|
The physical security of all the hardware components
must be an important consideration when you secure your Modular Messaging
system.
Topics in this section include:
General recommendations
-
Limit access to the system console and to
the supporting documentation.
-
Provide good physical security for the room that contains the following vital resources:
-
Make sensitive
areas physically secure during unattended times. Lock doors, or use automatic detection devices.
-
Establish and maintain a clear physical perimeter.
-
Ensure that you restrict access to server rooms. Lock these
rooms when they are unattended. Limit access to work areas to only authorized personnel.
-
Keep the attendant console and supporting documentation in
a place that is secured with a changeable combination lock.
Provide the combination to only the people who
need access to the premises.
-
Lock telephone wiring closets and equipment rooms.
-
Store telephone logs and printed reports in locations that authorized personnel can use.
-
Design distributed reports so that the reports do not reveal password
or trunk access code information.
-
Provide secure trash disposal for sensitive information. Remember to dispose telephone directories, call accounting records, and
information about your communications
system. Shred the trash.
-
Schedule regular backups for your Modular Messaging servers.
Regular backups help you restore system data.
Store all copies of backups securely. Destroy each unnecessary copy. For more information, see Installation and Upgrades guide (pdf).
-
Ensure that you take adequate safety precautions for
other hazards, such as fire or electrical malfunctions. For more information, see
Installation and Upgrades guide (pdf).
Data backups
This topic discusses data backups for Modular Messaging systems with Avaya Message Storage Server (MSS).
Unfortunately, backups are frequently not included when security
lists are made. Even in large organizations, testing
backups is sometimes neglected.
A backup plan is necessary to ensure
that essential, electronically stored business data can be recovered
if a system failure or natural disaster occurs. Ensure that you develop
and implement proper backup procedures for the system. Create
a data backup of each computer that has valuable data.
A data backup must cover more
than a few days so that older versions of files can be recovered. A backup must recover from problems,
especially intruder-caused damage that goes undetected for a significant
time. You must be able to administer, control, and monitor access to backup
files.
Without a good backup, hardware failures might cause irretrievable
data loss, and recovering from an intrusion can be difficult.
Back up system files regularly to ensure a timely recovery. Schedule regular, off-site backups. Periodically
test the backup. Rotate the media and offsite storage.
The Modular Messaging system provides encrypted transport for the backups that you conduct on networked storage devices. Modular Messaging uses encrypted SSH File Transfer Protocol (SFTP) for transport to authenticated servers. Because SFTP is encrypted, it requires more processing by the MSS.
You can select the type of data you want to back up, such as system data, messages, and names and greetings. You can also select to back up data to a DVD or LAN storage device. If a backup occurs through a LAN, the MSS uses the FTP or SFTP protocol to transport system data. The MSS does not accept any inbound connection. The outbound connection is closed when the backup or restore operation ends, is canceled, or is stopped. Modular Messaging sends an alarm if a backup does not complete within a specified time.
Data restores
This topic discusses restoring data for Modular Messaging systems with Avaya MSS.
Backups that occur on a consistent schedule help to ensure that you can restore your entire system or a specific section.
Use the restore feature to restore lost or damaged data. You can select the following before restoring data from a backup:
-
The backup media: DVD or LAN
-
The LAN protocol: FTP or SFTP
-
The data or block of data to restore from which the administrator can choose to restore: system data, messages, and names and greetings
The Modular Messaging system provides encrypted transport for the data restoration that you perform for the networked storage devices.
Top of page
|
