Security

Security Provided in uOne

Cisco products are designed to be secure. However, some action is required on your part to ensure that the necessary security precautions are made and implemented. Maximum security is assured by the following factors:

The system allows fixed length and variable length passwords from 4 to 8 digits. The system default is a fixed length of 4 digits. You should change it through Unified Messaging System Administration (UMSA) to variable length of 5 to 8 digits.

Failed Entries in a Single Session

The system disconnects a subscriber after a configurable number of failed login attempts in a single session. You can change that number by updating the MaxLoginAttempts attribute in the UM.ini file. The default is 3.

Failed Entries Across Multiple Sessions/Lockout

The system locks out a subscriber after the maximum number of consecutive failed login attempts across multiple sessions. You can change this number by updating the Class of Service in UMSA. The default is 6.

Addressing Rules

You can administer addressing rules on the system. By administering the DialMap.ini file and your PBX appropriately, you can minimize toll fraud.

Subscriber Password/PINs

Subscribers are responsible for their own Passwords/PINs. It is your responsibility to tell them the importance of password security.

Make these recommendations to subscribers:

Change their passwords immediately after the service is assigned to them.
Don't use trivial passwords, such as ascending, descending, or the same digits (such as "1111" or "1234").
Don't use the current year.
Don't use their phone numbers, extensions, or the reverse of their extensions as passwords.
Don't use their names, initials, or other identifying name (such as department).
Passwords should be as long as possible, with a minimum of five digits.
Passwords should not be posted, shared, or printed in an obvious place.
Passwords should not be coded in programmable-function keys or speed-dialing keys that allow ready access by unauthorized persons.
Passwords should be periodically changed based on the need.

Table of Contents

Security