Cisco DX Series Video Endpoints: Best Practices for Desktop Collaboration

EnablementDavid Scott Technical Marketing Engineer

BRKCOL-2608

• Product Overview

• Deployment Considerations

• Expressway Mobile and Remote Access

• Roadmap

Agenda

http://www.cisco.com/go/ccp

1080p30 camera

7-inch, 1024x600 LCD

Capacitive touchscreen

HDMI Output

DX650

14-inch, 1920x1080 LCD

Capacitive touchscreen

Microphone positioned

for optimal pickup

Speaker

Power/lock button

1080p30 with 65° FOV

Doubles as Document Camera

“Source” button

DX70

Volume / Mute

Dual array microphones

SpeakerOn mute indicator

Power/lock button

“Source” button

1080p30 with 65°FOV

23-inch, 1920x1080 LCD

Capacitive touch screen

DX80 - Front

Features DX650 DX70 DX80

Full UC & Security, SE Android

Jabber/WebEx Native Support

3rd-Party App Support (Google Play)

Max Video Performance 1080p30 1080p30 1080p30

HDMI In (Content Sharing, PC Monitor)

HDMI Out (External Monitor Support) Dual Independent Display Mirror Mode Only Reserved for Future Use

Content Viewing via BFCP

Document Camera

Multi-Touch Monitor 7-inch, 1024x600 14-inch, 1920x1080 23-inch, 1920x1080

PoE (Power over Ethernet)

Mounting Option ADA Wallmount VESA Adapter & Mount VESA Adapter & Mount

Intelligent Audio Feature

GLP (USD), Base $1,695 $2,750 $3,990

Reference Slide

Minimum CUCM 8.5.1, 8.6.2, 9.1.2, 10.x, 11.x

Optional VESA adapter/wall mount kits are

available for the Cisco® DX70 and DX80.

VESA adapter plate replaces the DX unit’s foot stand

and provides a flat mounting surface with both VESA

standard bolt patterns (75x75, 100x100)

Adapter plates allow attachment to a wide-range of

3rd-party arms, mounts, stands, etc.

Deployment Considerations

7 Deployment Best Practice Considerations

1. Firmware

2. Video Resolution & Network Bandwidth

3. Operating Modes

4. Contacts

5. Enhanced Mode (Jabber, WebEx, Application Deployment & Development)

6. Expressway MRA

7. Other Considerations (Security, Extension Mobility, etc)

DX/CUCM Firmware

Step 1 of 7

DX Firmware and CUCM 10 Features

Feature CUCM 10.x Required

WiFi Profiles, HTTP Proxy, VPN Profiles Yes

Self-Provisioning Yes

Flexible DSCP * Yes

Lock and Wipe Enhancement Yes

IPv6 Yes

Simple Mode, Public No

Enforce Default Wallpaper No

Bluetooth Contact/Handsfree Integration No

Dual Bank Firmware Partitions (Active / Inactive) No

Push an Android APK from CUCM No

Step 1 of 7

*BRKCOL-2616 - QoS Strategies and Smart Media Techniques for Collaboration Deployments

Active/Inactive Firmware & Lock and Wipe

Step 1 of 7

Self-Provisioning Option using CUCM 10+

http://www.cisco.com/c/en/us/td/docs/voice_ip_comm/cucm/admin/10_0_1/ccmcfg/CUCM_BK_C95ABA82_00_admin-guide-

100/CUCM_BK_C95ABA82_00_admin-guide-100_chapter_01101001.html

Other Cisco Phones with CUCM 10 supports Self-Provisioning. See this link for details:

Step 1 of 7

Video Type Resolution FpsVideo Bit Range Rate

(Bandwidth)

240p 424x240 15 64-149 kbps

240p 432 x 240 30 150-299 kbps

360p 640 x 360 30 300-599 kbps

480p 848 x 480 30 600-799 kbps

576p 1024 x 576 30 800-1299 kbps

720p 1280 x 720 30 900-1999 kbps*

1080p 1920 x 1080 30 2000-4000 kbps

Video Resolutions & Bandwidth

Step 2 of 7

https://www.cisco.com/c/dam/en/us/td/docs/voice_ip_comm/dx/series/deploy/dxwlandg.pdf

*10.2.4 firmware

Video Settings Details (Continued)

• “Video Bandwidth” is for transmit & receive: 250kbps means 250kbps max per direction

• Auto is the default and this value is derived from the Region parameter on CUCM

Derived from CUCM

Override CUCM

Step 2 of 7

Operating Modes

PUBLIC MODE

“Public Mode” has the most restrictions with the following policies:

• Disables all WebEx, Jabber, Internet browser & built-in Android Applications

• Locks home screen in place. Unable to change wallpaper or add widgets

• Disables USB storage & SD card

Removes access to the following:

• Recent Applications list

• Lock Screen

• PIN/Password

• Network & VPN Configuration

Step 3 of 7

CUCM Device Page

Operating Modes

SIMPLE MODE

“Simple Mode” is identical to Public Mode, however opens access to the following features/configurations:

• Recent Applications list

• Lock Screen

• PIN/Password

• Network & VPN Configuration

CUCM Device Page

Step 3 of 7

“Simple Mode” - Details

• User can not modify Wallpaper (supports admin assigned Wallpaper)

• User can not move, add shortcuts, widgets, launch applications, or long click

• No Android applications are allowed run; Google Search removed

• External USB storage is disabled

• User can create and store local contacts

• Bluetooth contacts and history sharing is also allowed

• No other contact account types are allowed (no Exchange, Google, etc.)

