Polycom 3725-76302-001LI manual DMA Operations Guide

DMA Operations Guide The Consequences of Enabling Maximum Security Mode

•Other configuration settings have stricter limits and constraints (each is set to the noted default if below that level when you enable Maximum security):

—Session configuration limits:

»Sessions per system is 4-80 (default is 40).

»Sessions per user is 1-10 (default is 5).

»Session timeout is 5-60 minutes (default is 10).

—Local account configuration limits:

»Local user account is locked after 2-10 failed logins (default is 3) due to invalid password within 1-24 hours (default is 1).

»Locked account remains locked either until unlocked by an administrator (the default) or for a duration of 1-480 minutes.

•Software build information is not displayed anywhere in the interface.

•You can’t restore a backup made before Maximum security was enabled.

•File uploads may fail when using the Mozilla Firefox browser unless the proper steps have been taken. See below.

Enabling File Uploads in Maximum Security with Mozilla Firefox

The Mozilla Firefox browser uses its own certificate database instead of the certificate database of the OS. If you use only that browser to access the Polycom DMA system, the certificate(s) needed to securely connect to the system may be only in the Firefox certificate database and not in the Windows certificate store. This causes a problem for file uploads.

File upload via the Polycom DMA system’s Flash-based interface bypasses the browser and creates the TLS/SSL connection itself. Because of that, it uses the Windows certificate store, not the Firefox certificate database. If the certificate(s) establishing trust aren’t there, the file upload silently fails.

To avoid this problem, you must import the needed certificates into Internet Explorer (and thus into the Windows certificate store). And, when accessing the system with Firefox, you must use its fully qualified host name.

First, start Internet Explorer and point it to the Polycom DMA system. If you don’t receive a security warning, the needed certificates are already in the Windows certificate store.

If you receive a warning, import the needed certificates. The details for doing so depend on the version of Internet Explorer and on your enterprise’s implementation of certificates.

In Internet Explorer 7, elect to continue to the site. Then click Certificate Error to the right of the address bar and click View Certificates to open the Certificate dialog box. From there, you can access the Certificate Import Wizard.

56 Polycom, Inc.