Technical information

Messaging 2000 Voice Mail System
Issue 7 June 2001
6-53
 Securing the M2000 System PC
It is imperative that the M2000 system PC be protected from unauthorized
system management access. Unauthorized access to the M2000 system
PC could result in system setup changes, loss of mailboxes and
messages, and database corruption. The best way to prevent unauthorized
system management access to the M2000 system PC is to store the PC in
a secure area, such as a locked room.
If the M2000 system PC cannot be stored in a secure area, the built-in PC
security features, such as passwords, must be used to provide a degree of
protection. Refer to your PC documentation for information on security
features available on the PC.
Note that before implementing security features on the PC, an Avaya
technical support representative should be contacted to assure that these
features will not disrupt M2000 system performance.
 Utilizing Phone System Security Features
Avaya communication systems have security features that allow one to
help prevent unauthorized access to system ports. An Avaya system
representative should be contacted to determine what security features are
available for the Merlin Legend system and how to implement them.
 Using Supervisor Passwords to Restrict System Management Access
Access to M2000 system management features is password-protected.
There are two levels of system manager passwords. Level 2 access allows
a system manager to create, edit, and delete mailboxes; access reports
and system statistics; create and specify prompts; maintain network nodes;
and create V-Trees. Level 3 access allows a system manager to perform all
level 2 tasks, to set system parameters using the System Setup module,
configure greetings by port, modify classes of service, and configure
multilingual M2000 systems.
It is recommended that at least a 6-digit password be used for both the
level 2 and level 3 passwords. The longer the level 2 and level 3
passwords, the more difficult it becomes for someone to guess them. It is
also recommended that all supervisor passwords be changed on a regular
basis to further protect against unauthorized system manager access.
 Using the Auto Logoff Feature to Restrict System Management Access
The M2000 system’s “auto logoff feature” allows one to specify the
maximum amount of time a system management session can remain
inactive before the M2000 system automatically logs out that user and
terminates the session. This feature helps prevent unauthorized system
manager access. To set the auto logoff, the number of minutes of inactivity
allowed before logoff must be entered in the “Logoff In_____ Minutes” field
on the Supervisor Password dialog box when logging into the system.