...
In Phone-Extension Fields > click on Profile Information tab > Field to modify > click and select: Force Change of password on next login > click Next
Save Modifications
| Info |
|---|
Note: The users will then be forced to change the password upon next login. If the users never login to their extension using a web browser, the admin should change the password on each extension manually (web password cannot be Bulk Modified for security reasons). It is still necessary to have password security in place on the extensions to secure the extensions. |
Update Switchvox to apply new security features and patches. Go to Server > Updates to see what updates are available. For example, in v. 6.6.x and above secure SSL has been added as a security feature.
Delete any unused Outgoing Call Rules.
If you are not using the Switchvox Softphone app, you can turn Off SIP on All Networks on the Access Control List. Note: You will have to setup separate Access Control Rules for remote networks that need to register phones.
Monitor Call Logs on a regular basis. Check for calls at odd hours or calls to international numbers, if you don't frequently place international calls. You can run Call Reports by hour of the day, or review the Call Logs daily to see what time calls were going out.
Restrict (deny) Outgoing Call Rules such as international call rules and allow only those users who would need to call internationally. You can do this by going to Setup > Manage > click on the yellow pencil for an extension and go to the Outgoing Call Rules tab. To deny a call rule highlight it and select the red circle icon on the right of the rule, to deny access on that extension. Save SIP Extension.
You can also implement a password for outgoing calls (such as for international calls) to add an additional layer of security. Please refer to this article for more information:
Contact your Provider to see what security they can implement to prevent toll fraud.
Install network monitoring and security software on your network to monitor for intrusions or suspicious activity.