each other. To
allow Private Networking to the Internet, allow TCP port 5570.
Remote Administration
These are the protocols that provide the capability to perform certain administration activities from
outside the firewall. To enable remote administration including DB Programming over the Internet,
enable TCP port 44000. To further tighten security, this communication can be filtered by source
address
1
.
1. Source address filtering accepts communication from specific IP addresses. While source address filtering
provides some additional level of security, IP source addresses are easily spoofed. In addition, source
addresses are often DHCP-assigned making it impractical to know the source addresses in advance.