Legal Notice - AudioCodes Mediant 1000 User Manual

User's Manual
Set the management password to a unique, hard-to-guess string. Do not use the
same password for several devices, as a compromise of one may lead to the
compromise of others. Keep this password safe at all times, and change it frequently.
If possible, use a RADIUS server for authentication. RADIUS allows you to set
different passwords for different users of the Mediant 1000, with centralized
management of the password database. Both Web and Telnet interfaces support
RADIUS authentication.
Use HTTPS when accessing the Web interface. Set HTTPSONLY=1 to allow only
HTTPS traffic (and block port 80). If you don't need the Web interface, disable the
Web server.
If you use Telnet, do not use the default port (23). Use SSL mode to protect Telnet
traffic from network sniffing.
If you use SNMP, do not leave the community strings at their default values, as they
can be easily discovered by hackers. See the SNMP configuration chapter for further
details.
Use a firewall to protect your VoIP network from external attacks. Robustness of the
network may be compromised if the network is exposed to "denial of service" (DoS)
attacks; such attacks are mitigated by stateful firewalls. Do not allow unauthorized
traffic to reach the Mediant 1000.
16.5

Legal Notice

By default, the Mediant 1000 supports export-grade (40-bit and 56-bit) encryption, due to
U.S. government restrictions on the export of security technologies. To enable 128-bit and
256-bit encryption on your device, contact your AudioCodes representative.
This product includes software developed by the OpenSSL Project for use in the OpenSSL
Toolkit. (http://www.openssl.org/)
This product includes cryptographic software written by Eric Young (eay@cryptsoft.com).
Version 4.6 287
16. Appendix - Security
August 2005