Other Security Hints - Avaya MERLIN MAGIX Maintenance And Troubleshooting Manual

Maintenance and Troubleshooting
It is strongly recommended that customers invest in security adjuncts, which typically use
I
one-time passcode algorithms. These security adjuncts discourage hackers. Since a secure
use of the Remote Access feature generally offers savings over credit-card calling, the break-
even period can make the investment in security adjuncts worthwhile.
If a customer chooses to use the Remote Access feature without a security adjunct, then
I
multiple barrier codes should be employed, with one per user, if the system permits. The
MERLIN MAGIX Integrated System permits a maximum of 16 barrier codes.
The maximum length should be used for each barrier code, and should be changed
I
periodically. Barrier codes, like passwords, should consist of a random, hard-to-guess
sequence of digits. The MERLIN MAGIX Integrated System permits a barrier code of up to 11
digits.

Other Security Hints

Make sure that the Automated Attendant selector codes do not permit outside line selection.
Multiple layers of security are always recommended to keep your system secure.
A number of measures and guidelines that can help you ensure the security of your
communications system and voice messaging system follows:
Educating Users
Everyone in your company who uses the telephone system is responsible for system security.
Users and attendants/operators need to be aware of how to recognize and react to potential
hacker activity. Informed people are more likely to cooperate with security measures that often
make the system less flexible and more difficult to use.
Never program passwords or authorization codes onto Auto Dial buttons. Display telephones
I
reveal the programmed numbers and internal abusers can use the Auto Dial buttons to
originate unauthorized calls.
Discourage the practice of writing down barrier codes or passwords. If a barrier code or
I
password needs to be written down, keep it in a secure place and never discard it while it is
active.
Instruct operators and attendants to inform tell their System Manager whenever they answer a
I
series of calls where there is silence on the other end or the caller hangs up.
Advise users who are assigned voice mailboxes to frequently change personal passwords and
I
not to choose obvious passwords.
Ensure that the System Manager advises users with special telephone privileges (such as
I
Remote Access, Outcalling, and Remote Call Forwarding) of the potential risks and
responsibilities.
Be suspicious of any caller who claims to be with the telephone company and wants to check
I
an outside line. Ask for a callback number, hang up, and confirm the caller's identity.
Other Security Hints
A-14
6
6