Technology With Vision September 18, 2002 Hillside, NJ Chaim E. Fried Sr. Network Architect, Firewall integration

A Service Provider Approach: The Key Concerns: –Vendor Agnostic –Ease of Provisioning –Ease of Use –Cost of Implementation –Billing –May not break enhanced services(far-end camera control, T.120)

Available Options: Firewall Aware application Protocol Aware Firewall Tunneling Solutions

Which have we implemented? All of them!!

What kind of Customers do we have and what are they asking for? One endpoint, no data- Concerned about who may be calling into their system, no data to protect. Many Endpoints, no data- Again, concerned about who may have access to their endpoint configurations and ability to terminate calls. Integrated DATA LAN, many endpoint- Concerned about protecting valuable data, as well as above mentioned issues.

Dedicated Video/ No DATA customers: SINGLE END-POINT: –Firewall aware applications works well for simplest most predictable environments –H.323 aware Firewalls Works well in scenarios where service provider may control customer firewall –Tunneling Solutions Works well in strictest security setting, where service provider may not access firewalls

Dedicated Video/ No DATA customers Multiple END-POINT: –Firewall aware applications works well for simplest most predictable environments Multiple sessions may not fare wall on your routers Confusing configurations. –H.323 aware Firewalls Works well in scenarios where service provider may control customer firewall –Tunneling Solutions Works well in strictest security setting, where service provider may not access firewalls

Integrated LAN Customers Data security is key concern: –Firewall aware applications works well for simplest most predictable environments –Application aware Firewall Criticality of device in network architecture makes it difficult to support –Tunneling Solution Security concern with service provider managed server in customer DMZ. May increase call latency due to the expense of putting a terminating proxy at EVERY service provider pop.

What do our customers think? Customers using firewall aware application solutions, likely don’t even know that it’s there Customers on the Tunneling solution view it as an in-house Gatekeeper BOTTOM LINE: IT’S TRANSPARENT!