security advisories ?

Edwards Finance > Phones

Q. Does Nortel have a security advisory mailing list for PBX's? If so, where can you sign up and is there an archive available?

A. I get the PBX security "advisory" called "Access Denied" from Nortel - it comes out once a year at best. More often than not they talk about: don't leave your laptop on the conveyer, don't forward chain emails, here are new area codes, and believe it or not, they announced zone paging was available and working in rls 25. In fact it's not even going to be available in rls 26. In other words, the security folks have no clue about how the PBX works. My security page and this newsgroup are going to beat Nortel to the street every time. This is where you should be. PATCHES AVAILABLE FOR PDT PASSWORD The PDT passwords that were compromised in 2000 can now be modified for certain systems and machine types. Contact your Nortel Networks authorized distributor for a complete list. Nortel additionally recommends that a secure modem or Virtual Private Network be used for remote access to the PBX. As well, if the switch is accessible from a local LAN, then switch security can be achieved via standard network security methods. WOBBLER HOAX Symantec Corporation recently added a security update regarding the Wobbler virus hoax to their web site. The virus does not exist and the web site documents two sample emails you may receive regarding the virus. Symantec recommends deleting messages associated with the virus- warning hoax and not passing them on to others. Sending this email to others propagates the myth and is unnecessary. WHITEBOARD SECURITY RISK A printable whiteboard has saved more than one brainstorming session. There is great relief in knowing not one scribble will be forgotten by a manual scribe. However, if the whiteboard has a carbon roll, all that fabulous information about the next product line is engraved on the carbon roll. Thermal whiteboards do not use carbon rolls and are not a risk. Make sure before you begin your session which type of printable whiteboard you are using. Additionally, when the meeting is over, remind attendees to take all their session materials with them, remove any meeting or flip chart notes left behind, and erase the whiteboard prior to leaving the conference room. 809 AREA CODE WARNINGS Most telecommunications managers are more than aware of the fraud that can be perpetrated from this area code. Email recipients, however, have been passing warnings lately regarding the dangers of the area code. Although some of the information is incorrect ($2425 per minute vs. a more realistic $24 - $25 per minute fee) the warning is well founded. The 809 area code belongs to the Dominican Republic and should require a higher class of service within the PBX than domestic area code calls. The same holds true for all calls to locations in the North American numbering plan that do not cover your domestic calling area. US PBXs should identify area codes in the Caribbean and Canada and assign them the same calling standards as other international locations. This will help restrict users from dialing the 809 area code and falling prey to scams. If your company does not make calls to the Caribbean or Canada, removing the area codes from your dialing plan will also block calls to these areas.

Ask Edwards a Finance Question

Other Questions:

How can Asterix PBX/IP be compared to vendors such as Avalla, Nortel?

How can Asterix PBX/IP be compared to vendors such as Avalla, Nortel, Cisco, etc? How big Asterix PBX/IP can really grow as to the number of users? voice quality? etc.There is virtually no limit to the number of users that can be supported via ...

Does anybody know if there is a company that provides local business phone service in Atlanta aside from Bellsouth? Did business phone service get deregulated and opened up to competition as well as residential?Media One (now called AT&T Br...

Does anyone know if there is a way to process credit cards via a wireless phone? Besides the voice authorization feature.I have seen many cell based CC swipe devices at trade shows. They work just like the traditional type. Another method would p...

I'm interested in learning more about this company. Thinking of doing business with them. If there's anyone out there who's done business with them, know someone who has, or just knows about this company.Parent Company RCI out of New York, they...

I'm curious if anyone has been able to dial out through a Nortel Meridian Digital PBX with a standard modem. I've seen a product in the 'blackbox' catalog sold under the name "linc ups" which purports to provide that capability but there is no...

Edwards Finance Menu

Ask a Question
About Us / Me
Contact Me
Privacy Policy

Sitemap

My Favorite Sites

PFBlog
Google Finance
Yahoo Finance
Motley Fool
Nveille's Financial Blog
AllFinanceMatters
Free Money Finance
2MillionBlog
The Terror Finance blog

Q&A Subjects