CHAPTER 4. OfficeServ 7400 Functions4-8 © Samsung Business CommunicationsIntrusion Detection System (IDS)This function monitors packets on the network and detects those which can adversely affectnetwork operation, making the network more stable. IDS is divided into various types froma detection type, where a specific type of attack is detected, to the abnormal traffic detect-ing type; these are based on the Snort Rule (www.snort.org) which defines the intrusion pat-tern and types. The detected packets are sorted and processed into Close connection/port orservice disable/Alarm/log, based on the intrusion pattern and the level. In the case of analarm, the system will notify the system administrator immediately.Virtual Private Network (VPN)y VPN functionThe system provides the virtual private network function using the Internet open net-work. The VPN gateway function is based on the IPSec (IPSecurity), which is used tobuild the enterprise network with reduced cost and enforced security using the publicnetwork (such as the Internet) rather than the dedicated network.y VPN Tunnel ModeVPN functions are processed by establishing a tunnel through the VPN gateways be-tween the OfficeServ 7400 data servers. Up to 100 VPN channels are available for oneVPN.y PPTPPPTP is a tunnelling protocol for using the IP-based network. PPP encapsulates thedata by wrapping the data with a PPP header. PPTP reconfigures the packets by addinga Generic Routing Encapsulation (GRE) header and IP header to this so that the pack-ets can be transmitted via the IP network.y L2TPL2TP protocol combines PPTP and Layer 2 Forwarding (L2F). It encapsulates a userPPP frame (a Layer 2 frame) in an additional message called L2TP and then transmitsit to the device connected to the public network, such as IP, X.25, frame relay, orAsynchronous Transmission Mode (ATM).4.2.4 Data Server Applications FunctionsDHCPThe OfficeServ 7400 can assign the IP address using DHCP. When using the DHCP serverin another subnet, the OfficeServ 7400 supports the DCCP relay function. The IP address ofequipment connected to the OfficeServ 7400 can be managed easily.SIP Aware ALG (SIP Application Gateway)This function is used for recreating packets for smooth communication by checking the SIPsignal process packets according to the NAT/PT table in the data server. When using thesystem data server, SIP equipment can operate regardless of the packet blocking caused bythe firewall or the NAT/PT conversion.