Technical information

Voice Messaging Systems
6-38 Issue 7 June 2001
Protecting the AUDIX Voice Power System
The AUDIX Voice Power System provides both automated attendant and voice
mail functionality. The automated attendant feature answers incoming calls and
routes them to the appropriate department, person, or mailbox. The voice mail
feature provides call coverage to voice mailboxes along with a variety of voice
messaging features.
Unauthorized persons concentrate their activities in two areas with the AUDIX
Voice Power System:
 They try to transfer out of the AUDIX Voice Power System to gain access to
an outgoing trunk and make long distance calls.
 They try to locate unused or unprotected mailboxes and use them as
dropoff points for their own messages.
Protecting Passwords
The AUDIX Voice Power System offers password protection to help restrict
unauthorized access. Subscribers should use a maximum length password and
should change it routinely. Passwords can be up to 9 digits. See ‘‘Administration /
Maintenance Access’’ on page 3-4 and ‘‘General Security Measures’’ on page 3-8
for secure password guidelines. See Chapter 13 for information on how to change
passwords.
Security Tips
The following security measures assist you in managing features of the AUDIX
Voice Power System to help prevent unauthorized use.
 Avaya recommends setting Transfer to Subscribers Only to yes. This limits
transfers to only those valid switch extensions for which a mailbox is
assigned.
 If you have Release 1.0 of the AUDIX Voice Power System, implement all
appropriate security measures on the switch side.
 Require employees who have voice mailboxes to use passwords to protect
their mailboxes. See ‘‘Administration / Maintenance Access’’ on page 3-4
and ‘‘General Security Measures’’ on page 3-8 for secure password
guidelines.
 Make sure subscribers change the default password the first time they log
in to the AUDIX Voice Power System.
 Have the AUDIX Voice Power System Administrator delete unneeded
voice mailboxes from the system immediately.
 On the System Parameters form, use the maximum number of digits
allowable for extension entry (six). This will make it more difficult for
criminals to guess the login and password combinations of your users.