Avaya MERLIN MAGIX Maintenance And Troubleshooting Manual page 193

Maintenance and Troubleshooting
Preventive Measures
Take the following preventive measures to limit the risk of unauthorized access by hackers:
Provide good physical security for the room containing your telecommunications equipment
I
and the room with administrative tools, records, and System Manager information. These
areas should be locked when not attended.
Provide a secure trash disposal for all sensitive information, including telephone directories,
I
call accounting records, or anything that may supply information about your communications
system. This trash should be shredded.
Educate employees that hackers may try to trick them into providing them with dial tone or
I
dialing a number for them. All reports of trouble, requests for moving extensions, or any other
administrative details associated with the MERLIN MAGIX Integrated System should be
handled by one person (the System Manager) or within a specified department. Anyone
claiming to be a telephone company representative should be referred to this person or
department.
No one outside of Avaya needs to use the MERLIN MAGIX Integrated System to test facilities
I
(lines/trunks). If a caller claims to be an Avaya employee, the System Manager should ask for
a telephone number where the caller can be reached. The System Manager should be able to
recognize the number as an Avaya telephone number. Before connecting the caller to the
administrative port of the MERLIN MAGIX Integrated System, the System Manager should feel
comfortable that a good reason to do so exists. In any event, it is not advisable to give anyone
access to network facilities or operators, or to dial a number at the request of the caller.
Any time a call appears to be suspicious, call the Avaya Helpline at 1 800 628-2888 (fraud
I
intervention for System 25, PARTNER
Customers should also take advantage of Avaya monitoring services and devices, such as the
I
NetPROTECT
Terminal with Watchdog. Call 1 800 638-7233 to get more information on these Avaya fraud
detection services and products.
Security Risks Associated with Transferring
through Voice Messaging Systems
Toll fraud hackers try to dial into a voice mailbox and then execute a transfer by dialing *T . The
hacker then dials an access code (either 9 for Automatic Route Selection or a pooled facility code),
followed by the appropriate digit string to either direct dial or access a network operator to
complete the call.
All extensions are initially, and by default, restricted from dial access to pools. In order for
an extension to use a pool to access an outside line/trunk, this restriction must be
removed.
Toll Fraud Prevention
A-10
®
family of fraud-detection services, CAS with HackerTracker
6
®
and MERLIN Systems).
6
®
, and CAT