Huawei TE30 Product Overview page 33

TE30 Videoconferencing Endpoint
Product Overview
l
l
l
l
l
l
l
To start network diagnostics, connect the diagnostic tool to the endpoint. To set up the
connection, the user name and password are required, which are encrypted and then
transmitted to the endpoint.
Web Request Authentication
l
l
l
l
Protocol Anti-Attack Measures
l
l
l
l
l
Issue 03 (2018-06-30)
Connectivity
Route information
Bandwidth
Whether required ports are blocked by firewalls and whether the destination ports are
enabled
Network quality indexes, including QoS, latency, jitter, packet loss rate, and out-of-order
rate
NAT device type
Whether the changes that the ALG has made for H.323 and SIP messages are correct
When a user requests access to a specified web page or submits a servlet request, the
endpoint checks whether the user's session identifier is valid and whether the user is
authorized to perform the operation.
The server implements the final authentication on the user.
Before transmitting user-generated data to clients, the server verifies the data and
encodes it using HyperText Markup Language (HTML) to prevent malicious code and
cross-site scripting attacks.
Web security software is used to scan the web server and applications to ensure that there
are no high-risk vulnerabilities.
The communication matrix is provided in the product documentation. Do not enable the
services and ports that are not mentioned in the communication matrix.
The communication port matrix contains the following information: open ports, transport
layer protocols used by the ports, network elements (NEs) that use the ports to
communicate with peer NEs, application layer protocols used by the ports and
description of the services at the application layer, whether services at the application
layer can be disabled, authentication modes adopted by the ports, and port functions
(such as data traffic control).
The endpoint utilizes multiple encryption measures, including H.235 (for encryption of
media and signaling streams), Secure Real-time Transport Protocol (SRTP), Transport
Layer Security (TLS), and Hypertext Transfer Protocol Secure (HTTPS), to ensure
secure and stable running of the videoconferencing system.
For network management, the endpoint supports the Simple Network Management
Protocol v3 (SNMP v3), which features higher adaptability and security. User names are
needed to connect the network management system to the endpoint.
Robustness testing tools are used to scan protocols to ensure that there are no high-risk
vulnerabilities.
By default, the File Transfer Protocol over SSL (FTPS) and LDAP over SSL (LDAPS)
are used to encrypt the address book, ensuring data integrity and preventing data from
being stolen.
Copyright © Huawei Technologies Co., Ltd.
5 Functions and Features
27