
CHAPTER1 Overview C448HD and C450HD | Users & Administrator's Manual
Screen Lock
AudioCodes Native Teams devices use a screen lock mechanism to prevent any malicious
user/users from gaining access to Calendar information and / or Active Directory list of
employeesand/ortriggeringunauthorizedTeamscallsfromthedevice.Afterenablingscreen
lock,thedeviceautomaticallylocksafterapreconfiguredperiod;acodeisrequiredtounlock
thedeviceandresumefulloperation.
AudioCodes Private Key
ThesystemsoftwareonAudioCodesNativeTeamsdevicesissignedwithAudioCodes'private
key.Userscanreplacethecompletesoftwareonlywithnewsoftwarethatisalsosignedby
AudioCodes'privatekey.
Thispreventsusersfromreplacingthecompleteover-the-air(OTA)packageofthedevicewith
anynewsystemsoftware,unlessthesoftwareisfullysignedbyAudioCodes.
Android Debug Bridge (ADB)
AudioCodesdisabledtheAndroidDebugBridge(ADB)applicationandkeepstheTeamsapp
runninginthefrontallthetime.Asaresult,it'simpossibletoinstallotherappsfromunknown
sources,andtosideloadapps.
App Signing
Android requires all apps to be digitally- signed with a developer key before installation;
currently,theAudioCodesNativeTeamsdevicesverifythatappsaresignedbyMicrosoft.
Appsigningpreventsmalicioususer/usersfromreplacingaMicrosoft-signedappwithanapp
that "pretends" to be Microsoft but which lacks the private key that is known only to
Microsoft.
Web Browser
TheAudioCodesNativeTeamsdevicedoesnotincludeaWebbrowser.Userscannotbrowse
tothepublicinternetorinternalintranet.AllWebservicesarecustomizedtoconnecttoOffice
365services and AudioCodes'managed services such as the One VoiceOperations Center
(OVOC).
WithoutaWebbrowser,malicioususer/userswillnotbeabletoaccessthedeviceandbrowse
fromitasatrusteddeviceintothecustomernetwork.
Remote Configuration Management
AudioCodesNativeTeamsdevicesdonothaveanembeddedWebserver.Configurationand
managementareperformedusingoneofthefollowingremoteinterfaces:
■MicrosoftTeamsAdminCenter(forNativeTeamsdevices)overHTTPSprotocols,enabled
afterasuccessfulsign-inauthenticationprocess.
■AudioCodesDeviceManager(partofAudioCodes'OVOCsuite)overHTTPS.
- 7 -