Instruction manual

Security risks
4-14 Issue 9 May 2003
Prevent exit from
automated
attendant service
Limit calling
permissions
COR (G1, G3,
and System 75
only)
Set low FRL
Set calling party
restrictions or
outward
restrictions
Set COR to COR
restrictions
COS (G2 and
System 85 only)
Set COS
restrictions
Limit exit to
outgoing trunks
FRL Set lowest
possible value
Restrict outgoing
toll calls
Toll Analysis (G1,
G3, and System
75 only)
Identify toll areas
to be restricted
1. Methods are listed in decreasing order of importance, relative to security.
2. Basic transfer with Transfer Restriction = Digits allows access to dial tone.
Table 4-2. Security goals: MERLIN II, MERLIN LEGEND, MERLIN Plus, and
System 25 communications systems
Security Goal Method Security Tool Steps
Protect Remote
Access feature
Limit access Barrier codes Set max length
Authorization
codes (MERLIN
LEGEND
Communications
System R3 only)
Set max length
Turn off Remote
Access when not
needed
Remote access
administration
Deactivate
feature
Continued on next page
Table 4-1. Security goals: DEFINITY ECS, DEFINITY communications
systems, System 75 and System 85 — Continued
Security Goal Method Security Tool Steps
Continued on next page