Administrator's Guide

System security checklist
Issue 5 October 2002 383555-233-506
4. If you use Remote Access to process calls off-net or in any way access the
public network:
a. Use a 7-digit barrier code.
b. Assign a unique COR to the barrier code.
c. Restrict the COR assigned to each barrier code by FRL level to only
the required calling areas to conduct business.
d. Set the aging cycle to
90 days with 100 call limit per barrier code.
e. Suppress dial tone where applicable.
f. Administer Authorization Codes.
g. Use a minimum of 11 digits (combination of barrier codes and
authorization codes).
h. Assign Security Violation Notification Remote to 10 attempts in 2
minutes.
5. If you use vectors:
a. Assign all Vector Directory Numbers (‘‘VDN’’) a unique COR. See
Avaya MultiVantage™ Call Center Software Guide to ACD Call
Centers for more information.
NOTE:
The ‘‘COR’’ associated with the VDN dictates the calling privileges
of the VDN/vector. High susceptibility to toll fraud exists on vectors
that have “collect digits” steps. When a vector collects digits, it
processes those digits back to the switch and if the COR of the VDN
allows it to complete the call off-net, it will do so. For example, the
announcement “If you know your party’s 4-digit extension number,
enter it now” results in 4 digits being collected in step 6. If you input
“90##” or “900#”, the 4 digits are analyzed and if “9” points towards
‘‘ARS’’ and “0” or “00” is assigned in the ARS Analysis Tables and
the VDN COR allows it, the call routes out of the switch to an outside
local exchange or long distance operator. The operator then connects
the call to the requested number.
b. If vectors associated with the VDN do not require routing the call
off-net or via ‘‘AAR’’, assign a unique COR where the ‘‘FRL’’ is
0,
the Calling Party Restriction field is
outward, the Calling
Permissions field is
n on all unique Trunk Group COR.