Specifications

5
0003097 Revision A 6
7
Security
Toll Control
Comprehensive toll control is an integral part of the Advanced Automatic Route Selection
feature package. It allows the customer to restrict user access to trunk routes and/or specific
external directory numbers. The key to toll control is the use of Class of Restriction (COR)
values.
All systems with any combination of Direct Inward System Access (DISA), integrated auto
attendant, or RAD groups and peripheral interfaced auto attendant or voice mail are susceptible
to being "hacked into" by external callers. In addition, internal users could abuse telephone
privileges by using external call forward, trunk-to-trunk connection without third party, or 1-800
and 1-900 numbers.
It is very important to assign telephone privileges that relate to toll only to the employees who
require it to do their job. In addition, a lobby telephone would be denied toll access unless
authorized through an attendant.
Class of Service options, such as Individual Trunk Access, bypass all ARS and COR restrictions.
Features carrying a risk of toll abuse include:
• Public Network to Public Network Connection Allowed permitting trunks to be connected
together without a third party
• Call Forwarding External Destination feature allowing an extension user to forward calls
to external trunks
• 800 numbers, usually free calls, but some central offices can allow the reversal of 800
charges, making it a toll call for your company
• 900 numbers, should be restricted from all users except those who require it for their job
function.
Another method of toll control is Station Message Detailed Recording (SMDR) which can be
used to track internal users and control their calls. Tracking is a deterrent to toll abuse by internal
callers; however, these records may also be used to identify account codes. For more
information on suppressing private strings from records, see the Digit Modification Assignment
section of the Technical Documentation CD-ROM.
Authorized Maintenance Access
Authorized maintenance access provides protection (restricted access) for various
administration commands from unauthorized users.
The six levels of authorization are:
• System
• Installer
• Maint2