Tek-Tips is the largest IT community on the Internet today!
Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!
-
Congratulations Mike Lewis on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!
-
IP Office 500 - Can this be compromised?
It was the RAS functions. When I inherited this we already had a site to site VPN in place for phone maintenance. After I took over we introduced an SSL vpn system as well. The phone maintainer must have preferred just dialling in, and we'd not known about that. As soon as the maintainer dialled...- BSFH
- Post #18
- Forum: Avaya: IP Office
-
IP Office 500 - Can this be compromised?
Ok, the good news is that there is no user called "RemoteManager". There is however an incoming call route with a destination "dialin". I already hate that route just for its name. I have no isdn modem so i can't verify what it does. I called the number, but it sounded like it rang once then...- BSFH
- Post #15
- Forum: Avaya: IP Office
-
IP Office 500 - Can this be compromised?
They always use a VPN to manage, but honestly that sounds like the most probable way at the moment. I am actually excited/furious at the prospects, so logging into the server from home (VPN). Can you tell me: 1) How to verify dialin user enabled/disabled 2) Whether the IPO would log anywhere any...- BSFH
- Post #13
- Forum: Avaya: IP Office
-
IP Office 500 - Can this be compromised?
Thanks for the replies so far guys. Some good ideas so far but I don't think I can rule the Avaya server out. The reason for that is the way port mirroring works. ##Boring back history here. In the first place, I didn't know it was the Avaya server generating this traffic. All I knew was that...- BSFH
- Post #11
- Forum: Avaya: IP Office
-
IP Office 500 - Can this be compromised?
I'm detecting these packets just after they leave the IP Office- the mac address on the packets is that of the IP Office unit. This was accomplished by mirroring the port its connected to and capturing packets with wireshark. I agree that its not necessarily a compromised system, but nor should...- BSFH
- Post #5
- Forum: Avaya: IP Office
-
IP Office 500 - Can this be compromised?
No I don't think so. I've checked the LAN 1 and 2, and any SIP / STUN / DNS etc IPs to see if there is any mention of those IPs anywhere. When I say "spoof" I just mean its packets have a source address which is an IP it doesn't own. ie non-routable through public internet. The IPs themselves...- BSFH
- Post #3
- Forum: Avaya: IP Office
-
IP Office 500 - Can this be compromised?
Hi Guys, I've inherited an IPO 500. Having no prior experience with administrating telephony systems, and no training on this one, I have some pretty big gaps in knowledge. Before I hit my shiny red PANIC! button I wanted to confirm as to whether you've ever heard of an IP office unit being...- BSFH
- Thread
- Replies: 19
- Forum: Avaya: IP Office
