...
| Info | ||||
|---|---|---|---|---|
It can be quite useful to consider
|
2 2.9.2 Rules of thumb
The services separation occurs by considering the following rules:
- Use two networks interfaces at least and set them up as:
- Internal Interface: private IP, not directly accessible from the extern of the company
- External Interface: public IP, directly accessible from anyone
- Services should always be split in two categories:
- management
- service provider
- Each category should be mapped on a different interface:
- management on the Internal Interface
- service provider on the External Interface
- One amend to rule number 3 is if your company wants to offer the secure voice system to the internal network as well (or to some part of it)
- Both SIP/TLS and HTTPS-Smartphone Web Services are necessary to run the service on mobile devices
- public access is needed for with Data packages are involved
- No point in having Nagios service on the public interface
- Disable SSH access as soon as you can or keep it as the last resort: you might want to place it on an hidden network or protect it by a firewall rule
...
2.9.3 Possible implementations
...
| Warning | ||||
|---|---|---|---|---|
Please keep in mind that's perfectly possible to enable Secure VoIP Service in your company's network as well, using internal wireless network which could pair the service offered on external address/port. In this scenario there can be issues related to name resolution and certificates. Please contact
|
| Navbar |
|---|