Avaya Octel 50 Installation Manual page 199

Installation Overview
When these parameters are disabled, callers dialing an extension that has not been
assigned a mailbox hear, " <Mailbox number> is an invalid extension number. Please
enter the extension number of the person you would like to speak with."
It is recommended that these parameters are disabled. For additional information on
these parameters, see Chapter 8, "Setting Up the System."
Impeding Callers from Accessing the Quick Assist Maintenance
Mailbox
When you run Quick Assist in a recover mode, the system can automatically assign
messages with invalid header information to a default mailbox. This allows the system
manager to then copy the messages to the correct subscriber mailbox. The default for
this maintenance mailbox is the last mailbox number available on the system. For
example, on a system with four-digit mailboxes, mailbox 9999 is used.
Since it is easier for an outside caller attempting to gain unauthorized mailbox access to
guess a mailbox number such as 9999, it is recommended that you specify a system
mailbox in which you want unattached messages to be placed. In addition, it is strongly
recommended that this mailbox be assigned a long password that cannot easily be
guessed by an outside caller attempting to access the system.
When you run Quick Assist in recover mode from the Quick Assist icon in the program
folder, use the Mailbox to Receive Unattached Messages field on the Recover Files dialog
box to specify a mailbox in which to place messages with invalid header information.
For additional information on using Quick Assist, see the topic, "Using Quick Assist,"
earlier in this chapter.
Requiring Passwords at Least One Digit Longer than Mailbox
Numbers
The longer the passwords assigned to system mailboxes, the harder it is for a caller to
guess them. The Minimum Length of Password parameter under the General parameters
in System Setup allows you to set the least number of digits required in a mailbox
password. It is recommended that you set this parameter at least one digit higher than the
length of the system's mailbox numbers. For example, if the system uses four-digit
mailboxes, it is recommended that the Minimum Length of Password parameter be set to
at least 5. Remember when setting this parameter to balance system security against
ease of use for the subscribers. Setting this parameter too high may make it difficult for
system subscribers to remember their passwords.
For additional information on using this parameter, see Chapter 8, "Setting Up the
System."
Encouraging Subscribers to Regularly Change Their Passwords
Encouraging subscribers to regularly change their passwords helps prevent outside
callers from determining subscriber passwords and gaining unauthorized access to
system mailboxes.
Using Extended Password Security
Extended password security requires subscribers to press <#> after entering their
passwords to access their mailboxes. If subscribers do not press <#>, the system pauses
before allowing mailbox access. The Enable Extended Password Security parameter
under Subscriber parameters in System Setup determines whether the system waits for
Octel 50 Installation Guide
Protecting Your System
12-15