|
Due to the increased potential for toll fraud, we believe it is essential that we alert you to the possibility of your phone system being compromised by fraudsters. These people exploit the voicemail feature of telephone systems to gain access to external phone lines, or simply to listen to your voicemail. You will have heard a lot about this in the news and it has caused a lot of embarrassment for the Murdoch family.
Hackers exploit the weak user / password combination most people have on their voicemail. By using a complex voicemail pin (not 0000, 1234, etc), you will thwart the efforts of these people. Zultys has several features to enforce security. These are off by default and should be enabled.
To stop people making telephone calls via your voicemail system, you need to enforce complex passwords, OR in user profiles turn off the can return calls from voicemail feature. We will do this for our managed telephony customers. If you are not on a managed telephone services contract (this is not the same as a hardware maintenance contract), you need to do this, or we can do it for you for $50 + GST per site.
With the above feature disabled, your system will block all attempts to make, or return calls from voicemail. However, if your PIN number is simple, people can still logon to your voicemail and listen to messages, delete them, etc. If you wish to enforce all of your users to use complex PIN numbers with any minimum number of digits (your choice, minimum of 4) you need to set the password complexity options in user profiles under the general tab. Once again, we will do this for managed telephone services customers. We can also do this for non-managed services customers and we will do this for $50 +GST per site if you wish us to.
If you want the can return calls from voicemail option removed also, we will do both for $50 + GST. Please note, that we cannot set this option until all users have changed their passwords to meet the complexity rules you desire. As a guide we recommend you have a 5 digit PIN number with no repeating digits and not a simple sequence such as 12345. Also, do not allow the user extension number to be a password. Please get all users to reset their passwords before attempting to change the complexity settings, or asking us to. The easiest way for a user to change their password is to go into voicemail on your telephone and follow the prompts.
If you do set your password complexity, then you are safe to leave the can return calls from voicemail option enabled. This would only be disabled if you do not want your internal users to be able to access this function.
Thank you for taking the time to read this important announcement. I am sure you understand the need to attend to this issue as soon as possible.
Regards,
Mark Dutton
Managing Director
Datamerge
|
