AudioCodes C435HD - Security Guidelines for Android-Based Native Teams Devices

CHAPTER1 Overview
C435HD Users & Administrator's Manual
Server Role Service Name Port Protocol Notes
AudioCodes
Device
Manager
AudioCodes
DM
443 HTTPS AudioCodesdevice
managementserver
AudioCodes
Redirect
service
AudioCodes
DM
443 HTTPS AudioCodesredirectservice
redirect.audiocodes.com
NTP
timeserver
AndroidNTP 123 UDP -
TimeZone
Database
TimeZones 443 HTTPS TimeZoneDatabase(often
calledtzorzoneinfo)
Microsoft
AppsArtifacts
server
Package
manager
- - Microsoftwillberequested
fortheprotocolandportand
FQDN.TheseURLsare
providedbytheAdmin
agent.
Security Guidelines for Android-based Native Teams Devices
AudioCodes'Android-basedNativeTeamsdevicesarepurpose-builtandcustomizedfor
MicrosoftTeamscallingandmeeting.CustomersmightperceiveAndroid-basedproductsas
vulnerabletosecurityissuesbutsecurityislessofanissueondevicespurpose-builtandcus-
tomizedforMicrosoftTeamscallingandmeeting.Securityisinfactenhancedonthesedevices
as part of their default use.
Whenanalyzingdevicesecurity,twolevelsmustbeaddressed:
■ AuthenticationandsecuritywithrespecttoTeamsconnectivityanduse
■ Androidlevel/systemofthedevice
AudioCodesrecommendsthefollowing:
■ Usethesign-inmodeSign-in with other device option.Inthismode,usersdonottype
thepasswordonthedevicebutinsteadobtainacodeontheirPC/laptoptobeusedto
sign-in;thephoneobtainsaprivatetokenthatenablesittoaccessTeamscloud;this
token,unlikeapassword,allowsonlythatdevicewhichobtainedittoreuseit.Thetoken
isstoredonthesecuredfilesystem.
■ LeverageMulti-Factor-authentication(MFA)toimprovesign-insecurity.
■ Reducetheexpirationtimeofthesign-infordeviceswhichareconnectedremotely
(outsidetheorganization'snetwork)versusdevicesinsidetheorganization'spremises.
- 4 -