Lucent Technologies MERLIN LEGEND 5 - Manual (Page 379)

MERLIN LEGEND Communications System Release 5.0
System Manager’s Guide
555-650-118
Issue 1
June 1997
Customer Support Information
Page A-17 Other Security Hints
A
■ Establish well-controlled procedures for resetting passwords.
■ Limit the number of invalid attempts to access a voice mailbox to five or
less.
■ Monitor access to the MERLIN LEGEND Communications System dial-up
maintenance port. Change the access password regularly and issue it only
to authorized personnel. Disconnect the maintenance port when not in use.
(However, this eliminates Lucent Technologies’ 24-hour maintenance
surveillance capability and may result in additional maintenance costs.)
■ Create a communications system management policy concerning
employee turnover and include these suggestions:
— Delete all unused voice mailboxes in the voice mail system.
— If a terminated employee had Remote Access calling privileges and a
personal authorization code, remove the authorization code
immediately.
— If barrier codes and/or authorization codes were shared by the
terminated employee, these should be changed immediately.
■ Regularly back up your MERLIN LEGEND Communications System files to
ensure a timely recovery should it be required. Schedule regular, off-site
backups.
■ Keep the Remote Maintenance Device turned off when not in use by
Lucent Technologies or your authorized dealer.
■ Limit transfers to registered subscribers only.
■ Use the Security Violations Notification options (Mailbox Lock or Warning
Message) to alert you of any mailbox break-in attempts. Investigate all
incidents.
■ Review security policies and procedures and keep them up to date.