Barco ClickShare Uživatelský manuál stáhnout pdf (Strana 12)

Wi-Fi and Security Considerations for ClickShare

Page 12 of 14

•

Wired Ethernet port: used only for remote administration

(not used for normal use of ClickShare). The Base Unit

does not initiate any external connections over the

Ethernet port. As an endpoint, it only opens a limited

number of ports:

TCP port 80 (www): for administration through the

web interface

TCP port 22 (ssh): for access by certified level 3

service technicians only

•

Wi-Fi AP on the Base Unit: not intended as a general

purpose AP, does no packet forwarding, is not a Wi-Fi

controller or lightweight AP, is protected using

(configurable) WPA2 encryption. The following ports are

accessible through this interface:

TCP port 80 (www): for administration through the

web interface

TCP port 22 (ssh): for access by certified level 3

service technicians only

TCP port 9876: for incoming connections from

Buttons

TCP port 9870: provided for iPad support

TCP port 873 (rsync): for gathering Button log files on

the Base Unit

•

Wi-Fi client on the ClickShare Button: limited by the

firmware on the Button to connect only to the AP on the

Base Unit, following the WPA2 encryption of the Base Unit.

•

USB port on the Base Unit: it is advisable not to extend

access to these USB ports through USB extenders beyond

the physical boundaries of the meeting room. In normal

use, these USB ports support only 3 devices:

ClickShare Button: used to pair the Button with that

particular Base Unit, and to update the software

residing on the Button. This process is handled

entirely by server-side software running on the Base

Unit.

USB pen drive: used to upgrade the software on the

Base Unit itself. This process is handled entirely by

server-side software running on the Base Unit. This

software checks the content on the USB pen drive by

verifying specific signatures (otherwise, no action is

taken). Thus, it is impossible to change the Base Unit

software by using a USB pen drive with malicious

software.

Keyboard: used only by certified level 2 service

technicians in case of problems. Because access is

password protected, unauthorized persons cannot do

anything via a connected keyboard.

•

PHP: The Base Unit runs PHP 5.3.15 internally, which

means that security vulnerabilities, if any, related to that

PHP version also apply to the ClickShare Base Unit.

In future versions of ClickShare, we plan to close the rsync port and

replace it by syslog (UDP port 514).

1 2 ... 7 8 9 10 11 12 13 14

Komentáře k této Příručce

Žádné komentáře

Barco ClickShare Uživatelský manuál Strana 12

Komentáře k této Příručce

Související produkty a manuály pro ne Barco ClickShare