System Administrator’s Responsibilities
For the extensions connected to the Outcalling ports (port 2 on a two-port
system, port 4 on a four-port system or ports 5 and 6 on a six-port
system), Outgoing Call Restriction should be set to the most restrictive
value that the business allows; then Allowed and Disallowed Lists should
be assigned as needed. For example, if Outgoing Call Restriction is set
to Inside Only, an Allowed List containing all numbers to which Outcalls
are allowed must be created. This list must be assigned to the extensions
connected to port 2, port 4, or ports 5 and 6.
The following measures should be taken on the mail system side:
■
■
■
■
■
■
■
■
■
■
Create only mailboxes that are necessary and delete any unused
mailboxes.
Permit no Outcalling, or permit it only for those with a legitimate business
need.
Change the System Administrator’s Mailbox from the factory setting.
Set the System Administrator’s mailbox password to a hard-to-guess
value.
Set the System Administration Password to a hard-to-guess value.
Turn Off the Remote Maintenance Device when it is not in use.
Set the Minimum Password Length to 6 digits or more.
Set the Security Violation Notification action and number of
unsuccessful login attempts to the most restrictive values that the
business allows.
The following general precautions also should be taken:
Provide good physical security for the room containing your
telecommunications equipment and the room with administrative tools,
records, and System Administration information. These areas should be
locked when not attended.
Provide a secure trash disposal for all sensitive information, including
telephone directories, call accounting records, or anything that may
supply information about your communications system. This trash should
always be shredded.
1-12
Overview of System Services and Features