NEC UNIVERGE UM8000 User Manual page 25

Configuring System Security
It is recommended that you complete the following procedures immediately after logging on to the messaging system
the first time. These procedures protect the messaging system from unauthorized access.
WARNING!
F
AILURE TO COMPLETE THESE PROCEDURES MIGHT RESULT IN UNAUTHORIZED ACCESS AND A POTENTIAL LOSS OF DATA
• Change the personal ID for the default system manager. Personal IDs are assigned following a rule, such as
prefixing an extension number with a single digit, 9. Select a new personal ID for the default system manager that
is difficult to guess. To prevent anyone from accessing the system manager mailbox using a phone, use a special
character not available on the phone keypad as the first digit for the personal ID. For example, use
• Set a security code for any system manager personal ID accessible using a phone. Set a security code
that is difficult to guess. The security code should be a random sequence of three to nine digits. This precaution is
important to prevent unauthorized persons from accessing the messaging system and then modifying mailboxes
and greetings using a phone.
• Set a default security code for subscribers and require subscribers to set a personal security code. A
security code provides additional protection for a mailbox when used with a personal ID. A security code is set using
a phone and should not be shared. A default security code is required for subscribers to enroll themselves on the
system. Require subscribers to set their own code during the
unauthorized persons cannot access unused mailboxes before enrollment and prevents subscribers from enrolling
without setting a security code.
• Limit the number of times a caller can enter an invalid system ID. This setting prevents unidentified callers
from accessing the system and trying to guess a valid system ID. Set the action the messaging system takes when
a caller exceeds the number of allowed misdials.
• Use a firewall. The system should never be connected to the Internet or a Wide Area Network (WAN) without a
firewall. If the system must be accessed from remote locations through a WAN, access should be allowed only
through a secure Virtual Private Network (VPN) such as PPTP, L2TP or IPSec.
WARNING!
F
OLLOWING THESE PRACTICES HELPS SECURE
UNIVERGE UM8000
TAKEN TO SECURE
To change the personal ID for the default system manager
In the Navigation Pane, click Subscribers > Subscriber > Profile.
1.
Click Search. See "Administration Console
2.
In the Search and Select Subscriber dialog box, select Find by Name.
3.
*
Type (asterisk) in the text box, then click Search.
4.
Click the default system manager name.
5.
In the Personal ID field type a new personal ID.
6.
Click Save.
7.
To configure a security code for a system manager with phone access
Call the system and enter the system manager personal ID.
1.
Press 7 to access configuration settings.
2.
Press 7 to access personal settings.
3.
Press 4 to change the security code.
4.
Follow the instructions to change the security code.
5.
* * *
Press (three asterisks) to exit the system, then replace the phone handset.
6.
System Overview
®
UNIVERGE UM8000
AT THE OPERATING SYSTEM LEVEL
Pages," for information about the Administration Console icons.
enrollment conversation. This precaution ensures that
AT THE MESSAGING SYSTEM LEVEL
. S Installation Guide
EE THE
.
$sandy$nec
,
ADDITIONAL STEPS SHOULD BE
FOR MORE INFORMATION
.
.
25