Polycom DMA 7000 System Operations Guide

DMA Operations Guide
Allow Unencrypted Connections to
the Enterprise Directory
Allow Unencrypted Connections to
MCUs
Table 9-5 Fields in the Security Configuration screen (continued)
Column Description
Normally, the DMA system connects to an enterprise directory using
SSL or TLS encryption. But if the directory server hasn’t been
configured to support encryption, the DMA system can only connect
using an unencrypted protocol. This option allows such a connection
if an encrypted connection can’t be established.
This configuration causes an extreme security flaw: the unencrypted
passwords of enterprise users are transmitted over the network,
where they can be easily intercepted.
Use this option only for diagnostic purposes. By toggling it, you can
determine whether encryption is the cause of a failure to connect to
an enterprise directory. If so, the solution is to correctly configure the
directory, not to allow ongoing use of unencrypted connections.
In maximum security mode, the Polycom DMA system uses only
HTTPS for the conference control connection to RMX MCUs, and
therefore can’t control an RMX MCU that accepts only HTTP (the
default). This option enables the system to fall back to HTTP for RMX
MCUs not configured for HTTPS.
We recommend configuring your MCUs to accept encrypted
connections rather than enabling this option. When unencrypted
connections are used, the RMX login name and password are sent
unencrypted over the network.
To change the security configuration
1 Go to System Setup > Management and Security > Security
Configuration.
2 To switch from a custom setting back to the recommended security mode,
click Maximum Security.
3 To switch from the recommended security mode to a custom setting:
a Click Custom Security.
b Check the unsecured network access method(s) that you want to
enable.
4 Click Update.
A dialog box informs you that the configuration has been updated.
5 Click OK.
Temporarily enabling console (SSH) access is supported for the purpose of
changing the root password. Contact Polycom Global Services for the default
root password and then change that password immediately on both nodes as
described below.
9–10 Polycom, Inc.