Quick Response to a Compromised User/Device

Updated at April 27th, 2023

+ More

Table of Contents

What to do if a user/device credentials are compromised.

Scope:

The following steps will allow you to quickly response if a user/device is suspected to have been compromised.

Requirements:

Access to Manager Portal (Reseller and Higher)

What to do if a user/device credentials are compromised.

Set user permission to Deny All
1. Log in to the Manager Portal and navigate to Domains
2. Navigate to Users and click the affected user
3. Under the Profile tab, scroll down to Dial Planning and set Dial Permission to Deny All, and click save
Re-create the user device
1. While you're in the user profile, click the Phones tab, make notes of the Mac Address if it's a hard phone device, Model, Record Calls setting, and Name. Click Delete next to the affected device
2. Click add phone, Enter the Phone Suffix you noted as name, select Record Calls setting and click Add button. If this is a hard phone, select the model device, Set the Record Calls setting, and enter the MAC address and click Add.
Reset Manager Portal Password and Voicemail PIN
1. Go to Users -> Select the affected user -> Advanced
2. Click Force Password Reset
You may now revert the dial permissions back to what they were, and this user will be all set.

response time compromised user