[cisco-voip] CallManagers behind firewall, and PC access to CCMuser pages

[Walenta, Phil]

Miercom did a study last year on just this very thing.
 
http://www.miercom.com/?url=products/spreports
 
It's $1495 if you want to buy the report that shows every gory detail.
 
I actually spoke with the Cisco guy responsible for setting up the lab,
and firewalls, and a pile of network-switch based security were used, I
just don't have the specifics.  Based on this person's description of
the setup, access-lists were in place to and from the voice network,
restricting it to pretty much web admin and ccmuser access. 

________________________________

From: cisco-voip-bounces at puck.nether.net
[mailto:cisco-voip-bounces at puck.nether.net] On Behalf Of Lelio Fulgenzi
Sent: Monday, April 25, 2005 10:25 AM
To: cisco-voip at puck.nether.net
Subject: [cisco-voip] CallManagers behind firewall,and PC access to
CCMuser pages


Just wondering how many folks out there are allowing PC access to the
publisher's CCMuser pages?
 
Did you take any special steps to make things work safely? We are also
considering putting our CallManager's behind a firewall blade on a CatOS
Cat6K server farm switch.
 
I would appreciate any feedback or horror stories.
 
 
------------------------------------------------------------------------
--------
Lelio Fulgenzi, B.A.
Network Analyst (CCS) * University of Guelph * Guelph, Ontario N1G 2W1
(519) 824-4120 x56354 (519) 767-1060 FAX (JNHN)
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ 
mob lawyer: your people insulted my brother.
dr. house: what? romano in the parmesan cheese shaker again?
 

 
-------------- next part --------------
An HTML attachment was scrubbed...
URL: https://puck.nether.net/pipermail/cisco-voip/attachments/20050425/84504f43/attachment.html