AudioCodes C448HD - Security Guidelines for Android-Based Native Teams Devices

CHAPTER1 Overview
C448HD C450HD | Users & Administrator's Manual
Server Role Service Name Port Protocol Notes
AudioCodes
Redirect
service
AudioCodes
DM
443 HTTPS AudioCodesredirectservice
redirect.audiocodes.com
NTP
timeserver
AndroidNTP 123 UDP -
TimeZone
Database
TimeZones 443 HTTPS TimeZoneDatabase(often
calledtzorzoneinfo)
Microsoft
AppsArtifacts
server
Package
manager
- - Microsoftwillberequestedfor
theprotocolandportand
FQDN.TheseURLsare
providedbytheAdminagent.
Security Guidelines for Android-based Native Teams Devices
AudioCodes'Android-basedNativeTeamsdevicesarepurpose-builtandcustomizedfor
MicrosoftTeamscallingandmeeting.CustomersmightperceiveAndroid-basedproductsasvul-
nerabletosecurityissuesbutsecurityislessofanissueondevicespurpose-builtandcus-
tomizedforMicrosoftTeamscallingandmeeting.Securityisinfactenhancedonthesedevices
as part of their default use.
Whenanalyzingdevicesecurity,twolevelsmustbeaddressed:
■ AuthenticationandsecuritywithrespecttoTeamsconnectivityanduse
■ Androidlevel/systemofthedevice
AudioCodesrecommendsthefollowing:
■ Usethesign-inmodeSign-in with other device option.Inthismode,usersdonottypethe
passwordonthedevicebutinsteadobtainacodeontheirPC/laptoptobeusedtosign-in;
thephoneobtainsaprivatetokenthatenablesittoaccessTeamscloud;thistoken,unlike
apassword,allowsonlythatdevicewhichobtainedittoreuseit.Thetokenisstoredonthe
securedfilesystem.
■ LeverageMulti-Factor-authentication(MFA)toimprovesign-insecurity.
■ Reducetheexpirationtimeofthesign-infordeviceswhichareconnectedremotely
(outsidetheorganization'snetwork)versusdevicesinsidetheorganization'spremises.
AudioCodesrecommendsvisitingMicrosoft'stechnicalpagesformoresecurityguidelinesand
policiesforMicrosoftTeamsadoption:
■ Overviewofsecurityandcompliance-MicrosoftTeams|MicrosoftDocs
■ IdentitymodelsandauthenticationforMicrosoftTeams-MicrosoftTeams|Microsoft
Docs
- 5 -