Lucent Technologies MERLIN LEGEND Release 6.1 Maintenance And Troubleshooting Manual page 341

MERLIN LEGEND Communications System Release 6.1
Maintenance and Troubleshooting 555-661-140
Toll Fraud Prevention
Customers should also take advantage of Lucent Technologies
monitoring services and devices, such as the NetPROTECT
fraud detection services, CAS with HackerTracker
with Watchdog. Call 1 800 638-7233 to get more information on these
Lucent Technologies fraud detection services and products.
Security Risks Associated with Transferring
through Voice Messaging Systems
Toll fraud hackers try to dial into a voice mailbox and then execute a transfer by
dialing . The hacker then dials an access code (either
Selection or a pooled facility code) followed by the appropriate digit string to
either direct dial or access a private network operator to complete the call.
NOTE:
In Release 3.1 and later systems, all extensions are initially and by default
restricted from dial access to pools. In order for an extension to use a
pool to access an outside line/trunk, this restriction must be removed.
Preventive Measures
Take the following preventive measures to limit the risk of unauthorized
transfers by hackers:
Outward restrict all MERLIN LEGEND voice mail port extensions. This
denies access to facilities (lines/trunks). In Release 3.1 and later
systems, voice mail ports are by default outward restricted.
As an additional security step, private network dialing for all extensions,
including voice mail port extensions, should be processed through ARS
using dial access code .
!
SECURITY ALERT:
The MERLIN LEGEND system ships with ARS activated with all
extensions set to Facility Restriction Level 3, allowing all international
calling. To prevent toll fraud, ARS Facility Restriction Levels (FRLs)
should be established using:
Issue 1
August 1998
Page A-15
SM
family of
®
, and CAT Terminal
for Automatic Route