Granular Control to Disable Remote/Dial-In Voicemail Access
Summary
Provide an administrative toggle to disable external PSTN dial-in access to voicemail boxes via the star (*) key, while maintaining internal voicemail access through the RingEX desktop app, mobile app, and web portal.
Problem Statement / Business Need
Currently, any external caller who dials a user's direct line (DID) or extension can press *, enter the user's PIN, and access the voicemail system remotely.
For organizations bound by strict security frameworks (e.g., HIPAA, FINRA, CJIS) or companies enforcing Single Sign-On (SSO) and Multi-Factor Authentication (MFA), PSTN phone access creates an unmonitored back-door login vector. Disabling PSTN dial-in access forces all users to authenticate through secured, audited corporate applications (RingEX app/portal) to check their messages.
Proposed Solution
Add a policy toggle at both the Account Level (under Security / Global Settings) and the User Extension Level (under Messages & Notifications / Voicemail):
Setting Name: Allow Remote Phone Dial-in Access to Voicemail (or similar)
Options:
Enabled (Default - current behavior)
Disabled (Suppresses the * key trigger during voicemail greetings or disables PIN authentication from external callers)
Expected Behavior When Disabled
External Callers: Pressing * during the voicemail greeting is ignored, or plays an alert stating "Remote phone access is disabled. Please check your voicemail using the RingEX app."
App/Web Access: Users can still receive, view, listen to, and manage voicemails normally via the RingEX Mobile App, Desktop App, and Web Portal.
Hardphones (Desk Phones): Internal desk phones assigned to the extension can still access voicemail using the dedicated Message button or *86.
Value Impact
Security & Compliance: Eliminates brute-force PIN attacks over PSTN and enforces company MFA/SSO mandates for listening to sensitive customer audio.
Feature Parity: Brings RingCentral's voicemail management inline with modern Zero-Trust architecture practices.
Ahmad
shared this idea
-
Innocent
commented
This is an excellent security enhancement and a feature that would benefit organizations with strict compliance and access-control requirements. Allowing administrators to disable remote PSTN voicemail access while retaining access through authenticated RingEX applications would help reduce the risk of unauthorized voicemail access, PIN compromise, and brute-force attempts. The proposed account-level and user-level controls would provide the flexibility needed to support different business and security policies across departments. Additionally, this aligns well with modern Zero Trust security principles and organizations that mandate SSO and MFA for user authentication. I strongly support this recommendation as it would improve both security posture and administrative control without impacting the normal user experience through RingEX applications and internal
-
Brad
commented
This would be critical as a feature so that we don't have to implement alternative operational workflows that would be significantly impactful and more costly.