Avaya

Modular Messaging Help

 Getting Started 
 Administration 
 Maintenance 
 Reference 
Home > Getting started > Message privacy

Message privacy

Message privacy is the way private messages are handled on a messaging system. Modular Messaging uses a two-pronged approach to message privacy:

  • Flexible support for message privacy. This includes the ability to create, send, and access private message from the Modular Messaging telephone user interfaces and from Avaya graphical user interface (GUI) clients. It also includes the restrictions that these clients and interfaces impose on the recipient of private messages. The support that Client Add-in for Microsoft Outlook and standards-based e-mail clients provide is subject to the enforced privacy parameters. See Creating private messages and Accessing private messages for more detailed information.
  • Enforcement of message privacy. This includes privacy parameters that administrators can configure on the messaging application server (MAS) and on the Avaya Message Storage Server (MSS). See Administering privacy settings for more detailed information.

Note: Modular Messaging does not restrict recipients of private messages from playing the messages on a speakerphone or recording the message with a tape recorder. Likewise, Modular Messaging does not restrict recipients of private fax messages or private messages with attachments from printing and then circulating the fax or attachments. Modular Messaging cannot restrict the operation of programs that subscribers may use to view private message attachments.

Modular Messaging supports the standard RFC822 sensitivity header for privacy. This allows subscribers using standards-based clients to mark outgoing messages as private. Depending on the capabilities of the client, incoming messages might also be identified as private. Typically, these clients do not prominently display the privacy indicator. These clients might not enforce any privacy restrictions with respect to forwarding private messages.

See the Modular Messaging Concepts and Planning Guide (pdf) for additional information about message privacy.

Creating private messages

When creating new messages, Modular Messaging subscribers can mark messages as private, from the following interfaces, clients, or applications:

  • The Modular Messaging telephone user interfaces (TUIs)
    • Aria TUI for Modular Messaging
    • AUDIX TUI for Modular Messaging
  • Modular Messaging Web Client
  • Unified Communication Center (UCC) Speech Access
  • Microsoft Outlook with Client Add-in for Microsoft Outlook, provided the Privacy Enforcement Level (PEL) parameter is not set to Full and the Restrict Client Access parameters is not enabled in the user's COS.
  • Standards-based e-mail clients, provided the Privacy Enforcement Level (PEL) parameter is not set to Full and the Restrict Client Access parameters is not enabled in the user's COS.

    Standards-standard-based e-mail clients support creating private messages only if the client uses the standard RFC822 sensitivity message header. Modular Messaging treats private, confidential, or personal messages originating from a standards-based e-mail client as private messages.

Notes:

  • Callers can create private messages when using the Avaya Common Caller Interface (CCI) to leave Call Answer messages, provided administrators have configured the system to allow private Call Answer messages.
  • Messages sent to Modular Messaging subscribers by remote users might be marked private. The method used to designate the privacy marking is determined by the networked system.

Accessing private messages

Modular Messaging supports access of private messages as follows:

  • When subscribers access a private message from any of the Modular Messaging TUIs, the TUI announces that the message is private before playing the message. Depending on the administered privacy parameters, the TUIs restrict subscribers from forwarding private messages or from replying to private messages with the original message attached.
  • When subscribers access a private message from the Modular Messaging Web Client application, the application provides a visual indicator for private messages. Irrespective of the administered privacy parameters, Modular Messaging Web Client restricts subscribers from forwarding private messages, replying to private messages with the original private message attached, and saving a private message.
  • When subscribers access a private message from the Unified Communication Center (UCC) Speech Access client, the client announces that the message is private. Depending on the administered privacy parameters, the client restricts subscribers from forwarding private messages or from replying to private messages with the original private message attached.
  • Client Add-in for Microsoft Outlook does not enforce forwarding restrictions for private messages, and IMAP4 standards-based clients also might not enforce forwarding restrictions. To ensure system-wide enforcement of message privacy, these clients are prevented from accessing user mailboxes by default. These clients can be used to access user mailboxes in the following cases only:
    • The Privacy Enforcement Level parameter is not set to Full.
    • The Restrict Client Access parameter in the COS is set to No.

    Note: For these clients to have access to system mailboxes, you must also set the IMAP4 client access enabled parameter to Yes on the Internet Messaging General Options and Settings page on the MSS (Feature Administration > Internet Messaging > General Options and Settings).

    When subscribers access a private message from Client Add-in for Microsoft Outlook, the application provides a visual indicator for private messages. However, the application does not enforce privacy, hence, subscribers are allowed to forward the message or reply to the message with the original attached. Subscribers can also save the message using the Save As feature.

    Standard IMAP4 clients may provide a visual indicator for private messages but only if the client recognizes the standard RFC822 privacy or sensitivity message header.

