Nortel CallPilot 100 User Manual page 49

Norstar
Security
Table 17 Security Features and Benefits
Feature
Centrex Transfer Restrictions
(Toll Fraud Protection)
Change of Operator Password
Forced Password Change
Description
Provides toll fraud protection
for Centrex installations using
the Centrex Transfer feature to
transfer calls to other Centrex
extensions. If the Centrex
Transfer feature is enabled, the
extension does not have to be
located on the Norstar switch.
If the requested extension is
not a valid Norstar extension,
and the Centrex Transfer
feature is enabled, CallPilot will
instruct the Norstar to perform
a "hook-flash transfer" of the
caller to the given extension
number. This feature is
valuable when the Norstar is
used in a Centrex installation,
but presents a possible
security problem, in that a
malicious caller or user could
be "transferred" to an
extension such as 9011, which
has the effect of transferring
the caller to the international
operator, with resulting
charges incurred by the owner
of the Centrex line.
To improve security, a
password can be changed
from default "OPERATOR"
(67372867) to any four to
eight-digit sequence.
Requires mailbox owners to
periodically change their
passwords. The intervals can
be set for either 0, 30, 60 or 90
days (0 is interpreted as never
changing the password). If the
password has expired, it does
not prevent access to the
mailbox, but the user is
prompted that the password
has expired and the password
must be changed.
50
Benefits
The Centrex Transfer
Restrictions feature counters
this security exposure by
specifying a set of dialing
sequences that will be denied
in all cases when CallPilot
requests a Centrex transfer.
Personally chosen passwords
are easier to remember and
more secure.
Improves security.
Messaging