CHAPTER1 Overview
C455HD | Users & Administrator's Manual
Screen Lock
AudioCodes Native Teams devices use a screen lock mechanism to prevent any malicious
user/users from gaining access to Calendar information and / or Active Directory list of
employeesand/ortriggeringunauthorizedTeamscallsfromthedevice.Afterenablingscreen
lock,thedeviceautomaticallylocksafterapreconfiguredperiod;acodeisrequiredtounlock
thedeviceandresumefulloperation.
AudioCodes Private Key
ThesystemsoftwareonAudioCodesNativeTeamsdevicesissignedwithAudioCodes'private
key.Userscanreplacethecompletesoftwareonlywithnewsoftwarethatisalsosignedby
AudioCodes'privatekey.
Thispreventsusersfromreplacingthecompleteover-the-air(OTA)packageofthedevicewith
anynewsystemsoftware,unlessthesoftwareisfullysignedbyAudioCodes.
Android Debug Bridge (ADB)
The device does not allow access to ADB.
AudioCodesdisabledtheAndroidDebugBridge(ADB)applicationandkeepstheTeamsapp
runninginthefrontallthetime.Asaresult,it'simpossibletoinstallotherappsfromunknown
sources,andtosideloadapps.
App Signing
Android requires all apps to be digitally- signed with a developer key before installation;
currently,theAudioCodesNativeTeamsdevicesverifythatappsaresignedbyMicrosoft.
Appsigningpreventsmalicioususer/usersfromreplacingaMicrosoft-signedappwithanapp
that"pretends"tobeMicrosoftbutwhichlackstheprivatekeythatisknownonlytoMicrosoft.
Web Browser
TheAudioCodesNativeTeamsdevicedoesnotincludeaWebbrowser.Userscannotbrowseto
thepublicinternetorinternalintranet.AllWebservicesarecustomizedtoconnecttoOffice
365 services and AudioCodes' managed services such as the One Voice Operations Center
(OVOC).
WithoutaWebbrowser,malicioususer/userswillnotbeabletoaccessthedeviceandbrowse
fromitasatrusteddeviceintothecustomernetwork.
Remote Configuration Management
AudioCodesNativeTeamsdevicesdonothaveanembeddedWebserver.Configurationand
managementareperformedusingoneofthefollowingremoteinterfaces:
- 7 -