Security - AudioCodes Mediant 600 User Manual

3.3.2.3

Security

The Security Settings submenu allows you to configure various security settings. This
menu contains the following page items:

Firewall Settings (see ''Configuring Firewall Settings'' on page 88)

General Security Settings (see ''Configuring General Security Settings'' on page 92)

IPSec Proposal Table (see Configuring IP Security Associations Table on page 94)

IPSec Association Table (see Configuring IP Security Proposal Table on page 92)
3.3.2.3.1 Configuring Firewall Settings
The device provides an internal firewall, allowing you (the security administrator) to define
network traffic filtering rules. You can add up to 50 ordered firewall rules.
The access list provides the following firewall rules:

Block traffic from known malicious sources

Only allow traffic from known friendly sources, and block all others

Mix allowed and blocked network sources

Limit traffic to a pre-defined rate (blocking the excess)

Limit traffic to specific protocols, and specific port ranges on the device
For each packet received on the network interface, the table is scanned from the top down
until a matching rule is found. This rule can either deny (block) or permit (allow) the packet.
Once a rule in the table is located, subsequent rules further down the table are ignored. If
the end of the table is reached without a match, the packet is accepted. For detailed
information on the internal firewall, refer to the Product Reference Manual.
Notes:
SIP User's Manual
•
It is recommended to add a rule at the end of your table that blocks all
traffic and add firewall rules above it (in the table) that allow traffic (with
bandwidth limitations). To block all traffic, the following must be set:
- IP address to 0.0.0.0
- Prefix length of 0 (implies the rule can match any IP address)
- Local port range 0-65535
- Protocol "Any"
- Action Upon Match "block"
•
You can also configure the firewall settings using the ini file table
parameter AccessList (see ''Security Parameters'' on page 524).
88
Mediant 600 & Mediant 1000
Document #: LTRT-83308