Administration of the Avaya G350 Media Gateway - Avaya Support

FIPSConsiderationsThe following rules apply in FIPS-approved mode:●●●●●●●●●●●●●●●●●●●SSHv2 service must be shut downMedia encryption must be shut downH.248 signalling must be shut downThe Announcement FTP server shall not be used for upload/download G350 executablefiles or for file transfer of security related dataASG services logon must be shut downASG BP login must be shut downSNMPv3 authentication and encryption services must be shut downModem connections to the Console and USB ports must be shut downCHAP authentication services must be shut downTelnet service must be confined to IPSEC encrypted tunnelSNMP service must be confined to IPSEC encrypted tunnelTFTP/FTP configuration upload/download service must be confined to IPSEC encryptedtunnelFTP configuration upload/download service must be confined to IPSEC encrypted tunnelSCP client service must be shut downUsage of Diffie-Hellman Group 1 for IKE key negotiation must be suppressedUsage of MD5 for IKE must be suppressedUsage of MD5 for ESP authentication operation in IPSEC must be suppressedMode change of bypass tables using SNMP MIB interface must be suppressedConfiguration channel between ICC/LSP (S8300) and Gateway (MGP) must besuppressed322 Administration of the Avaya G350 Media Gateway