Avaya is responsible for designing and testing its products for security. When Avaya sells a product as a hardware/software package, Avaya’s design and testing includes the operating system. In this case, Avaya may modify the operating system to improve system operation or to resolve a security vulnerability.
The customer is responsible for the appropriate security configurations on their data network. The customer is also responsible for using and configuring the security features available on Messaging software, on firmware on the Avaya media gateways, and firmware on IP telephones. Avaya, however, offers a Security Tune-Up Service for assessing the customer’s network for performance, as well as security issues. Avaya also offers configuration services for its products.
No telecommunications system can be entirely free from the risk of unauthorized use. Customers have ultimate control over the configuration and use of the product. They are solely responsible for ensuring the security of their systems is adequate for their intended use.
Customers administer their system configuration and can tailor that system to meet their unique needs but must also ensure to their own satisfaction that the security configuration is aligned with appropriate risk management best practices. Customers are responsible for keeping themselves informed of the latest information for configuring their systems to prevent unauthorized use.
Integration of Messaging servers into existing TCP/IP network(s) according to the corporate networking policies. In most cases, existing firewalls, and corporate security policies and practices can be implemented or adapted for the Messaging system.
Careful consideration for the security implications when the client access to the Messaging system are enabled.
Protection of server against unauthorized use with appropriate administrator and user passwords. Use longer and more random passwords to minimize the possibility of compromise. Ensure that you secure the passwords properly.
Protection of the surrounding network to minimize the threat of denial of service attacks.
Review of server logs to detect actual and attempted unauthorized use and to identify its source.
System managers are also responsible for: Physical security, password protection, password control, backups, environmental controls.
Neither Avaya nor its suppliers or business partners can guarantee that any product is immune from risk of unauthorized use of IP or telecommunications services or facilities accessed through or connected to this product. Avaya is not responsible for any damages or charges that result either from unauthorized usage or from incorrect installation of the security patches that are made available periodically. See the End-User License Agreement(s) associated with your Messaging product(s) for additional details.