SCN Setup Question with Static IPs 2

[mikedphones]

For years we have been setting up SCN networks for our clients and normally have Dell SonicWalls in the mix at each end.

My question is with respect to whether or not the SonicWall could be eliminated at each end in the following scenario:

Each site has a block of 5 static IP addresses and uses only one. The service provider is Comcast and the clients are using the basic router that is provided.

Can we assign an available static to the IPO at each end and then utilize the Firewall profiles in IPO Manager to secure it?

If this is doable, is it secure or does the IPO have limited capabilities with respect to security and hacking?

The goal is to simplify the amount of hardware and cross support needed between data and voice vendors.

Thoughts appreciated.

 

[kwing112000]

you will open those IPO's up to the internet and expose them to be hacked. Always keep them behind a firewall.

Kevin Wing
ACSS Small and Medium Enterprise (SME) Communications
ACS- Implement IP Office
ACA- Implement IP Office
Vive Communications

 

[GeosmithUK]

Agree with kwing there.

While technically possible, opening the IP Office up to the public internet is a huge security risk.

Automate away all the bullshit!

https://ipoffice.tools

 

[mikedphones]

Thank you both. It was more about the "Firewall Profile" on the IPO that led to this question and whether or not it had any firewall type characteristics. Sounds like Nope! We will stay with what works.

 

[IPGuru]

Gave Mike a * for confirming that he has taken the advie not to trust the IPO firewall.
Security in depth is alwasy the best aproach
Lock the front door first, dont just simply trust your valubles to the safe in the closet (or the box under the matress as is more usualy the case)


Do things on the cheap & it will cost you dear

 

[sizbut]

The IP Office has over 20 years of history. And some of its original data routing features, like its Firewall settings, were pretty useful back then, but they have been long overtaken by the necessities and capabilities of more modern dedicated firewall boxes/SBCs.

So as the folks are saying, don't put the IP Office at the edge of your network, always have something else controlling the security between your public and private worlds.

Stuck in a never ending cycle of file copying.

 

[mikedphones]

Thank you all.

I try to live by the motto of "Do it once, Do it right". Cutting corners does damage at so many levels, many of which cannot be repaired.

It's been a great journey taking my customers from Sprits and Merlins in the mid 80's to IPO. This product has so many capabilities that really make it sing and dance.

Peace