PBX Security - PBX Info :: Your Free PBX, PABX and Telephone Information Resource
Home | Register |    
 
Forums         |        Articles          |        Blogs         |      Software          |      Portals          |      Resource          |      Wiki      |    White Papers         
 
Go Back   PBX Info :: Your Free PBX, PABX and Telephone Information Resource > PBX SYSTEMS > NORTEL > Meridian Systems
   SEARCH  
     
User Name Password      
Save ?
Meridian Systems Welcome to the Nortel Meridian Forums Including Meridian Options 11-81C CS1000M Meridian Mail Call Pilot Companion and Sucession Hospitality OTM MAT MICB RAN NetGateway ..., and all other Applications

Tags: ,


Reply
 
LinkBack Thread Tools Display Modes
Old 05-25-2006, 05:03 PM   #1 (permalink)
DREaton3162
Junior Member

Activity Longevity
0/20 9/20
Today Posts
0/0 sssssss28
Rep Power: 0DREaton3162 is an unknown quantity at this point
Country:
PBX Security

I got put in charge of the PBX about 3 years ago - with no training or documentation. While I have pretty much figured out the basics of making moves, adds, and changes, I am not knowledgeable enough to check to be sure that my PBX is secure.

For example, my boss wants to know if our PBX, a Meridian 1, has any way to generate a report of what extensions are making particular long distance calls. I have learned enough to discover that you can list phones with particular features (I tried it today for the first time) but have no idea if there is any way to trace calls back to a TN and, for example, find out who is making all teh international calls to Korea.
DREaton3162 is offline   sendpm.gif Reply With Quote
Old 05-25-2006, 07:21 PM   #2 (permalink)
gwebster
Senior Member
 
gwebster's Avatar
gwebster has no status.

Activity Longevity
9/20 20/20
Today Posts
0/0 ssssss724
Location: NORTEL - Ottawa
Rep Power: 7gwebster is on a distinguished road
Gender:
Country:
First thing - get the documentation. All NTPs (acronym Northern Telecom Practice) can be freely downloaded from www.nortel.com/support once you have registered. Then look at the "Call Detail Recording" NTP.
gwebster is offline   sendpm.gif Reply With Quote
Old 05-26-2006, 02:57 AM   #3 (permalink)
TomasSouth
Junior Member
 
TomasSouth's Avatar
TomasSouth has no status.

Activity Longevity
3/20 20/20
Today Posts
0/0 ssssss295
Rep Power: 6TomasSouth is on a distinguished road
Send a message via MSN to TomasSouth
Quote:
Originally Posted by DREaton3162
For example, my boss wants to know if our PBX, a Meridian 1, has any way to generate a report of what extensions are making particular long distance calls.
Usually, the PABX just gives out raw data. I think what you need is a billing software, either a 3rd party software, or the OTM with TBS package. From that you can generate the report you much needed.
TomasSouth is offline   sendpm.gif Reply With Quote
Old 05-26-2006, 07:57 AM   #4 (permalink)
DREaton3162
Junior Member

Activity Longevity
0/20 9/20
Today Posts
0/0 sssssss28
Rep Power: 0DREaton3162 is an unknown quantity at this point
Country:
Quote:
Originally Posted by TomasSouth
Usually, the PABX just gives out raw data. I think what you need is a billing software, either a 3rd party software, or the OTM with TBS package. From that you can generate the report you much needed.
Can you define and explain what OTM and TBS mean - and how such third party software would go about interfacing with the PBX?
DREaton3162 is offline   sendpm.gif Reply With Quote
Old 05-26-2006, 10:08 AM   #5 (permalink)
Archibald J. Cox
Senior Member
 
Archibald J. Cox's Avatar
Archibald J. Cox has no status.

Activity Longevity
0/20 15/20
Today Posts
0/0 sssss1959
Location: Where the hell is Tiverton, Ontario (CANADA)?!?!
Rep Power: 6Archibald J. Cox will become famous soon enough
Gender:
Country:
Send a message via AIM to Archibald J. Cox
OTM = Optivity Telephony Management

It's a Graphical User Interface (GUI) for the PBX that can have additional packages installed on it to collect Call Data Records (CRD) information so that you can see who's calling where.

<begin Arch's standard shameless plug>
As far as the rest of the PBX security, check out this link:
http://www.infoplusonline.com/products/security-u.html

InfoPlus, the company I work for, offers a comprehensive PBX security audit. If you check with your PBX Vendor, you may find that you are allotted one free of charge or at a discount depending on your maintenance contract. If not, you can order one up from us directly.

