TE20 Videoconferencing Endpoint
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
Disable protocols that may impose attacks, such as Telnet and SSH. By default, Telnet
and SSH are disabled.
To prevent devices from attacks, it is recommended Telnet and SSH be disabled. To
disable Telnet and SSH, on the endpoint web interface, choose System Settings >
Security > SSH/Telnet and set both SSH and Telnet login to Do not allow.
If the endpoint is deployed on a public network, power off the endpoint when it is not in
use.
Add frequently-used IP addresses or IP address segments to the whitelist. This approach
helps defend against potential network threats, such as flood attack and slow HTTP
attack. For details, see System Connection Whitelist.
Periodically backup system configuration files to restore the system if an exception
occurs. For details, see 9.9 Backup and Restoration.
Check device alarms every day and clear unnecessary alarms in time to ensure proper
running of the system. For details, see 9.6 Checking Alarms.
Periodically check and back up logs and find error information from them. For details,
see 10.2.7 Viewing Logs.
10.5.9 Security Emergency Response Mechanism
Users need to build a security emergency response mechanism to ensure that the system can
immediately respond to security issues and return to proper operations to minimize losses.
10.5.10 Security Emergency Response Mailbox
You can contact the Huawei Product Security Incident Response Team (PSIRT) via the
security emergency response mailbox when encountering an emergency.
Contact the Huawei PSIRT via PSIRT@huawei.com if you wish to:
Provide feedback on vulnerabilities of Huawei products.
Obtain emergency response service from Huawei.
Obtain information about vulnerabilities of Huawei products.
Encrypt the files that contain sensitive information before sending them. Go to
http://www.huawei.com/en/security/psirt/about-huawei-psirt/index.htm to obtain the
encryption key.