Administrator's Guide

System security checklist
Issue 5 October 2002 385555-233-506
8. If loop start trunks are administered in the switch and cannot be changed by
the Local Exchange Company, block all class of service from forwarding
calls off-net. In the Class of Service screen, Restriction Call Fwd-Off Net
field, set to
y for the 16 (0-15) COS numbers.
See ‘‘Class of Service’’ on page 672 for more information.
NOTE:
If a station is call forwarded off-net and an incoming call to the
extension establishes using a loop-start trunk, incorrect disconnect
supervision can occur at the Local Exchange Central Office when the
call terminates. This gives the caller recall or transfer dial tone to
establish a fraudulent call.
9. Administer Call Detail Recording on all trunk groups to record both
incoming and outgoing calls.
See ‘‘Collecting information about calls’’ on page 537 for more
information.
10. On the ‘‘Route Pattern’’ on page 1096, be careful assigning route patterns
with an FRL of
0; these allow access to outgoing trunking facilities. Avaya
recommends assigning routes with an FRL of 1 or higher.
NOTE:
An exception might be assigning a route pattern with an FRL of 0 to
be used for 911 calls so even restricted users may dial this in
emergencies.
Tip:
You can use the list route-pattern print command to print a copy of
your FRLs and check their status.
11. On all trunk group screens, set the Dial Access field to
n. If set to y, it
allows users to dial Trunk Access Codes, thus bypassing all the ARS call
screening functions.
See ‘‘Trunk Group’’ on page 1233 for more information.
12. On the ‘‘AAR and ARS Digit Analysis Table’’ on page 577, set all dial
strings not required to conduct business to
den (deny).
13. If you require international calling, on the ‘‘AAR and ARS Digit
Conversion Table’’ on page 582, use only the 011+ country codes/city
codes or specific dial strings.