For More Information - Avaya 8800 Planning And Engineering

Network security
For SSL needs, Avaya offers the Integrated Service Director (iSD) SSL Accelerator Module
(SAM). The SAM is used by the Web Switching Module (WSM) to decrypt sessions and to
make encrypted cookies and URLs visible to the WSM. The SAM offers:
• secure session content networking at wire speed
• offloading for Web servers for better performance
• optimized Web traffic for secure Web sites
• cost savings because fewer servers need to be enabled
The Accelerator also terminates each client HTTPS session, performs hardware-assisted key
exchange with the client, and establishes an HTTP session to the chosen Web server. On the
return path, the SAM encrypts the server response according to the negotiated encryption rules
and forewords the response to the requesting client using the established HTTPS session. You
can load balance up to 32 iSD-SSL units transparently by using a WSM.

For more information

The following organizations provide the most up-to-date information about network security
attacks and recommendations about good practices:
• The Center of Internet Security Expertise (CERT)
• The Research and Education Organization for Network Administrators and Security
Professionals (SANS)
• The Computer Security Institute (CSI)
272 Planning and Engineering — Network Design November 2010