Mitel 5606 Specifications download pdf (Page 144)

General Information Guide

138

When a TLS set initiates a connection with an MCD, the TLS’s Server (unilateral) authentication

method is used to authenticate the server (only the server’s security certificate is required).

Phone and User Authentication

Mitel implements phone authentication that requires a unique association of MAC addresses

and IP and user-entered PIN registration numbers. Additionally, desktop software downloads

are encrypted. Mitel also provides 802.1X authentication for desktops (Release 6.0 and later)

which offers support for the Extensible Authentication Protocol (EAP) using EAP-MD5 challenge

authentication to a RADIUS Server.

Worm and Virus Protection

MCD uses an embedded real time operating system. This system is less susceptible to virus

or worm attacks that target traditional applications and their OS services because it provides

a very small base of common functionality with general purpose operating systems. This lack

of common functionality means that VxWorks is not affected by the viruses and worms typically

found on networks and the Internet. This also makes it difficult for an attacker to write a virus

targeted at generic VxWorks implementations.

Application servers based on Windows NT/2000 must be properly maintained with regard to

current operating system security updates. Mitel products based on Windows NT/2000 include

the Contact Center Solutions, Speech Server and Messaging Server systems and Enterprise

Manager. These key application servers must be maintained with the latest in Microsoft security

updates and worm protection.

Prevention of Toll Abuse

Any communication system that has a combination of Direct Inward System Access (DISA)

integrated auto attendant or RAD groups and peripheral interfaced auto attendant or voice mail

can be susceptible to toll abuse. Therefore it is important to assign appropriate phone privileges

and restrictions to devices. In addition, public phones should be denied toll access unless

authorized through an attendant.

MCD has comprehensive toll control built in. It lets you restrict user access to trunk routes

and/or specific external directory numbers. It also provides Class of Restriction (COR) and

Class of Service (COS) features that can substantially reduce the risk of toll abuse.

As a deterrent to toll abuse by internal callers, Station Message Detail Recording (SMDR) can

be used to track calls from within your company, providing detailed information such as the

originating extension number, time, duration, and number dialed. SMDR record access should

be restricted as with any other function.

Secure Management Interfaces

MCD includes a fully integrated set of management tools designed to install, manage, and

administer MCD systems. Three levels of access are provided in order to meet the needs of

1 2 ... 139 140 141 142 143 144 145 146 147 148 149 ... 160 161

No comments

Mitel 5606 Specifications Page 144