Vertical TeleVantage 7.5 Technical Information Page 274

  • Download
  • Add to my manuals
  • Print
  • Page
    / 344
  • Table of contents
  • TROUBLESHOOTING
  • BOOKMARKS
  • Rated. / 5. Based on customer reviews
Page view 273
I-6 INSTALLING TELEVANTAGE
Securing your phone system database
Toll fraud typically involves “hacking” over phone lines instead of data hacking. However, the
TeleVantage database runs on a Windows server on your network and contains all permission
settings and can be hacked at that level. It is always wise to keep your corporate network secure
from unauthorized external access. This safeguards your database against tampering by network
and computer hackers. Some ways to do this include:
Q Use standard firewall technology to secure access to your network. If desired, allow
access to specific protocols and ports, such as those for HTTP or H.323 (VoIP).
Q For extra security, host the TeleVantage Web Services on a separate server from the
TeleVantage Server and database.
Securing SIP stations
If your system uses SIP phones as external stations, hackers can gain entry to the system by
sending a SIP message that duplicates the SIP URI of a SIP phone user, for example,
vwilliams@sip:www.Vertical.com. Without protection, TeleVantage assumes the call is
coming from the external station and automatically logs it in and provides internal dial tone,
permitting the caller to place outbound calls through TeleVantage.
To protect against SIP fraud, you can do the following:
Q Make sure that each SIP phone uses authentication credentials whenever it connects to
TeleVantage. See “Authenticating SIP phone external stations” in Chapter 14 in
Administering TeleVantage for instructions.
Q If your system interacts with an external SIP server, such as a PSTN gateway or a SIP
provider (IPSP), set up two SIP spans, one to handle SIP stations and the other to handle
traffic from the external SIP server. See “Using more than one SIP span” in Chapter 14
in Administering TeleVantage.
Checking for current scams
Most telephone carriers maintain toll fraud web pages with current information. For example:
http://www.att.com/fraud/
newscenter.verizon.com/kit/servicestandard/scams.vtml
You can monitor these web sites for up-to-date information and potential remedies.
Page view 273
1 2 ... 269 270 271 272 273 274 275 276 277 278 279 ... 343 344

Comments to this Manuals

No comments