All IP Office administrative and maintenance service interfaces are controlled by the security database for availability and security level. These services include:
Service
Usage
Configuration
IP Office Manager and Server Edition Manager configuration access.
Security Administration
IP Office Manager and Server Edition Manager security settings (database) access
System Status Application Interface
System Status Application (SSA) access
Enhanced TSPI
Avaya one-X® Portal for IP Office CTI access
HTTP
Phone and IP Office Manager file access, Voicemail Pro, IP Office Line, System Monitor (secure)
Web Services
IP Office Web Manager and SMGR
External
Services external to the IP Office application.
Each service has a configurable Service Security Level:
Service Security Level
Usage
Disabled
The service and corresponding TCP ports are inactive
Unsecure Only
This option allows only unsecured access to the service. The service's secure TCP port, if any, is disabled. This or Disabled are the only options supported for the Enhanced TSPI service
Unsecure + Secure
This option allows both unsecured and secure (Low) access.
Secure, Low
This option allows secure access to that service using TLS, and demands weaker (for example 3DES) encryption and authentication or higher. The service's unsecured TCP port is disabled.
Secure, Medium
This option allows secure access to that service using TLS, and demands moderate (for example AES-128) encryption and authentication or higher. The service's unsecured TCP port is disabled.
Secure, High
This option allows secure access to that service using TLS and demands stronger (for example AES-256) encryption and authentication, or higher. In addition, a certificate is required from the client (for Mutual Authentication).
If no certificate is received from the client, the connection is rejected. The service's unsecured TCP port is disabled.
Other service interfaces are controlled for activity.
