Enhancing System Security
Basic Security
Administrator’s Guide for Avaya Communication Manager
321
November 2003
11
Enhancing System Security
Basic Security
Keeping your system secure
The following is a partial list you can use to help secure your system. It is not intended as a
comprehensive security checklist. See the Avaya Toll Fraud and Security Handbook for more information
about these and other security-related features.
•
Secure the system administration and maintenance ports and/or logins on Avaya Communication
Manager using the
Access Security Gateway
. This optional password authentication interface
program is provided to customers with maintenance contracts.
•
Activate Security Violations Notification to report unsuccessful attempts to access the system.
Security violations notification
lets you automatically disable a valid login ID following a
security violation involving that login ID and disable remote access following a security violation
involving a barrier code or authorization code.
•
Use the
list history
command to determine if unauthorized changes have been made to the
system. To assist in identifying unauthorized use of the system, the History report lists each time a
user logs on or off the system. See the Reports for Avaya Communication Manager for more
information about this report.
•
Secure trunks using
Automatic Route Selection (ARS)
,
Class of Restriction (COR)
, Facility
Restriction Levels (FRLs) and Alternate Facility Restriction Levels (AFRLs), Authorization
Codes,
Automatic Circuit Assurance (ACA)
, and Forced Entry of Account Codes (see
Call detail
recording
on page 1433 for more information).
Activate Enhanced Call Transfer for your voice messaging system, if available. This limits transfers to
valid extensions, but you also need to restrict transfers to extensions that may offer dial tone to the caller,
such as screen extensions.