Avaya Phone Security Issue

Status
Not open for further replies.

ServerCaseUK

New User
Joined
Mar 25, 2019
Messages
23
Reaction score
1
Hello, New to 3CX - So far been testing it with a softphone and a Yealink SIP phone. Once fully tested I am moving over from our existing Avaya IP Office phone system. The phones we are going to keep and repurpose for use with 3CX and they are all listed as compatible. We've not tested the functionality yet but I don't foresee an issue.

One problem however I have run into when starting a test with an Avaya phone is the Avaya 3CX setup guide says the User ID must match the extension number. That is fine and makes it easier for provisioning the phones anyway, however when I change a User ID to the extension 3CX provides a security warning saying the User ID is insecure and I can see why - It's changing it from a random "password" looking User ID, to the 4 digit extension number - in this case the user ID is 8000 as an example.

Can anyone lend me their thoughts on what security issue this would pose please?
 
Easy to guess login names...
Then brute force passwords.
 
Unfortunately it is true for the time being that for those devices you cannot split the AuthID and ExtID and must be the same. As long you dont expose those extensions to the internet (allow WAN registrations) you can get away with the warning message.

A good readup to this topic would be this: https://www.3cx.com/blog/voip-howto/call-fraud/
 
Status
Not open for further replies.

Forum statistics

Threads
111,916
Messages
589,724
Members
164,787
Latest member
IWalter