Security; Toll Control; Authorized Access - Mitel 3300 ICP General Information Manual

3300 ICP General Information Guide

Security

Toll Control

Any communications system that has a combination of Direct Inward System Access (DISA),
integrated auto attendant, or RAD groups and peripheral interfaced auto attendant or voice mail can
be susceptible to toll abuse; therefore, it is important to assign appropriate telephone privileges and
restrictions to devices. In addition, telephones in public places (such as a lobby) should be denied toll
access unless authorized through an attendant.
The 3300 ICP system has comprehensive toll control as an integral part of the call control. It lets you
restrict user access to trunk routes and/or specific external directory numbers. It also provides Class
of Restriction (COR) and Class of Service (COS) features that can substantially reduce the risk of toll
abuse.
Features that have a risk of toll abuse are
•
Public Network to Public Network Connection Allowed - permits or restricts trunks the connection
of trunks.
•
Call Forwarding External Destination - allows or restricts extension user to forward calls to
external trunks
•
Automatic Route Selection - allows or restricts, on a per user or system basis, access to directory
numbers based on a users job function (note: 1-800 calls are usually free calls, but some central
offices can allow the reversal of 800 charges so that they are toll calls for your company).
As a deterrent to toll abuse by internal callers, Station Message Detail Recording (SMDR) can be
used to track calls from within your company, providing detailed information such as the originating
extension number, time, duration, and number dialed. SMDR record access should be restricted as
with any other function.

Authorized Access

Authorized access to the system tools provides protection for various administration commands from
unauthorized users. The Web-based system tools are
•
System Administration Tool
•
Group Administration Tool
•
Desktop Tool.
Each user is given a login name, password, extension number, and language preference. All systems
should have all levels of passwords and login names altered from the default value; moreover, these
passwords should be changed periodically.
Ensure that any voice mail systems connected directly to modems employ a surveillance device.
Also, since most voice mail systems require a password to gain access, make sure that this password
is difficult to guess and is changed frequently. Any user no longer authorized to use the system
should have his/her password privileges revoked immediately.
12