Security

In VoIP, physical wire is replaced with an IP connection. The connection is more mobile. Unauthorized relocation of the IP telephone allows unauthorized users to send and receive calls as the valid owner. For further details on toll fraud, refer to the DEFINITY^� or Avaya Communication Manager documents in Related Documents.

Any equipment on a data network, including a 4600 Series IP Telephone, can be the target of a Denial of Service attack. Typically, such an attack consists of flooding the network with so many messages that the equipment either spends so much time processing them that it cannot process legitimate tasks, or the equipment overloads and fails. Although the 4600 Series IP Telephones cannot guarantee resistance to all Denial of Service attacks, each Release has increasing checks and protections to resist such attacks while maintaining appropriate service to legitimate users.

You also have a variety of optional capabilities to restrict or remove how crucial network information is displayed or used. These capabilities are covered in more detail in Chapter 4, , and include:

• Restricting the 4600 Series IP Telephone’s responding to SNMP queries to only IP addresses on a list you specify (as of Release 2.0).
• Specifying an SNMP community string for all SNMP messages sent by the telephone (as of Release 2.0).
• Restricting access to Local (dialpad) Administration Procedures (such as specifying IP addresses) with a password (as of Release 1.8).
• Removing access to most Local (dialpad) Administration Procedures.
• Restricting the end user’s ability to view network data using a telephone Options application.