Private Zone Firewall Templates - Avaya 3.7 Configuration Manual

Table 33: Public VPN-only firewall rules (continued)
OutBoundPublic
AccessVPNKey
Mgmt
InBoundPublicI
CMP
OutBoundPublic
ICMP
InBoundPublicB
lockAll
OutBoundPublic
BlockAll

Private zone firewall templates

The private network interface provides connection to the private/corporate LAN. Private zones
are considered trusted networks and because of this most traffic is allowed.
The private high security rules are enforced for both incoming and outgoing packets as follows.
Any incoming traffic from the private zone is allowed except traffic that is destined to the
management zone.
For outgoing traffic to the private zone, traffic initiated from DMZ is strictly denied. All other
traffic is allowed.
Permit Public-IP Any
Permit Any Public-IP
Permit Public-IP Any
Block Any Any
Block Any Any
Private zone firewall templates
IKE-IN
IKE-AVAYA-IN
ICMPDESTUNREACHAB
LE
ICMPTIMEEXCEEDED
ICMPDESTUNREACHAB
LE
Any
Any
Out Public-IP Yes
In Public-IP No
Out Public-IP No
In Public No
Out Public No
2 of 2
Issue 4 May 2005 303