This deployment provides protection to the core UC infrastructure while allowing access to services delivered through the core Aura® applications infrastructure. The following diagram shows this deployment.
Figure: Additional network security deployment
In the diagram, two use cases are depicted. The first configuration shows a back-to-back scenario in which the Aura® core is protected by Avaya SBC internally, and Remote Workers connect to the core via a different Avaya SBC. Avaya SBC maintains security and NAT bindings and end-to-end encryption in this back-to-back scenario. The second scenario depicts a Remote work group using a Avaya SBC at the local edge of the group, creating a back-to-back-to-back scenario. This configuration allows for treatment of the work group as Remote from both the main network and the Aura® core and supports encryption of signaling and media from the clients to Avaya SBC and then to the core if desired. This configuration is supported with Avaya 96x1 SIP clients.
