User's Manual

Avaya Branch Gateway Manager 10.0 Page 85

15-601011 Issue 29r (Friday, November 02, 2012)B5800 Branch Gateway

Security Mode: Editing Security Settings

Service

Method

Port Used

Default

Port

Service

Security

Level

· Secure = HTTPS port 443 available.

This can be used for DECT R4

provisioning, IPO softphone

provisioning.

· Service Security Level:

Sets the minimum security level the service will support. See File | Preferences | Security for the corresponding

Branch Gateway Manager application setting, which must be changed to match the appropriate service access security

settings.

· WARNING

Selecting a setting other than Unsecure Only will cause the system to stop responding for a period (less than

a minute) while the system initializes the secure port.

· Unsecure Only

This option allows only unsecured access to the service. The service's secure TCP port, if any, is disabled. This or

disabled are the only options supported for the System Status Interface and Enhanced TSPI services.

· Unsecure + Secure

This option allows both unsecured and secure (Low) access. In addition, TLS connections are accepted without

encryption, just authentication.

· Secure, Low

This option allows secure access to that service using TLS, and demands weak (for example DES_40 + MD5)

encryption and authentication or higher. The service's unsecured TCP port is disabled.

· Secure, Medium

This option allows secure access to that service using TLS, and demands moderate (for example DES_56 + SHA-1)

encryption and authentication or higher. The service's unsecured TCP port is disabled.

· Secure, High

This option allows secure access to that service using TLS and demands strong (for example 3DES + SHA-1)

encryption and authentication, or higher. In addition, a certificate is required from the client (usually Branch

Gateway Manager). See System Details | Client Certificate Checks for tests made on the received certificate. The

service's unsecured TCP port is disabled.

· Disabled

This option is available for the System Status Interface and Enhanced TSPI services. If selected, access to the

service is disabled.

· Service Access Source

This option is only shown for the Configuration service. This setting is not used for Avaya Branch Gateway.

104