Page 1 of 1

OTUC and EMAIL

Posted: 22 Mar 2007 23:12
by sandra
Hi

I have setup the OTUC server to work with the omniPCX and Exchange 2003.

Everything wors fine but I do have a concern; users are able to access vmail and also email from their IP Touch phone.

While it would not be bad to be able to listen to vmails and emails from a phone set, the fact is that voice mail passwords that users set, are very simple - most of the time as simple as 12345 - and this makes the exchange 2003 mailboxes vulnerable.

Is there a way to configure OTUC such as it will only read vmails and NOT the regular emails?

Thanks,

Posted: 22 Mar 2007 23:43
by cavagnaro
Well the main idea of using Unified Messaging with Exchange2003 is to use it as a deposit of your Vmail and Emails. If you don't want to leave vmails on Exchange just change the VM number of the extension to the one of 46X5.
The one that reads your Emails (including VoiceMails) is the Media Server with conjunction of the Extenso Plugin.
What i believe is that the domain administrator must enforce security policies also if you are using otuc 4.1 you can use NTLM authentication and take advantage of this, or use Radius instead of LDAP authentication, or Radius and then LDAP (cascading).
If users has a 12345 password and allowed to (the worst part) they are vulnerable from many points, not only OTUC.
What you can do is to tell UM to read only VM and not Emails, that on the services configuration.

Posted: 23 Mar 2007 10:14
by sandra
Thanks.

Am willing to tell UM to read only VMail and not Emails but I don't know how to do that. Can you tell me where is this configured?

Thanks S.
cavagnaro wrote:Well the main idea of using Unified Messaging with Exchange2003 is to use it as a deposit of your Vmail and Emails. If you don't want to leave vmails on Exchange just change the VM number of the extension to the one of 46X5.
The one that reads your Emails (including VoiceMails) is the Media Server with conjunction of the Extenso Plugin.
What i believe is that the domain administrator must enforce security policies also if you are using otuc 4.1 you can use NTLM authentication and take advantage of this, or use Radius instead of LDAP authentication, or Radius and then LDAP (cascading).
If users has a 12345 password and allowed to (the worst part) they are vulnerable from many points, not only OTUC.
What you can do is to tell UM to read only VM and not Emails, that on the services configuration.

Posted: 23 Mar 2007 14:16
by cavagnaro
Well,
On on Voice Mails, modify your UM and click next and there you have the option.
Check page 26 of 3EU_19_OTUC_R_4_0_Lx_Deployment_Guide_00041_09.pdf of OTUC 4 documentation.

Posted: 24 Mar 2007 19:58
by sandra
Thanks for the suggestion. However, when I access the UM thru the web, there is no such option - or Im totally missing it...

Also, I can't locate this part of the documenation. Can you please tell me what I'm missing here?

P.S Just to make sure that Im explaining my self properly, what I like to accomplish is to allow users to read regular voice mails that people leave when they call using an email client i.e. outlook.

Also, I like to allow users to listen to these regular voice mails using the IPTouch phone.

But I WANT to forbid users from listening to their regular email in the IPTouch phone (for security reasons).

I hope this is possible.

Thanks again, S.
cavagnaro wrote:Well,
On on Voice Mails, modify your UM and click next and there you have the option.
Check page 26 of 3EU_19_OTUC_R_4_0_Lx_Deployment_Guide_00041_09.pdf of OTUC 4 documentation.

Posted: 25 Mar 2007 04:52
by cavagnaro
Ok lets rewind.
Which version of OTUC are you using?
Yes it's possible modifying the check status i mentioned under voice mails.

Select Voice Mail in the main menu to get “Voice Mail System Managementâ€

Posted: 26 Mar 2007 23:53
by sandra
Thanks Cavagnaro. Im using Otuc version 4.1-000.031

[quote="cavagnaro"]Ok lets rewind.
Which version of OTUC are you using?
Yes it's possible modifying the check status i mentioned under voice mails.

Select Voice Mail in the main menu to get “Voice Mail System Managementâ€

Posted: 27 Mar 2007 11:47
by cavagnaro
Found the option?

Posted: 02 Apr 2007 13:17
by sandra
cavagnaro wrote:Found the option?
Thanks a lot Cavagnaro. I found it and worked like a charm!

S.