User's Manual

General Information Guide - Release 3.1
- 9 -
Redundancy Support
The 3300 ICP can auto fail over (route) around failed IP links if provisioned redundantly.
Security
Toll Control
Any communications system that has a combination of Direct Inward System Access (DISA),
integrated auto attendant, or RAD groups and peripheral interfaced auto attendant or voice mail can
be susceptible to toll abuse. Therefore, it’s important to assign appropriate telephone privileges to
users and devices. In addition, telephones in public places (such as a lobby telephone) should be
denied toll access unless authorized through an attendant.
The 3300 ICP system has comprehensive toll control as an integral part of the call control. It lets you
restrict user access to trunk routes and/or specific external directory numbers. It also provides Class
of Restriction (COR) and Class of Service (COS) features that can substantially reduce the risk of toll
abuse.
Features that have a risk of toll abuse are
• Public Network to Public Network Connection Allowed permits or restricts trunks being connected
together
• Call Forwarding External Destination allows or restricts extension user to forward calls to external
trunks
• Automatic Route Selection allows or restricts, on a per user or system basis, access to directory
numbers based on a users job function (note: 1-800 calls are usually free calls, but some central
offices can allow the reversal of 800 charges so that they are toll calls for your company).
As a deterrent to toll abuse by internal callers, Station Message Detail Recording (SMDR) can be
used to track calls from within your company giving detailed information including the originating
extension number, time, duration, and number dialed. SMDR record access should be restricted as
with any other function.
Authorized Maintenance Access
Authorized access to the system tools provides protection for various administration commands from
unauthorized users. The web-based system tools are
• System Administration Tool
• Group Administration Tool
• Desktop Tool.
Each user is given a login name, password, extension number, and language preference. All systems
should have all levels of passwords and login names altered from the default value and these
passwords should be changed periodically.
Ensure that any voice mail systems connected directly to modems employ a surveillance device.
Also, most voice mail systems require a password to gain access; therefore, make sure that this
password is difficult to guess and is changed frequently. Any user no longer authorized to use the
system should have password privileges revoked immediately.