Syspine A50 - Security Considerations

Security Considerations
Security and privacy are related topics. Privacy Considerations discusses the
handling of users’ personal information. This topic focuses on the issues
involved securing the Syspine Phone System.
While Voice over Internet Protocol (VoIP) brings the power of the Internet to
phone services, it also introduces some security issues. Unless the office LAN
is secure, employees or callers could change phone settings, listen to others'
voice messages, and even access the public address system, if available.
Consider the following issues in creating a secure phone system:
Change Default Passwords
The first step toward securing the Syspine Phone System is to change the
default password of the DOS-A50. The default DOS-A50 password is admin,
used from Administrator to connect to the DOS-A50.
Also, encourage users to change passwords when using Assistant. A user is
typically assigned to one extension number password, which is used to log on
to Assistant and to retrieve voicemail messages. The default extension number
password is 9999.
System Vulnerabilities
Syspine Phone System runs on the office LAN, and the organization may have
a wireless LAN. While convenient and popular, the security features in many
wireless default implementations may not be adequate. Consider whether the
LAN security configuration, especially the wireless LAN security configuration,
is correct for the business.
Firewall Issues
It’s a good idea to use firewalls to help protect an office LAN. A firewall blocks
requests or communication attempts from any unspecified programs.
If using a third-party firewall to provide security, instead of the default Windows
®
Firewall, Assistant and Administrator will not be able communicate with the
DOS-A50. To avoid this problem, create firewall exceptions in the firewall pro-
gram for Administrator and Assistant. A firewall exception allows selected pro-
grams to connect with a computer.
If using a third-party firewall, refer to its documentation for instructions on creat-
ing firewall exceptions.