Lucent Technologies MERLIN LEGEND Release 6.1 Maintenance And Troubleshooting Manual page 349

MERLIN LEGEND Communications System Release 6.1
Maintenance and Troubleshooting 555-661-140
Other Security Hints
Establishing a Policy
As a safeguard against toll fraud, follow these guidelines for your MERLIN
LEGEND Communications System and voice messaging system:
Change passwords frequently (at least quarterly). Changing passwords
routinely on a specific date (such as the first of the month) helps users to
remember to do so.
Always use the longest-length password allowed.
Establish well-controlled procedures for resetting passwords.
Limit the number of invalid attempts to access a voice mailbox to five or
less.
Monitor access to the MERLIN LEGEND dial-up maintenance port.
Change the access password regularly and issue it only to authorized
personnel. Disconnect the maintenance port when not in use. (However,
this eliminates Lucent Technologies 24-hour maintenance surveillance
capability and may result in additional maintenance costs.)
Create a communications system management policy concerning
employee turnover and include these suggestions:
— Delete all unused voice mailboxes in the voice mail system.
— If a terminated employee had Remote Access calling privileges
and a personal authorization code, remove the authorization
code immediately.
— If barrier codes and/or authorization codes were shared by the
terminated employee, these should be changed immediately.
Regularly back up your MERLIN LEGEND system files to ensure a timely
recovery should it be required. Schedule regular, off-site backups.
Keep the Remote Maintenance Device turned off when not in use by
Lucent Technologies or your authorized dealer.
Limit transfers to registered subscribers only.
Issue 1
August 1998
Page A-23