IT Baseline Protection Manual - The Information Warfare Site

Safeguard Catalogue - Communications Remarks
____________________________________________________________________ .........................................
To ensure the fault-free operation of the fax server, it is also necessary to
specify who is responsible for administration of the hardware components, the
operating system and the fax server application. A fax mail centre should be
set up (see also S 2.180 Setting up a fax mail centre). The administration
personnel and the staff employed in the fax mail centre must be given training
on the operating system and fax server application. To avoid disruption due to
improper use, the users must also be trained in operation of the fax client
application.
Often the permissions which can be granted to users and user groups on fax
servers for incoming fax transmissions include:
- Read rights,
- Forwarding rights
- Delete rights.
For outgoing fax transmissions, often the following rights can be granted:
- Send rights,
- Suspend rights,
- Delete rights,
- right to modify transmission options
Permissions should be granted in accordance with the provisions contained in
the fax security guidelines (see also S 2.178 Creation of security guidelines
for the use of the fax server).
Unless it is possible to ensure by technical means that fax transmissions are
forwarded immediately, access rights should be granted in such a manner that
only authorised users can access the relevant "mailboxes" on the server.
As a general rule, access to temporary areas in which the fax server
application stores fax transmissions temporarily prior to their being sent out or
distributed to recipients should only be granted to privileged users (e.g.
administrators, fax mail centre).
The connections of the fax server to the private branch exchange or to the
public switched telephone network should be checked at regular intervals to
ensure that they are working properly. Where the fax server is linked to
internal communications systems, such as, for example, an e-mail system or a
workflow management system, the functioning of these connections should
similarly be checked at regular intervals.
Regular checks must also be performed to ensure that sufficient hard disk
space is available for storage of fax transmissions (see also S 5.75 Protecting
against overloading the fax server). If the hard disk space becomes exhausted,
no further fax transmissions can be received or sent.
The fax server activities must be logged in accordance with the provisions of
the fax security guidelines and the logs must be examined at regular intervals
(see also S 2.64 Checking the log files and S 5.25 Using transmission and
reception logs). When specifying the extent and content of logs, the need for
____________________________________________________________________ .........................................
IT-Baseline Protection Manual: Oktober 2000
Responsibility for
administration
Granting of permissions
on fax servers
Granting of access
rights
Checking of available
hard disk space
Analysis of log data