Administering privacy settings

System administrators can set the levels of privacy support and privacy enforcement. These administered levels also determine the behavior of user interfaces and clients with respect to privacy. The following table lists the administration that must be completed on the MAS and MSS to configure message privacy.

Task MAS or MSS Notes
Configuring the Privacy Enforcement Level MAS Traditional voice mail systems typically prevent subscribers from forwarding messages marked as private or from replying to private messages with the original message attached. Most email systems and email clients, however, do not prevent these actions, even when a message is marked as private.

The Privacy Enforcement Level parameter enables system administrators to determine whether their systems behave more like like traditional voice mail systems or more like typical email systems.

This parameter has three possible settings:

  • Full: This is the default setting for new Modular Messaging—MSS installations. With this setting, subscribers can access their mailboxes using only the Modular Messaging TUIs, the Modular Messaging Web Client, and UCC Speech Access. Subscribers cannot access their mailboxes using standards-based clients or Client Add-in for Microsoft Outlook.

    With this setting, subscribers cannot forward private messages, or reply to private messages with the original message attached. The system also restricts delivery of new private messages to recipients on networked machines (that is, other MAS/MSS or message systems in the network). This allows private messages to be delivered only to messaging systems capable of enforcing privacy settings (such as Intuity AUDIX, Aria, Serenade, and Modular Messaging—MSS).

    Selecting this option overrides the Restrict Client Access to Mailboxes? class of service (COS) option on the MSS. When this option is selected, all COSs behave as if that option were set to Yes.

  • Partial: With this setting, subscribers can access their mailboxes using the Modular Messaging TUIs, the Modular Messaging Web Client, and UCC Speech Access. Subscribers can also access their mailboxes using Client Add-in for Microsoft Outlook and standards-based clients, if the class of service (COS) has the Restrict Client Access to Mailbox? option set to No.

    With this setting, the TUIs, Modular Messaging Web Client, and UCC Speech Access enforce privacy. This means that subscribers cannot forward private messages, or reply to private messages with the original message attached. It does not, however, restrict delivery of new private messages to recipients on networked machines. This allows private messages to be delivered to messaging systems that might not be capable of enforcing privacy settings. This also means that recipients of messages marked private might be able to forward them to others using email. This includes subscribers using the Client Add-in for Microsoft Outlook and non-Avaya IMAP4 and POP3 clients, if the class of service (COS) has the Restrict Client Access to Mailbox? option set to No.

  • Notification only: This is the default setting for upgrades from previous releases of Modular Messaging—MSS. This option does not prevent subscribers from forwarding private messages or replying with the original private message attached. This includes subscribers using the Client Add-in for Microsoft Outlook and standards-based IMAP4 and POP3 clients, if the class of service (COS) has the Restrict Client Access to Mailbox? option set to No.

    Although messages are marked and announced in the TUIs as being private, they are not restricted from client access, and might be forwarded without restriction.

Note: This parameter is independent of the Allow Private Call Answer Messages parameter on the MAS.

Configuring the Allow Private Call Answer
Messages setting
MAS During TUI general properties administration, administrators can enable the Allow Private Caller Answer Messages parameter, which permits callers reaching the Avaya CCI to mark Call Answer messages private. If this parameter is disabled, callers are not permitted to leave private messages.

Note that this parameter does not control whether subscribers are able to create new private messages.

Note: This parameter is independent of the Privacy Enforcement Level parameter on the MAS.

Configuring the Restrict Client Access setting
MSS During class-of-service administration, administrators can configure the Restrict Client Access field to determine whether subscribers using that COS can use the Client Add-in for Microsoft Outlook or an IMAP4 or POP3 standards-based client to access their Modular Messaging mailboxes.

If this parameter is set to No, subscribers can access their mailboxes from IMAP4 and POP3 clients and from Client Add-in for Microsoft Outlook. If this parameter is set to Yes, subscribers will be able to access their mailboxes only from Avaya proprietary interfaces or clients.

The Restrict Client Access field does not affect the behavior of the Modular Messaging telephone user interfaces (TUIs), Modular Messaging Web Client, and Speech Access. These clients will continue to have access to the Modular Messaging mailboxes, even when the COS is set to Yes.

Important! If the Privacy Enforcement Level is set to Full on the Message Application Server, that setting overrides this Restrict Client setting so that client access is restricted regardless of this field's value.

Note: The following considerations apply to message privacy:

  • Marking a message as private indicates the sender's intent that the message be treated in a confidential manner and makes it difficult for the recipient to easily forward the message. However, there is no guarantee that the recipient will not rerecord the voice content of a message or play the message through a speakerphone.
  • Messages with attached faxes or files can be marked as private, but there are no restrictions on viewing, printing, or distributing files that are attached to such messages.

 

 

Top of page