Edgewater Networks 4200 Series - Firewall

4200 User Manual Edgewater Networks, Inc.
Version 3.0 23
Firewall
⇒ Select Firewall
The system can act as a firewall for voice, video and data traffic. A firewall
restricts and controls the traffic between networks, typically between a
corporate network and the Internet. If an external firewall is used, the data
firewall features can be set to pass or block all data traffic depending on
whether the system is placed in series or in parallel with the external firewall.
Network Address Translation allows many private IP addresses to be mapped
to a single public address. However, another feature of NAT typically used for
security, is that devices behind NAT are hidden and not directly addressable
from a public network. This is a problem for IP phone devices that need to
accept calls from the public network. To handle this issue, the system
implements a call-agent proxy to map the common public address to unique
private addresses.
o Enable Firewall for WAN --

 Enable the firewall portion of the
system by clicking the Enable Firewall checkbox.
o Basic WAN Firewall Settings --

 Within the Basic WAN Firewall
Settings, enable the accesses that you want from the WAN side of the
system by clicking the appropriate checkboxes.
o Allow HTTP Access Through Firewall --

 Enabling this allows HTTP
management of the system from the WAN interface.
o Allow HTTPS Access Through Firewall --

 Enabling this allows
HTTPS management of the system from the WAN interface.
 Select System -- Select Certificate to manage HTTPS device
certificates.
o Allow Telnet Access Through Firewall --

 Enabling this allows
Telnet management of the system from the WAN interface.
o Allow SSH Access Through Firewall --

 Enabling this allows SSH
version 2 ONLY management of the system from the WAN interface.
o Allow SNMP Access Through Firewall --

 Enabling this allows
SNMP V1 and V3 management of the system from the WAN interface.
o Allow TCP Port --

 allow the TCP port numbers to which you want
to grant access.
☞ Multiple port values can be enter by separating the values with
a space e.g. 8070 8080 8090