Avaya MERLIN MAGIX Maintenance And Troubleshooting Manual page 194

Preventive Measures
Take the following preventive measures to limit the risk of unauthorized transfers by hackers:
Outward restrict all MERLIN MAGIX Integrated System voice mail port extension numbers.
I
This denies access to facilities (lines/trunks). Voice mail ports are, by default, outward
restricted.
As an additional security step, network dialing for all extensions, including voice mail port
I
extensions, should be processed through ARS using dial access code
SECURITY ALERT:
The MERLIN MAGIX Integrated System ships with ARS activated with all extensions set
to Facility Restriction Level 3, allowing all international calling. To prevent toll fraud,
ARS Facility Restriction Levels (FRLs) should be established using:
FRL 0 for restriction to internal dialing only
I
FRL 2 for restriction to local network calling only
I
FRL 3 for restriction to domestic long-distance (excluding area code 809 for the
I
Dominican Republic as this is part of the North American Numbering Plan, unless
809 is required)
FRL 4 for international calling
I
WARNING:
Default local and default toll tables are factory-assigned an FRL of 2. This simplifies the
task of restricting extensions: the FRL for an extension merely needs to be changed from
the default of 3.
WARNING:
Each extension should be assigned the appropriate FRL to match its calling
requirements. All voice mail port extensions not used for Outcalling should be assigned
to FRL 0 (the default setting).
Deny access to pooled facility codes by removing pool dial-out codes 70, 890—899, or any
I
others on your system.
Create a Disallowed List or use the pre-prepared Disallowed List number 7 to disallow dialing
I
0, 11, 10, 1700, 1809, 1900, and 976 or 1 (wildcard) 976. Disallowed List number 7 does not
include 800, 1800, 411, and 1411, but Avaya recommends that you add them.
Assign all voice mail port extensions to this Disallowed List. Avaya recommends
assigning Disallowed List number 7. This is an added layer of security, in case
outward restriction is inadvertently removed. (Voice messaging ports are assigned, by
default, to Disallowed List number 7.)
Customer Support Information
9
.
Toll Fraud Prevention
A-11