Instruction manual

Voice messaging systems
7-56 Issue 9 May 2003
Security tips
■ Monitor SMDR reports and/or Call Accounting System reports for outgoing
calls that might be originated by internal and external abusers.
■ For PARTNER MAIL System mailboxes, exercise caution when assigning a
class of service (C)OS).
— Assign a COS that provides outcalling privileges (for PARTNER
MAIL Release 1, assign 4, 5, 6, or 8; for PARTNER MAIL Release 3,
assign 3,4, or 6) only to those mailboxes requiring these privileges.
— Assign COSs 1-6 (for PARTNER MAIL Release 1) or 1-4 and 20-23
(for PARTNER MAIL Release 3), transfer permitted, only to
mailboxes for which the mailbox number is a real extension on the
PARTNER II Communications System. Use COSs 7-9 (for
PARTNER MAIL Release 1) or 5, 6, and 15-19 (for PARTNER MAIL
Release 3), transfer not permitted, for all mailboxes for which there
is no corresponding extension on the PARTNER II Communications
System.
— If outcalling is not used, assign system mailboxes (90 to 98, and
9997 to 9999) to COS 7 or 9 (for PARTNER MAIL Release 1) or 5,
15-17,18, 19 (for PARTNER MAIL Release 3).
■ Require employees who have voice mailboxes to use passwords to protect
their mailboxes.
■ Require the system administrator and all voice mailbox owners to change
their password from the default.
■ The system administrator can set the minimum password length to any
value from 0-15 digits. The default value is six digits. Every subscriber’s
mailbox password and the system administration password must be at
least six digits.
NOTE:
A minimum password length of at least six digits is strongly
recommended. The shorter the minimum password length, the more
vulnerable your system is to abuse by unauthorized persons. Choose
the largest acceptable minimum length in order to maximize the
security of your system.
■ Instruct employees not to make a statement, in their recorded greeting,
indicating that they will accept collect calls.
■ Have the voice messaging system administrator delete unneeded voice
mailboxes from the system immediately.
■ The Security Violation Notification feature enables the system
administrator to choose to be warned about possible mailbox break-in
attempts. The system administrator can choose from the following options: