Upgrading Your Existing System; Security Considerations - Avaya DEFINITY Manual

Overview of the MAPD

Upgrading Your Existing System

If you want to upgrade your DEFINITY system with the MAPD system to a
non-supported DEFINITY system, you must first upgrade it with a field
maintenance release of R6.1 or later software.
NOTE:
For MAPD support on ProLogix, you must upgrade to field release 6.3.2 or
later.
This software can be configured in either V5 or V6 mode on the Customer Options
Systems Parameters Administration Form. If you upgrade from a G3V4 DEFINITY
system or earlier releases, this will be a hardware as well as a software upgrade.
Contact the Technical Service Center at 1 800 248-1234 for more information.
(You will be prompted for your Social Security Number and 4-digit PIN.)

Security Considerations

Toll fraud is an unauthorized use of a company's telecommunications system by
an unauthorized third party. The MAPD system offers the following security
features to help prevent toll fraud and protect against unauthorized users gaining
access to the system and learning the contents of the calls:
Password protection — The system requires administrators to provide a
password before access is granted. Also, when the system is installed,
default passwords are changed to help guard against unauthorized access.
Audit trail — The MAPD system provides selective logging of an audit trail
of operations carried across the interface. Users can view a set of Security
Logs to learn such information as failed login attempts, unauthorized client
access attempts, time of the MAPD system resets, and commands
executed from Administration/Maintenance screens.
This system does not support an encrypted/secured protocol.Therefore:
It is possible for a criminal hacker to "spoof" the system by reverse
engineering the protocol and then "impersonating" a valid client.
Telnet transmissions of logins, passwords, and administrative information
cannot be guaranteed to be secure.
This is more likely to happen if the hacker has physical access to the Ethernet
LAN or to a system attached to the Ethernet LAN that supports the MAPD system.
The customers are encouraged to help protect the system and reduce the
possibility of toll fraud by attaching the system assembly and its clients to an
isolated, physically secure Ethernet (not connected to any other Ethernet).
1-8 Issue 3 May 2002