AT&T 3 manual

System Administrator’s Responsibilities

For the extensions connected to the Outcalling ports (port 2 on a two-port system, port 4 on a four-port system or ports 5 and 6 on a six-port system), Outgoing Call Restriction should be set to the most restrictive value that the business allows; then Allowed and Disallowed Lists should be assigned as needed. For example, if Outgoing Call Restriction is set to Inside Only, an Allowed List containing all numbers to which Outcalls are allowed must be created. This list must be assigned to the extensions connected to port 2, port 4, or ports 5 and 6.

The following measures should be taken on the mail system side:

■Create only mailboxes that are necessary and delete any unused mailboxes.

■Permit no Outcalling, or permit it only for those with a legitimate business need.

■Change the System Administrator’s Mailbox from the factory setting.

■Set the System Administrator’s mailbox password to a hard-to-guess value.

■Set the System Administration Password to a hard-to-guess value.

■Turn Off the Remote Maintenance Device when it is not in use.

■Set the Minimum Password Length to 6 digits or more.

■Set the Security Violation Notification action and number of unsuccessful login attempts to the most restrictive values that the business allows.

The following general precautions also should be taken:

■Provide good physical security for the room containing your telecommunications equipment and the room with administrative tools, records, and System Administration information. These areas should be locked when not attended.

■Provide a secure trash disposal for all sensitive information, including telephone directories, call accounting records, or anything that may supply information about your communications system. This trash should always be shredded.

1-12Overview of System Services and Features