Before any Audio/Video equipment can be installed onto the HSC network, it must be vetted and approved by IT-GRC prior to purchase. This process, found here, mitigates potential security risks. Academic Technology, in collaboration with OU Information Technology Security, compiled the Audio/Video-Conferencing Security Standard document to streamline the risk assessment and purchasing process for an entire suite of A/V products and equipment typically integrated into collaborative spaces.
HSC departments &/or colleges should request new A/V technology or upgrades through Academic Media & Digital Services, (AMDS). AMDS will choose equipment from the vetted technology list. If requested equipment has not been vetted, AMDS will submits an IT Product Review/Technology Risk Assessment on behalf of the customer. All technology products listed on the Standard mentioned above have passed an IT Product Review/Risk Assessment and are approved for the network. When possible, devices listed on the Standard will be considered "pre-configured" by AT to meet the majority of requirements to address identified risks.
However, if a department or college wishes to purchase said technology internally, they must adhere to the process and submit an IT Product Review/Technology Risk Assessment request. Please review the Standard so you can understand the IS Administrator's responsibilities for security configurations on a per deployment basis. Contact your Tier 1 to find out who your who your IS Administrator is for your area.
REGARDING POLY (a.k.a POLYCOM) CODECS:
Service Contract Requirement: Please note “an active service contract must be maintained for each Polycom device to ensure all security patches and updates are available for each device.” If you are operating a Polycom videoconferencing system without an active service contract, you are not in compliance with the policy and your device will be removed from the video infrastructure. Your department will need to renew the Polycom service contract in order to remain on the HSC-IT network.
Service Contract Renewal:To renew your Polycom maintenance contract, please contact AT or AMDS for a list of approved vendors. You will need to provide the Polycom model(s) and serial number(s), along with the college or departmental point of contact information.
Poly End of Life Announcement: On August 1st 2016, Polycom posted PDB #2013 (Product Discontinuance Bulletin) for all the HDX product models (HDX 4002, 6000, 7000, 8000 and 9006), the standalone EagleEye II and EagleEye View cameras, the HDX Media Centers, the Polycom Touch Control and all the HDX accessories. Please read the document located here.