Instruction manual

Voice messaging systems
7-42 Issue 9 May 2003
Protecting passwords
The INTUITY AUDIX System offers password protection to help restrict
unauthorized access. Subscribers should use the longest feasible password
length and should change it routinely. Passwords can be up t o 15 digits, and you
can specify the minimum number of digits required. Use a minimum of five digits,
and a length at least one digit longer than the extension number length. See
‘‘Administration / maintenance access’’ on page 4-4
and ‘‘General security
measures’’ on page 4-8 for secure password guidelines. See Chapter 14 for
information on how to change passwords.
Security tips
■ At the switch or media server, assign toll restrictions to voice message
system and automated attendant ports.
■ If you do not use the outcalling features of the voice messaging system,
restrict the outward calling capability of all voice ports.
■ Use a dial plan that does not allow extensions beginning with the same
digits as ARS, TAC, or verification and test codes.
■ Inform all system operators that they are not to dial outside calls. Request
that operators report all attempts to bypass switch restrictions to the
telecommunications department for repairs or to the corporate security
office for investigation.
■ Restrict the numbers for outcalling with a disallowed list.
■ Do not use default initial passwords that follow any scheme. Have a list of
random passwords and select one when you create the mailbox. Require
that the mailbox owner personally appear at the corporate security office or
telecommunications office to obtain the initial password. Go over the
subscriber password guidelines with the subscriber when you give out the
initial password.
■ Make sure subscribers change the initial password the first time they log in
to the AUDIX system by making the initial password shorter than the
minimum password length.
■ Use the password aging feature so that users must change their
passwords monthly.
■ Discourage the practice of writing down passwords, storing them, or
sharing them with others.
■ Inform employees on how to report suspected toll fraud to the corporate
security office.
Security measures
The following are suggested security measures to be used with the INTUITY
AUDIX Voice Messaging System.