Administrator's Guide

Enhancing system security
555-233-506378 Issue 5 October 2002
Basic security
Keeping your system secure
The following is a partial list you can use to help secure your system. It is not
intended as a comprehensive security checklist. See the BCS Products Security
Handbook for more information about these and other security-related features.
■ Secure the system administration and maintenance ports and/or logins on
Avaya MultiVantage using the Access Security Gateway. This optional
password authentication interface program is provided to customers with
maintenance contracts.
■ Activate Security Violation Notification to report unsuccessful attempts to
access the system. Security Violation Notification lets you automatically
disable a valid login ID following a security violation involving that login
ID and disable remote access following a security violation involving a
barrier code or authorization code.
■ Use the list history command to determine if unauthorized changes have
been made to the system. To assist in identifying unauthorized use of the
system, the History report lists each time a user logs on or off the system.
See the Reports for Avaya MultiVantage™ Software for more information
about this report.
■ Secure trunks using Automatic Route Selection (ARS), class of restriction
(COR), Facility Restriction Levels (FRLs) and Alternate Facility
Restriction Levels (AFRLs), Authorization Codes, Automatic Circuit
Assurance (ACA), and Forced Entry of Account Codes (see ‘‘Call detail
recording’’ on page 1553 for more information).
■ Activate Enhanced Call Transfer for your voice messaging system, if
available. This limits transfers to valid extensions, but you also need to
restrict transfers to extensions that may offer dial tone to the caller, such as
screen extensions.