Avaya Communication Manager Administrator's Manual page 429

Note:
Avaya recommends that you permanently disable Remote Access using the
Note:
change remote-access command. If you do permanently disable Remote
Access, the code is removed from the software. Avaya charges a fee to restore
the Remote Access feature.
3. If you use Remote Access, but only for internal calls, change announcements or remote
service observing.
a. Use a 7-digit barrier code.
b. Assign a unique COR to the 7-digit barrier code.
The unique COR must be administered where the FRL is 0, the Calling Party
Restriction field is outward, the Calling Permissions field is n on all unique Trunk
Group COR.
c. Assign Security Violation Notification Remote to 10 attempts in 2 minutes.
d. Set the aging cycle to 90 days with 100 call limit per barrier code.
4. If you use Remote Access to process calls off-net or in any way access the public network:
a. Use a 7-digit barrier code.
b. Assign a unique COR to the barrier code.
c. Restrict the COR assigned to each barrier code by FRL level to only the required calling
areas to conduct business.
d. Set the aging cycle to 90 days with 100 call limit per barrier code.
e. Suppress dial tone where applicable.
f. Administer Authorization Codes.
g. Use a minimum of 11 digits (combination of barrier codes and authorization codes).
h. Assign Security Violation Notification Remote to 10 attempts in 2 minutes.
5. If you use vectors:
a. Assign all Vector Directory Numbers (VDN) a unique COR. See Avaya Call Center
Release Automatic Call Distribution (ACD) Guide, 07-300478, and Avaya Call Center
Release Call Vectoring and Expert Agent Selection (EAS) Guide, 07-300477, for more
information.
System Security Checklist
Issue 2.1 May 2006 429