Ultra Secure Mode

Guidelines

The Collaboration Server maintains a local record of:

Audit Events – users that generate these events are marked as being either internal or external.

Successful user logins

Failed user login attempts

User passwords and user lockout policy for external users are managed via Active Directory’s integration with the user’s host machine.

Enabling or disabling Active Directory integration does not require a reset.

In Standard Security Mode multiple accounts of all user types are supported. In Ultra Secure Mode, enabling Active Directory integration is only permitted if the Collaboration Server only has one local Administrator User.

Multiple Machine Accounts with various roles are supported.

Microsoft Active Directory is the only directory service supported.

Active Directory integration is configured as part of the Management Network.

Both IPv4 and IPv6 addressing are supported.

In Standard Security Mode, the Active Directory can be queried using NTLM with or without TLS encryption. In Ultra Secure Mode, TLS encryption is required.

Server and client certificate validation requests use LDAP with or without TLS encryption.

When using LDAP over TLS, in addition to using port 389 with STARTTLS, the administrator has the option of using port 636.

LDAP is not supported by Collaboration Server (RMX) 1800-0.

The Active Directory setting define Send NTLMv2 response only. Refuse LM & NTLM (in the group policy management > forest > polycomdemo.com > group policy objects > default domain policy > edit > computer configuration > policies > windows settings > security settings > local policies > security options > network security: Lan Manager authentication level) is not supported with the Collaboration Server.

Active Directory is not supported by Collaboration Server (RMX) 1800-0.

Polycom®, Inc.

852

Page 883
Image 883
Polycom 1500/1800/2000/4000 manual Guidelines