System Security Management

Determines whether the user is presented with a message that warns against unauthorized system access or use. The message displays on the System Administration Tool home page and requires the user's acknowledgment (via Accept button) before proceeding to the login page. The message displays again on logout.

False (No banner)

The text that will appear on the Login Banner.

Example:

THIS IS A PRIVATE COMPUTER SYSTEM: It is for authorized use only. Users (authorized and unauthorized) have no explicit or implicit expectation of privacy.

Any or all uses of this system and all files on this system may be intercepted, monitored, recorded, copied, audited, inspected, and disclosed to authorized site and law enforcement personnel, as well as authorized officials of other agencies, both domestic and foreign. By using this system, the user consents to such interception, monitoring, recording, copying, auditing, inspection, and disclosure at the discretion of authorized site personnel.

Unauthorized or improper use of this system may result in administrative disciplinary action and civil and criminal penalties. By continuing to use this system you indicate your awareness of and consent to these terms and conditions of use. LOG OFF IMMEDIATELY if you do not agree to the conditions stated in this warning.

Blank

Determines the rules users must follow when creating a password.

Options are as follows:

Weak

• 6 to 20 alphanumeric characters in length

• does not contain the user's login ID (username), current password, or the default System password

• valid characters are: upper- and lower-case letters, numbers (0-9), and special characters (` ~ ! @ # $ % ^ & * ( ) - _ = +)

Medium

• 7 to 20 alphanumeric characters in length

• does not contain user's current password or the default System password

• does not contain, repeat, or reverse the associated user ID

• does not contain three of the same characters used consecutively

• valid characters are: upper- and lower-case letters, numbers (0-9), and special characters (` ~ ! @ # $ % ^ & * ( ) - _ = +)

Strong

• 15 to 20 characters using at least two characters from each of the four character sets, that is: upper-case letters (A-Z), lower-case letters (a-z), numbers (0-9), and special characters (` ~ ! @ # $ % ^ & * ( ) - _ = +)

• does not contain user's current password or the default System password

• does not contain, repeat, or reverse the associated user ID

• does not contain three of the same characters used consecutively

• differs from the previous password by at least four characters

Weak

The number of minutes of inactivity that must elapse in the current System Administration Tool session before the session is automatically terminated.

NOTE: This timer, if set to expire too soon, could interfere with the successful completion of certain system processes such as form data imports or exports. If such a process aborts because of a forced session termination, increase the timer duration and re-attempt.

Other events that may result in session termination before this timer expires:

• A Multi-node Management backup, System Data Synchronization (SDS) A feature that shares system programming data among a network or cluster of elements (MiVoice Business systems) and synchronizes the system data of those elements with the data of a master element. This application reduces the amount of time requred to maintain consistent data across the elements. SDS also allows you to share user and device data between a primary and secodary controller. sync, or any network-wide actions performed from any node in a SDS network.

• The system time is changed to a time beyond when the timer is set to expire.

• The current System Administration Tool session is logged out from the tool selection page (the parent page), and there is another login from the same parent browser window, resulting in the termination of the first session.

If a session was terminated because of an actual timeout (as opposed to a forced termination), an msplogs log similar to the following is generated:

50 LOW 2011/09/01 15:33:56 Login/Logout Security Audit Audit Action Type: logout
UserName: system

User Validated: true
Session Available: true
Session ID: 163
Comments: Terminated by timeout.

15 minutes

Specify the number of days in the range 0 to 365 before the password expires and is no longer valid. If a user attempts to log in after the password has expired, the system prompts for a new password before the user is allowed in.

NOTE: All password changes are time-stamped even if the password never expires. This means that an administrator who changed his or her non-expiring password 30 days ago (for example) and then sets it to expire in 15 days will be prompted for a password change on the next login attempt, which could be 5 minutes later.

0 (never expire)

Enter a passcode to secure access to the advance settings on 69xx phones.

The field accepts digits 0 to 9 only. The minimum passcode length is four, the maximum is 10.

See the 69xx Administrator's Guide on the Mitel Document Center website for more information about the advanced settings.

Blank

Specify an SSL security level for the application.

NOTE: If you modify the security level of an application (except SIP), you must manually reboot this node (element) and all the other nodes with which SDS for this form is enabled.

High

High

High

High

High

High