The Avaya Product Security Support Team (PSST) responds to ongoing security vulnerabilities for all Avaya Products. For more information, see Avaya Product Security Vulnerability Response Policy and Avaya Security Vulnerability Classification at the Avaya Support website at https://support.avaya.com/security.
Default security
The IP Office software security engine is supplied by Mocana Corporation. For more information, see https://www.mocana.com.
Security features are built-in into the software platform. These features consist of:
Integrated firewall to prevent Denial of Service (DoS) attacks
Secure connections to ensure the privacy and integrity of transmitted information including:
TSL on administration interfaces
HTTPS client
HTTPS server
IPSec
SIP-TLS
SSL/VPN
VMPro/Exchange MAPI integration (TLS)
Configurable security
Configurable security settings include the following features:
Encryption and message authentication
Configuring integrated firewall settings
Digital certificates
Prevention of tool fraud by restricting user privileges and using security policy configuration to manage account credentials and access control