Security Guidelines For Android-Based Native Teams Devices - AudioCodes 400HD Series User's And Administrator's Manual

CHAPTER 1 Overview
Server Role
AudioCodes
Redirect
service
NTP
timeserver
Time Zone
Database
Microsoft
Apps Artifacts
server

Security Guidelines for Android-based Native Teams Devices

AudioCodes' Android-based Native Teams devices are purpose-built and customized for
Microsoft Teams calling and meeting. Customers might perceive Android-based products as vul-
nerable to security issues but security is less of an issue on devices purpose-built and cus-
tomized for Microsoft Teams calling and meeting. Security is in fact enhanced on these devices
as part of their default use.
When analyzing device security, two levels must be addressed:
Authentication and security with respect to Teams connectivity and use
■
■ Android level / system of the device
AudioCodes recommends the following:
■ Use the sign-in mode Sign-in with other device option. In this mode, users do not type the
password on the device but instead obtain a code on their PC / laptop to be used to sign-in;
the phone obtains a private token that enables it to access Teams cloud; this token, unlike
a password, allows only that device which obtained it to reuse it. The token is stored on the
secured file system.
■ Leverage Multi-Factor-authentication (MFA) to improve sign-in security.
■ Reduce the expiration time of the sign-in for devices which are connected remotely
(outside the organization's network) versus devices inside the organization's premises.
AudioCodes recommends visiting Microsoft's technical pages for more security guidelines and
policies for Microsoft Teams adoption:
■ Overview of security and compliance - Microsoft Teams | Microsoft Docs
Identity models and authentication for Microsoft Teams - Microsoft Teams | Microsoft
■
Docs
Service Name Port
AudioCodes 443
DM
Android NTP 123
Time Zones 443
Package -
manager
- 5 -
C448HD C450HD | Users & Administrator's Manual
Protocol
HTTPS AudioCodes redirect service
redirect.audiocodes.com
UDP -
HTTPS Time Zone Database ( often
called tz or zoneinfo)
- Microsoft will be requested for
the protocol and port and
FQDN. These URLs are
provided by the Admin agent.
Notes