Configuring Security Settings; Setting The Administrator Password - Huawei V100R001 User Manual

HUAWEI TE30 Videoconferencing Endpoint
User Guide
Web Request Authentication




Protocol Anti-Attack Measures





10.2 Configuring Security Settings

The security settings on your TE30 includes the settings of the administrator password,
whether to enable encryption, whether to allow remote logins, and upgrade password.

10.2.1 Setting the Administrator Password

With the administrator password set, you must enter it to access the Advanced Settings
screen.
Procedure
Step 1 Choose Advanced Settings > Settings > Secured > Password. Set the administrator
password parameters by referring to
Issue 01 (2013-03-27)
When a user requests to access a specified web page or submits a servlet request, the
TE30 checks that the user's session identifier is valid and that the user is authorized to
perform the operation.
The server implements the final authentication.
The server verifies the user-generated data. Before transmitting it to clients, the server
encodes the data in the HyperText Markup Language (HTML) to prevent malicious code
and cross-site scripting attacks.
Web security software is used to scan the web server and applications to ensure that there
are no high-risk vulnerabilities.
The communication port matrix is provided in the product documentation. Do not enable
the services and ports not mentioned in the communication port matrix.
The communication port matrix contains the following information:
− Available ports Transport layer protocols used by the ports
− Network elements (NEs) that use the ports to communicate with peer NEs
− Application layer protocols used by ports and description of the services at the
application layer
− Information about whether services at the application layer can be disabled
− Authentication modes of the ports Port functions, such as control traffic and data
traffic
The Real-time Transport Protocol (RTP) and Transport Layer Security (TLS) are
supported to encrypt voice services.
Robustness testing tools are used to scan protocols to ensure that there are no high-risk
vulnerabilities.
By default, the TE30 uses FTPS to encrypt data through the Secure Sockets Layer (SSL)
and ensure data integrity.
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
Table 10-1.
10 Security
79