IX Workplace on TLS / FQDN - What IPO Ports

[dsm600rr]

Hello all,

Wondering what I should update my ports to as my IPO is still getting outside Hits.

We currently have port 5060 locked down to only our SIP Trunk Provider.

Below is the rest that I currently have set up:

ACSS

 

[BResource]

Best thing is to put an SBCE infront of it.

Unless you lock down to IPs you will get hits.

 

[derfloh]

Best recommendation. The SBC is a pretty good filter.

IP Office remote service
IP Office certificate check
CLI based call blocking
SCN fallback over PSTN

 

[sizbut]

Unless being used by other apps or phones, you don't need UDP enabled if TCP is enabled.

Ditto, you don't need TCP enabled is TLS is enabled and working.

Most apps use the most secure method first and won't touch the others if they connect.

Stuck in a never ending cycle of file copying.

 

[dsm600rr]

The only app we are using is IX Workplace.

All my local phones show using TCP via SSA aside from my B179 using UDP.

ACSS

 

[dsm600rr]

Do we want an Avaya SBCE or something like an Edgewater / Ribbon unit?

ACSS

 

[derfloh]

I would use ASBCE

IP Office remote service
IP Office certificate check
CLI based call blocking
SCN fallback over PSTN

 

[TheSmash]

I'd avoid the Ribbon as it uses 443 from management and you cant change this. May not be a problem with IX but was a killer for Communicator.

ASBCE is you best choice for Avaya applications.

ACSS (SME)

 

[derfloh]

Really? Usually the management web server should only listen on the interface in the trusted network.

Avaya SBC also uses port 443 for management.

IP Office remote service
IP Office certificate check
CLI based call blocking
SCN fallback over PSTN

 

[TheSmash]

Yes really. I was as surprised as you.

ACSS (SME)