Here's a sample .pdf of what the output looks like. If you don't want to order one, it will at least explain the types of things to look for in your own PBX:
http://www.infoplusonline.com/report...05292004SA.pdf

</end shameless plug>

-Arch
Archibald J. Cox is offline   sendpm.gif Reply With Quote
Old 05-26-2006, 02:08 PM   #6 (permalink)
DREaton3162
Junior Member

Activity Longevity
0/20 9/20
Today Posts
0/0 sssssss28
Rep Power: 0DREaton3162 is an unknown quantity at this point
Country:
I'm still in the "basic" mode of checking our phone's NCOS values - and am getting more and more confused. I fugured out how to list phones by their NCOS value and we have about 350 phones here and they are divided into the following catagories:

About 50 have a NCOS value of 0
Another 12 have a NCOS value of 1
Roughly 285 have their NCS value set to 4
The rest (about 75) have no NCOS value assigned.

I know that the ones with a value of 1 are limited to making calls within the PBX - but the ones with a value of 0 seem to behave the same way. I am assuming that the ones with a value of 4 can call any local number and the ones with no value attached can call any number - even international calls.

Is that correct?
DREaton3162 is offline   sendpm.gif Reply With Quote
Old 05-28-2006, 12:12 PM   #7 (permalink)
mai_roo_jak
Junior Member
 
mai_roo_jak's Avatar
mai_roo_jak has no status.

Activity Longevity
1/20 10/20
Today Posts
0/0 sssssss66
Rep Power: 3mai_roo_jak is on a distinguished road
Country:
Send a message via MSN to mai_roo_jak
Maybe correct for your pbx only. Check out the FCR table in LD49. You will see what your NCOSs are defined.
mai_roo_jak is offline   sendpm.gif Reply With Quote
Old 05-30-2006, 08:08 AM   #8 (permalink)
DREaton3162
Junior Member

Activity Longevity
0/20 9/20
Today Posts
0/0 sssssss28
Rep Power: 0DREaton3162 is an unknown quantity at this point
Country:
Quote:
Originally Posted by mai_roo_jak
Maybe correct for your pbx only. Check out the FCR table in LD49. You will see what your NCOSs are defined.

I figured the info had to be in the PBX somewhere - but I've never even been in LD 49. Can someone walk me through the commands once I get there? Do I have to use a LST command or what?
DREaton3162 is offline   sendpm.gif Reply With Quote
Old 05-30-2006, 09:54 AM   #9 (permalink)
TomasSouth
Junior Member
 
TomasSouth's Avatar
TomasSouth has no status.

Activity Longevity
3/20 20/20
Today Posts
0/0 ssssss295
Rep Power: 6TomasSouth is on a distinguished road
Send a message via MSN to TomasSouth
I don't know if this is formally right, I just learn from experience:

LD 87, check NCTL and verify the FRL value. NCTL is the NCOS.
LD 21, check the FRL inside the RDB, then the number beside it is the FCR.
LD 49, check the setting of that FCR table, whether deny or allow the digits.

My example is the basic one, without the ESN programming yet in LD 86.
TomasSouth is offline   sendpm.gif Reply With Quote
Old 05-30-2006, 10:07 AM   #10 (permalink)
DREaton3162
Junior Member

Activity Longevity
0/20 9/20
Today Posts
0/0 sssssss28
Rep Power: 0DREaton3162 is an unknown quantity at this point
Country:
Quote:
Originally Posted by TomasSouth
I don't know if this is formally right, I just learn from experience:

LD 87, check NCTL and verify the FRL value. NCTL is the NCOS.
LD 21, check the FRL inside the RDB, then the number beside it is the FCR.
LD 49, check the setting of that FCR table, whether deny or allow the digits.

My example is the basic one, without the ESN programming yet in LD 86.
Thanks for the response - but this is still a little beyond my knowledge. I know how to get into LD 49 for example , but have no idea how to check the settings for the FCR table once I get there - or even what a FCR table is for that matter. I have mastered basic Moves, Adds, and Changes and that is about it....

Last edited by DREaton3162; 05-30-2006 at 04:16 PM.
DREaton3162 is offline   sendpm.gif Reply With Quote
Reply



Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)
 
Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On

Similar Threads
Thread Thread Starter Forum Replies Last Post
How secure is VoIP? rixride Security 5 10-12-2007 01:29 PM
Security in VoIP Networks – Stronger than TDM! rixride Security 6 07-26-2006 06:00 PM
IP Security in a Hosted Environment rixride Security 0 12-19-2005 11:26 AM
Don't believe the VoIP security hype rixride Security 1 11-24-2005 02:51 AM
Technologies that can help you secure voice over IP rixride Security 0 10-03-2005 04:27 PM


All times are GMT -5. The time now is 08:41 PM.

Tags   |   Advertise    |    Media Partners   |    Admin   |   About us   |   Contact Us   |   RSS   

Powered by vBulletin® Version 3.7.3
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
Search Engine Friendly URLs by vBSEO 3.0.0
Copyright PBXINFO LLC 2006