Call Attack!

murtazashikarii · ‎11-17-2009

My client received a call from their service provider (ATT) that they reported over 700 calls placed from Friday, spec to places in Cuba and Canada on their main line number!

Would you know if I can access the call logs in some way to check what ext they were being made from or something on those lines?

I can block the outgoing international numbers but is there something I should check to make sure this does not happen in the future or does the issue lie at the service provider end?

ronlewis · ‎11-17-2009

Was this site configured by CCA or CLI? If you used CLI, and you have DID trunks, without all DID numbers mapped to a DN, the calls maybe toll fraud, in which case your customer may be liable. CCA 1.8 and above sets up the system correctly to prevent common toll fraud.

Here is document laying out the issues of common toll fraud for CLI admin;

http://www.cisco.com/en/US/products/sw/voicesw/ps4625/products_tech_note09186a00809dc487.shtml

To track calls placed, if not logging calls via Call Details Reporting (CDR) to an accounting system, you can use the UC500/CME HTML admin tool to show call history feature, By default the number of calls shown is pretty short, so more recent calls maybe overwriting older calls placed. Here is link to access the tool, http://www.cisco.com/en/US/docs/voice_ip_comm/sbcs/uc500/gui/user/guide/UC500_office_admin.pdf

Then use the reports menu, call history.

If you want to setup call accounting, you need a server to log the calls. We recommend ISI or veramark. Details here; https://www.myciscocommunity.com/docs/DOC-7314. and some other details here; https://www.myciscocommunity.com/docs/DOC-2061.

Ron Lewis

Cisco

murtazashikarii · ‎11-19-2009

Thanks Ron! The document was really helpful.