AudioCodes C455HD - Security Guidelines for Android-based Native Teams Devices

CHAPTER1 Overview
C455HD | Users & Administrator's Manual
Server Role Service Name Port Protocol Notes
TimeZone
Database
TimeZones 443 HTTPS TimeZoneDatabase(often
calledtzorzoneinfo)
Microsoft
AppsArtifacts
server
Package
manager
- - Microsoftwillberequestedfor
theprotocolandportand
FQDN.TheseURLsare
providedbytheAdminagent.
Security Guidelines for Android-based Native Teams Devices
AudioCodes'Android-basedNativeTeamsdevicesarepurpose-builtandcustomizedfor
MicrosoftTeamscallingandmeeting.CustomersmightperceiveAndroid-basedproductsasvul-
nerabletosecurityissuesbutsecurityislessofanissueondevicespurpose-builtandcus-
tomizedforMicrosoftTeamscallingandmeeting.Securityisinfactenhancedonthesedevices
as part of their default use.
Whenanalyzingdevicesecurity,twolevelsmustbeaddressed:
■ AuthenticationandsecuritywithrespecttoTeamsconnectivityanduse
■ Androidlevel/systemofthedevice
AudioCodesrecommendsthefollowing:
■ Usethesign-inmodeSign-in with other device option.Inthismode,usersdonottypethe
passwordonthedevicebutinsteadobtainacodeontheirPC/laptoptobeusedtosign-in;
thephoneobtainsaprivatetokenthatenablesittoaccessTeamscloud;thistoken,unlike
apassword,allowsonlythatdevicewhichobtainedittoreuseit.Thetokenisstoredonthe
securedfilesystem.
■ LeverageMulti-Factor-authentication(MFA)toimprovesign-insecurity.
■ Reducetheexpirationtimeofthesign-infordeviceswhichareconnectedremotely
(outsidetheorganization'snetwork)versusdevicesinsidetheorganization'spremises.
AudioCodesrecommendsvisitingMicrosoft'stechnicalpagesformoresecurityguidelinesand
policiesforMicrosoftTeamsadoption:
■ Overviewofsecurityandcompliance-MicrosoftTeams|MicrosoftDocs
■ IdentitymodelsandauthenticationforMicrosoftTeams-MicrosoftTeams|Microsoft
Docs
■ SignintoMicrosoftTeams-MicrosoftTeams|MicrosoftDocs
Android-Level Security Hardening
Major  Android- level  system- level  developments  have  been  incorporated  into  AudioCodes' 
devicestoimprovesecurity:
■ SeeGooglePlayServicesonthenextpage
- 5 -