You can refer to the following checklist to keep your system secure. For more information about the various features related to security, see the Avaya Toll Fraud and Security Handbook Guide.
Use Enhanced Access Security Gateway to log in to Communication Manager, and secure both system administration and maintenance ports. Customers with maintenance contracts have access to the optional password authentication interface program.
Activate Security Violations Notification (SVN) to report unsuccessful attempts to access the system. Security Violations Notification lets you automatically disable a valid login ID following a security violation involving that login ID and disable remote access following a security violation involving a barrier code or authorization code.
Secure trunks using Automatic Route Selection (ARS), Class of Restriction (COR), Facility Restriction Levels (FRLs) and Alternate Facility Restriction Levels (AFRLs), Authorization Codes, Automatic Circuit Assurance (ACA), and Forced Entry of Account Codes (see Call Detail Recording in Avaya Aura® Communication Manager Feature Description and Implementation for more information).
You can log in remotely using Secure Shell (SSH) as a secure protocol. The SSH capability provides a highly secure method for remote access.
Activate Enhanced Call Transfer for your voice messaging system, if available. This limits transfers to valid extensions, but you must restrict transfers to extensions that can offer dial tone to the caller, such as screen extensions.