Instruction manual

Product security checklists
17-52 Issue 9 May 2003
Table 17-20. MSM security checklist
Y/N
1
Note N/A
System Administration
Customer advised of all logins under their
control. Passwords changed from factory
defaults.
Passwords are customer-entered,
maximum length, unique alphanumeric
words.
NETCON access restricted by
COR-to-COR restrictions.
NETCON channels secured
Non-DID extensions used for NETCON
ports
Unused NETCON channels removed
Login Security Violation Notification
feature active
■ Logins automatically disabled after
security violation
■ Login security violations monitored 24
hours per day
Login permissions customized
Unused logins removed (“remove login”
command or disabled [passwords
VOIDed])
Unique customer logins used
Password aging activated
Logins temporarily disabled when not
needed (“disable/enable” commands)
Customer access to INADS port disabled
Remote Access
Remote access permanently disabled if
not used (G3V2 and North American Dial
Plan loads)
Continued on next page