Table Of Contents

Preface

Modification History

Scope

Obtaining Documentation, Obtaining Support, and Security Guidelines

Preface

---

July 10, 2007 OL-5327-03

This document details the security packages applied to the Cisco BTS 10200 Softswitch. This document provides service providers and end users with a description of the security packages used on the Cisco BTS 10200 Softswitch to reduce the effectiveness of external attacks by "denial of service" or intrusion attempts.

This is an umbrella document for many general Cisco BTS 10200 Softswitch system extensions and improvements in the area of security.

---

Caution Altering these security packages after the delivery of the Cisco BTS 10200 Softswitch can create security issues in your network.

---

This document is organized as follows:

•Chapter 1, "Behaviors and Attributes"

•Chapter 2, "External Interfaces"

•Chapter 3, "Vulnerabilities in H.323 Message Processing"

•Chapter 4, "Authentication, Authorization and Accounting Support (Release 4.4)"

•Chapter 5, "Reduced Solaris Packages"

This document also provides a glossary and an index.

Modification History

Table 1 details the Cisco BTS 10200 Softswitch System Security modification history.

Table 1 System Security Modification History 

Release	Modification
4.5	Added Solaris 10 section to Chapter 5. Added location and acceptability of sudo to page 1-2.
4.4	Added the following: •AAA Support—Chapter 4 •Reduced Solaris packages—Chapter 5
4.4.0/1	Added Reduced Solaris Packages section to Chapter 5.
4.2	No change.
4.1	System Security was introduced.

Scope

These security measures affect all nodes in the Cisco BTS 10200 Softswitch. They also impact the external adapter interfaces of the Element Management System (EMS) application within the Cisco BTS 10200 Softswitch including network access, user level authorization, authentication, and management.

Obtaining Documentation, Obtaining Support, and Security Guidelines

For information on obtaining documentation, obtaining support, providing documentation feedback, security guidelines, and also recommended aliases and general Cisco documents, see the monthly What's New in Cisco Product Documentation, which also lists all new and revised Cisco technical documentation, at:

http://www.cisco.com/en/US/docs/general/whatsnew/whatsnew.html