Mitel MiVOICE BUSINESS, Engineering Manualline

Page: 365 / 381

VoIP Security
351
WORM AND VIRUS PROTECTION
The 3300 ICP uses an embedded real-time operating system. This system is less susceptible
to virus or worm attacks that target traditional applications and their OS services because it
provides a very small base of common functionality with general purpose operating systems
such as Microsoft Windows, Linux and UNIX. This lack of common functionality means that
VxWorks is not affected by the viruses and worms typically found on networks and the Internet.
This also makes it difficult for an attacker to write a virus targeted at generic VxWorks
implementations.
Application servers based on Windows NT/2000 must be properly maintained with current
operating system security updates. Mitel products based on Windows NT/2000 include the
Contact Center Solutions, Speech Server and Messaging Server systems and Enterprise
Manager. These key application servers must be maintained with the latest in Microsoft security
updates and worm protection.
PREVENTION OF TOLL ABUSE
Any communication system that has a combination of Direct Inward System Access (DISA)
integrated auto attendant or RAD groups, and peripheral interfaced auto attendant or voice
mail can be susceptible to toll abuse. Therefore it is important to assign appropriate telephone
privileges and restrictions to devices. In addition, public telephones should be denied toll access
unless authorized through an attendant.
The 3300 ICP system has comprehensive toll control as an integral part of the call control. It
lets you restrict user access to trunk routes and/or specific external directory numbers. It also
provides Class of Restriction (COR) and Class of Service (COS) features that can substantially
reduce the risk of toll abuse.
As a deterrent to toll abuse by internal callers, Station Message Detail Recording (SMDR) can
be used to track calls from within your company, providing detailed information such as the
originating extension number, time, duration, and number dialed. SMDR record access should
be restricted as with any other function.
SECURE MANAGEMENT INTERFACES
The 3300 ICP includes a fully integrated set of management tools designed to install, manage,
and administer 3300 ICP systems. Three levels of access are provided in order to meet the
needs of system technicians, group administrators, and the desktop telephony users
themselves. All of these integral management tools use Secure Socket Layer (SSL) security
for data encryption. User access to the management tools is controlled by a login and password.
Once a user logs into the 3300 ICP, the system displays a menu of the specific tools to which
they have been granted access. Mitel also offers the Management Access Point to provide
secure remote administration for VPN or dial-up access.
UC360 Yes
MiCollab Client Server If on PC
MiCollab Client Softphone If on PC
Table 84: 802.1X support by device
DEVICE 802.1X SUPPORT