Re: [PEN-TEST] PBX Security

["Davidson,Sam" <SDAVIDSON () CERNER COM>]

I have an excellent PBX checklist, it was codeveloped with Lucent (the
manufacturer of Definity PBX) and is still broad and applicable to Nortel
Meridian, old AT&T Merlins, etc.
Send me a message under separate copy, and I can forward this to you or
provide an FTP link.



-----Original Message-----
From: Curphey, Mark (ISS Atlanta) [mailto:MCurphey () ISS NET]
Sent: Wednesday, October 04, 2000 11:32 AM
To: PEN-TEST () SECURITYFOCUS COM
Subject: Re: [PEN-TEST] PBX Security


http://csrc.nist.gov/publications/drafts/PBX-draft2.pdf

-----Original Message-----
From: Joe Traietta [mailto:JTraietta () ASAHIBANKNY COM]
Sent: Wednesday, October 04, 2000 10:07 AM
To: PEN-TEST () SECURITYFOCUS COM
Subject: PBX Security


I have been asked to perform a security review on the PBX system (NEC NEAX
2000 IVS) at my company.  I have virtually no PBX experience, so I was
hoping somebody could point me to a good resource, or pass along some
personal experience about reviewing / auditing a PBX system.

Thank you.

Joseph Traietta
Data Security Officer
Asahi Bank, New York Branch