Prior to launching any IP Office instances you should create several security groups. A security group consists of a set of rules for what access is allowed based on a set of selected protocols, ports and source address settings. When launching a new instance, you can select the security group that it should use.

• When launching a new instance you should use a highly restricted security group you have created that allow access from as few hosts and protocols as possible. For example, one that only allows access from your IP address and using HTTPS access to ports 7070/7071. This is necessary since the new instance boots with default passwords until initial configuration is completed.

• Once the instance is ignited and initial configuration utility completed, you can then switch the virtual machine's security group to one you have created for operational systems. For example, one that allows access from customer addresses using the ports/protocols of the IP Office services that have been configured on the server. See Changing the security group.