1.1General Remarks 3
1.2History of Change 4
1.3Customer Deployment - Overview 6
2OpenScape Business Hardening Measures in General 7
2.1System Access Protection 9
2.2Administration 9
2.2.1OpenScape Business Assistant 9
2.2.2HiPath Manager E 11
2.2.3Assistant T/TC 11
2.2.4Smart Service Delivery Platform (SSDP) 11
2.2.5Remote Access over VPN 12
2.2.6Remote Access over ISDN / BRI 12
2.3Communication Access and Toll Fraud Protection 12
2.3.1Class of Service 12
2.3.2OpenScape Business UC Smart 13
2.3.3OpenScape Business Smart Voicemail 14
2.3.4Associated Dialling and Services 14
2.3.5Direct Inward System Access (DISA) 15
2.3.6Mobility 15
2.3.7Desk Sharing 16
2.3.8Access to Phones 16
2.3.9Door Opener 17
2.4Confidentiality of Communications 17
2.4.1Transmission via internal IP networks (LAN) 17
2.4.2Signalling and Payload Encryption 18
2.4.3IP Transmission with Public Networks 18
2.4.4External Subscribers 18
2.4.5Networking for OpenScape Business 19
2.4.6Privacy 19
2.5Availability 20
3IP Interfaces OpenScape Business X3 / X5 / X8 21
3.1IP Interfaces and Ports 21
3.1.1Administration Access with HiPath Manager E 21
3.1.2SMTP Interface 21
3.1.3SNMP Interface 22
3.1.4LDAP Interface 22
3.2Firewalls 23
3.2.1Port Opening 23
3.2.2Application Firewall 24
3.2.3PSTN Peers Communication 24
3.3Secure Tunnel (VPN) 25
4OpenScape Business UC Suite (Option) 27
4.1OpenScape Business UC Clients 27
4.2IP Interfaces UC Booster Card 28
4.2.1SAMBA Share (File Service) 28
4.2.2XMPP Interface 28
4.2.3SMTP Interface 29
4.2.4LDAP Interface 29
4.2.5Open Directory Service 30
4.2.6CSTA Interface 30
5OpenScape Business S / UC Booster Server (Option) 32
5.1Server Administration 32
5.2IP Interfaces Server 33
6Xpressions Compact Card (Option) 34
6.1Administration Xpressions Compact Card 34
6.2Mailbox Protection 36
6.3IP Interfaces Xpressions Compact Card 37
7Further Components 38
7.1OpenScape Business Cordless / HiPath Cordless IP (DECT) 38
7.2 Wireless LAN (WLAN) 38
7.3TAPI 120 / TAPI 170 / CallBridge IP 38
7.4OpenScape Business Attendant 38
7.5OpenStage Gate View 39
8Desktop and Server PCs 40
9Phones and Voice Clients 42
10Addendum 44
10.1Recommended Password Policy 44
10.2Accounts 44
10.2.1OpenScape Business Assistant 45
10.2.2HiPath Manager E 45
10.2.3Clients 45
10.2.4Xpressions Compact Card 45
10.2.5OpenStage Gate View 46
10.3Certificates 46
10.4Port List 46
10.5References 46
