Security Policies Overview

With our new update_11-v5.3, the SIP access via Internet is now more restricted, since all unknown VoIP communications (not configured at IPBRICK) to port UDP 5090 are blocked by the firewall.

Any access, by an unknown route, must be accounted for by creating new firewall rules authorizing access to port 5090/UDP.

If all previous configured routes, at IPBRICK, are resolved by the DNS, they will be authorized and don't need any additional rule.

But if the DNS doesn't resolve them you will have to add a firewall rule authorizing access to port 5090/UDP (please check Figure 17.2).

Please bear in mind that, every remote phone access is permanently blocked and you will need to create a firewall rule in order to open up port 5090/UDP. Our recommendation is to use VPNs.

All Phone passwords must also comply with new security policies:

• Minimum number of characters: 8
• Cannot contain the phone's name.
• Must contain elements of at least three of the following four groups of characters:
  • Uppercase letters (A through Z)
  • Lowercase letters (a through z)
  • Numbers (0 through 9)
  • Special characters (such as !,$,%,#)

IMPORTANTE NOTE: If your phones are configured by auto-provisioning all you need to do after altering the passwords is restart your phones. But if they are not configured this way, you will have to individually alter the passwords and restart your phones.