WTI PollCat NetLink, User Manual

Page: 91 / 256

8. The Alarm Filters
(Toll Fraud Detection)
The Alarm Filters allow NetLink to monitor call records, and
check for characteristics of Toll Fraud or other forms of phone
abuse. When suspect calls are detected, NetLink can send an
SNMP Trap, contact a local PC via the Console Port, or dial a
modem or pager. When an alarm is generated, NetLink can also
open or close the optional Output Contacts.
The Alarm Filter has priority over the Data Filter. Even if a call
record is rejected by the Data Filter, it will still be flagged and
stored if it matches an Alarm Clue. The Alarm Filter can also be
used as a second Data Filter, allowing separate storage and
retrieval of data for specific area codes, phone numbers and etc.
NetLink features two separate Alarm Filters. Each filter has its
own format, variables, and alarm criteria. When two dissimilar
PBX units are connected to the NetLink, this provides a separate
Alarm Filter for each PBX Port.
Each Alarm Filter includes a "Format", and one or more "Clues"
with associated "Actions". The Format describes the location of
specific data items within each call record. Alarm Filter Clues
define the criteria that determine whether or not a record will be
flagged and counted. "Actions" determine how NetLink will react
when an alarm is generated.
The Alarm Configuration procedure consists of three tasks:
·
Define the Alarm Filter Format
·
Define Alarm Filter Clues and Actions
·
Assign the Alarm Filter to an Input Port(s)
Notes:
·
When the NetLink is connected to two different
types of PBX units, it is recommended to define a
separate Alarm Filter for each PBX.
·
An Alarm Filter defined for one PBX may not
function with another type of PBX. For example, a
filter defined for the PBX connected to Port A,
may not function correctly when assigned to a
different type of PBX connected to Port B.
8-1