AT&T MERLIN LEGEND Release 3.1 System Manager's Manual page 363

Customer Support Information
The Remote Administration and Maintenance feature, through proper
administration, can help you reduce the risk of unauthorized persons gaining
access to the network. However, telephone numbers and access codes can be
compromised when overheard in a public location, are lost through theft of a
wallet or purse containing access information, or through carelessness (for
example, writing codes on a piece of paper and improperly discarding them).
Additionally, hackers may use a computer to dial an access code and then
publish the information to other hackers. Substantial charges can accumulate
quickly. It is your responsibility to take appropriate steps to implement the
features properly, evaluate and administer the various restriction levels, and
protect and carefully distribute access codes.
Under applicable tariffs, you will be responsible for payment of toll charges.
AT&T cannot be responsible for such charges and will not make any allowance
or give any credit resulting from unauthorized access.
To reduce the risk of unauthorized access through Remote Administration and
Maintenance, please observe the following procedures:
The System Administration and Maintenance capability of a Hybrid/PBX
or Key system is protected by a password.
— Change the default password immediately.
— Continue to change the password regularly.
— Only give the password to people who need it and impress upon them
the need to keep it secret.
— If anyone who knows the password leaves the company, change the
password immediately.
If you have a special telephone line connected to your Hybrid/PBX or Key
system for Remote Administration and Maintenance, you should do one
of the following:
— Unplug the line when it is not being used.
— Install a switch in the line to turn it off when it is not being used.
— Keep the Remote Administration and Maintenance telephone number
secret. Only give it to people who need to know it, and impress upon
them the need to keep it a secret. Do not write the telephone number
on the Hybrid/PBX or Key system, the connecting equipment, or
anywhere else in the system room.
If your Remote Administration and Maintenance feature requires that
someone in your office transfer the caller to the Remote Administration
and Maintenance extension, you should impress upon your employees
the importance of only transferring authorized individuals to that
extension.
A–22
System Manager's Guide