Avaya presented two configurations for our IP PBX security
test: using a no-frills phone outside the Avaya IP box with no additional
security options; and a maximum security option: it features the same VoIP
equipment, but with an additional firewall and Layer 2 / Layer 3 infrastructure
switches from Extreme Networks.
The security weaknesses of Avaya's default configuration
have reached such a high level, while the hardware package performs better.
The initial configuration submitted by Avaya for security
assessment had a network infrastructure. Of course, there was no level 3
network infrastructure. All IP communications overlap a single horizontal
network, Layer 2 version, divided into two virtual remote LANs, one for voice
and the other for data. No firewalls have been used.
No comments:
Post a Comment