Disabled by default

By default, Avaya disables these inherently insecure network services:

TELNET does not encrypt data (logins, passwords, or PIN information) sent over connection between the two hosts.
FTP sends information in unencrypted (clear) text, which permits interception by eavesdroppers relatively easily. Also, FTP has no integrity check, meaning that if a file transfer is interrupted, the receiver cannot tell if the transfer is complete.

Note
If a customer opts to use FTP and/or TELNET, the functionality can be enabled in certain products but is disabled by default.

Avaya products ensure that authentication credentials and file transfers are protected when sent across the network by using:

Secure Shell (SSH)
Secure Copy (SCP) or Secure File Transfer Protocol (SFTP)
SNMP with these stipulations:
- SNMPv3 is the preferred version due to its built-in security mechanism.
- SNMPv1 or v2c, while supported, provide only a limited security capability based on community names:
- The community name for SNMPv1 and SNMPv2c is protected when accessing writable MIBs.
- For read-only MIBs SNMPv1 and SNMPv2c community names are unprotected.
  
  SNMP security secrets (for example, community strings) are customer-administrable.
Other protocols protected using a Transport Layer Security (TLS) or Internet Protocol Security (IPSEC) connection