fataldata

So I'm reading "Administration for Network Connectivity for Avaya Communication Manager (2.1)" Document # 555-233-504 Issue 8 from June 2004. In the section titled Networking Overview/LAN Security it mentions that you cannot access the Customer's LAN throught the INADS line.
Since security is the main concern of our IS Dept in Integrating the S8700 I thought I should test this. My conclusion, I was able to dial the INADS line using RAS access and then telnet the switch. From there I could ping or telnet to other devices on the Corporate LAN.
I'm gonna go ahead and read some more on the security issues but, how can they put this in official documentation when it's pretty much wrong? Anyone else test this and come up with different results? Is their a way to prevent this?

__________________
Systems In Use:
S8700 CM3.0 and S8710 CM3.1.1

fataldata

Found my own answer. We until this point had not used the Web interface. Not sure but apparently all firewall admin is done through this interface and is not available to the ASA.

__________________
Systems In Use:
S8700 CM3.0 and S8710 CM3.1.1

PBXtech.info

 

fataldata

Well I thought I had found the answer. Even though the box for telnet from the server is unchecked, I am still able to telnet from the S8700 to our LAN. I am familiar with IPTABLES in Linux and know that the Tables must be restarted for changes to take effect. Now I'm looking for a way to do this other than SU' ing to root and restarting IPTABLES. Anyone use the server firewall much? If so how do you restart the firewall?

__________________
Systems In Use:
S8700 CM3.0 and S8710 CM3.1.1