In theВ Kerio OperatorВ administration interface, go to Configuration > Advanced Options.Also, encryption results in more resources being utilized, so performance may be impacted. IMPORTANT:В Encryption is bound to a specific storage device, so if you plan to change the hardware you must first disable encryption. You can enable encryption to ensure thatВ Kerio OperatorВ encrypts recorded calls, voicemail messages, logs, and configuration before writing it to the disk. Note:В If the options are unchecked, no restrictions are set. It is recommended to restrict the SIP protocol solely to your internal network and external IP addresses of your SIP provider.ДЇor security reasons, it is recommended to restrict automatic phone provisioning solely to your internal network because TFTPВ sends configuration data as plain text.ДЇor security reasons, it is recommended to restrict communication solely to your internal network.ДЇor security reasons, it is recommended to restrict communication solely to your internal network and IP addresses where monitoring servers are running. Bear in mind that all the PBXВ users should be allowed to connect toВ KerioВ Phone at least from their own workstation. If you want to restrict connections toВ Kerio OperatorВ administration and softphone, check this option and choose an IP group with addresses from which access will be allowed. You can configure the integrated firewall options in the section Configuration > Network > Firewall.

Go to ConfigurationВ > Definitions > IP Address Groups.Prepare groups of IP addresses which you wish to allow for individual services (create them in Kerio Operator's administration console): Service (default port)ДЄllow if integration withВ Kerio Connect is enabled and there is a firewall betweenВ Kerio Connect andВ Kerio Operator.ДЄllow if you use mapping from Active Directory or Open Directory and there is a firewall between the directory service andВ Kerio Operator.ДЄllow if you wish users to be able to connect toВ KerioВ Phone from the Internet.ДЄllow if you wish users to be able to connect to the administration interface from the Internet.Д¬onfiguring firewall integrated withВ Kerio Operator Certain ports need to be opened (or mapped) on the firewall. Kerio OperatorВ is usually protected by a firewall (in your local network or on the Internet). Restrict international outgoing calls to countries where they rarely call.Using special rules, forbid international outgoing calls to countries users do not communicate with.Restrict the number of attempts to enter SIP passwords.Restrict communication on the integrated firewall inВ Kerio Operator.Restrict communication on the firewall to necessary IP addresses and ports, especially if the PBX runs on the Internet.Administrators can take these measures to secureВ Kerio Operator: This article covers the process to properly secure Kerio Operator.

Kerio connect configuration