Educause Security Discussion mailing list archives

Voice mail portals


From: David Curry <david.curry () NEWSCHOOL EDU>
Date: Mon, 25 Mar 2013 14:47:11 -0400

Hi,

We're in the process of installing a VoIP solution in the new building on
campus (deployment to the rest of campus to follow). The solution includes
a "web portal" where users can go to adjust certain settings on their voice
mail (PIN change, etc.). Because some of the people who will have phone
numbers on the system won't actually have phones/offices (adjunct faculty,
etc.), we want to make the portal available from the Internet.

Our vendor's pro services team is recommending against this because
administrator access to the portal is via the same system, just a different
URL. We think we can work around this by limiting access to the
administrator URL with our F5 (or other similar approaches). But before we
do that, we though we'd ask...

What are other schools doing? If your VoIP product has a portal, do you let
people access it from the Internet, or just from on campus?

Thanks,
--Dave


--

*DAVID A. CURRY, CISSP* • DIRECTOR OF INFORMATION SECURITY

*THE NEW SCHOOL* • 55 W. 13TH STREET • NEW YORK, NY 10011

+1 212 229-5300 x4728 • david.curry () newschool edu

Current thread: