Security Guidelines For Android-Based Native Teams Devices; Android-Level Security Hardening - AudioCodes C455HD User's And Administrator's Manual

CHAPTER 1 Overview
Server Role
Time Zone
Database
Microsoft
Apps Artifacts
server

Security Guidelines for Android-based Native Teams Devices

AudioCodes' Android-based Native Teams devices are purpose-built and customized for
Microsoft Teams calling and meeting. Customers might perceive Android-based products as vul-
nerable to security issues but security is less of an issue on devices purpose-built and cus-
tomized for Microsoft Teams calling and meeting. Security is in fact enhanced on these devices
as part of their default use.
When analyzing device security, two levels must be addressed:
■ Authentication and security with respect to Teams connectivity and use
Android level / system of the device
■
AudioCodes recommends the following:
Use the sign-in mode Sign-in with other device option. In this mode, users do not type the
■
password on the device but instead obtain a code on their PC / laptop to be used to sign-in;
the phone obtains a private token that enables it to access Teams cloud; this token, unlike
a password, allows only that device which obtained it to reuse it. The token is stored on the
secured file system.
Leverage Multi-Factor-authentication (MFA) to improve sign-in security.
■
■ Reduce the expiration time of the sign-in for devices which are connected remotely
(outside the organization's network) versus devices inside the organization's premises.
AudioCodes recommends visiting Microsoft's technical pages for more security guidelines and
policies for Microsoft Teams adoption:
Overview of security and compliance - Microsoft Teams | Microsoft Docs
■
■ Identity models and authentication for Microsoft Teams - Microsoft Teams | Microsoft
Docs
■ Sign in to Microsoft Teams - Microsoft Teams | Microsoft Docs

Android-Level Security Hardening

Major Android- level system- level developments have been incorporated into AudioCodes'
devices to improve security:
■ See Google Play Services on the next page
Service Name Port
Time Zones 443
Package -
manager
- 5 -
C455HD | Users & Administrator's Manual
Protocol
HTTPS Time Zone Database ( often
called tz or zoneinfo)
- Microsoft will be requested for
the protocol and port and
FQDN. These URLs are
provided by the Admin agent.
Notes