Step 3 of 7

Operating Modes

ENHANCED MODE

“Enhanced Mode” enables users to access all collaboration features, including:

• Jabber

• WebEx

• Exchange

• Application Deployment (including Google Play and Custom apps)

Step 3 of 7

Demo

Operating Modes

Feature Public Simple Enhanced

Call Application Yes Yes Yes

UDS (Cisco User Data Service) Yes Yes Yes

Bluetooth Yes Yes Yes

Network Configuration No Yes Yes

Visual Voicemail No Yes Yes

Lock Screen No Yes Yes

Set Date and Time No Yes Yes

Recent Applications List No Yes Yes

External Storage No No Yes

Jabber IM, Email, WebEx, Internet browser, and 3rd Party Apps No No Yes

Extension Mobility Yes Yes Yes

Reference SlideStep 3 of 7

Contacts

Step 4 of 7

UDS

“User Data Services”Local Contacts

3rd Party

Applications

Contacts with 10.2(x)

Contacts &

Photo Sources

Public

Mode

Simple

Mode

Enhanced

Mode

UDS (LDAP via CUCM) * * *

Local Contacts

Bluetooth Mobile Import

Jabber (LDAP)

Exchange (Active Directory)

Google

3rd Party Apps

*

*

*

*

*

*

*

*

*

*

CUCM Parameter used by UDS

Step 4 of 7

Bluetooth pairing

Transfer audio from mobile device to speakerphone (or handset) on DX Series

Answer and control calls to mobile from DX user interface

Call from mobile contacts, favorites and call history with DX over IP network

Temporary sync mobile contacts when in proximity or permanently store mobile contacts on DX Series

ContactsIntelligent Proximity for Desktop

Step 4 of 7

Enhanced Mode - WebEx

DX Series and WebEx (arranged by historical introduction):

• Option 1 – PC joins WebEx invite and is prompted to dial the DX

• Option 2 – The DX joins via native WebEx app (or DX Calendar)

• Option 3 – The DX joins via CMR

Step 5 of 7

Enhanced Mode - Jabber

• Jabber on the DX Series is chat-only

• Jabber on DX can use either CUCM IM&P or WebEx Messenger cloud IM&P service

• Jabber on DX photos will sync with photos in Contacts and Favorites

• For IM & P, it uses the jabber-config.xml file for photos and search

DX firmware 10.2.4 is pre-loaded with Jabber 10.6.2

Note: Even in Simple Mode, Jabber on a PC or MAC

can use DX for CTI click-to-call for hands-free dialing

Step 5 of 7

Enhanced Mode – Application Deployment

1. Google Play

2. CUCM App Push

3. Unknown Sources(Side Loading)

Step 5 of 7

APK

Enhanced Mode – CUCM App Push

1. You must have the APK (i.e., Android Executable)

2. You must put the APK on a Web Server (and not CUCM)

3. You must configure a CUCM IP Phone Service and subscribe the DX to the IP Phone Service

Web Server

APK

File

Step 5 of 7

• Example of an Android Application pushed from CUCM

• Requires local APK be on premise

• Create a CUCM IP Phone Service and subscribe DX to the service

• Note: The “Service Name” requires the manifest name of the Android Application. To learn how to find the manifest name see below link:

CUCM App Push Details

http://www.cisco.com/c/en/us/td/docs/voice_ip_comm/cdce/dx600/admin/10_1_1/english/DX60_BK_CFB047D4_00_cisco-dx600-administration-guide-

10_1_1/DX60_BK_CFB047D4_00_cisco-dx600-administration-guide-10_1_1_chapter_01000.html#DX60_TK_P06A3F59_00

Step 5 of 7

Enhanced Mode – CUCM App Push (Continued)

Application Development

DevNet forums (casual) or DevNet Developer Support (SLA):https://developer.cisco.com/site/devnet/support/

DX Series DevNet Section:https://developer.cisco.com/site/dxseries/overview/index.gsp

Step 5 of 7

Demo

Expressway MRA

Step 6 of 7

Services available to DX series over Expressway

• See session BRKUCC-2801 – Cisco

Expressway at the Collaboration Edge

• This session is recorded if you missed it

on ciscolive365.com

Step 6 of 7

VPN-less Remote Access

• 1080p30 HD video with BFCP content share/receive

• Single line support with early media

• Encrypted signaling and media (UCM mixed mode not required)

• Access to corporate directory (UDS)

• Includes Jabber 10.6 client (IM&P) with escalation from chat to call

• Unity Connection Visual Voicemail, Voicemail

• Call forward, transfer, ad-hoc conferencing, do not disturb, MWI, iDivert, mobile connect

• Device management including configuration, firmware updates, reset/restart/applyConfig

Step 6 of 7

New Expressway Endpoint SupportMinimum Software Requirements

Component Min Software

Version

Projected Availability

Cisco Expressway or Cisco VCS X8.5.2 Available

Unified CM 10.5(2) SU2 Target Q2 CY 2015

DX650, DX70, DX80 Collaboration Endpoints 10.2.4* Target Q2 CY 2015

Step 6 of 7

Enabling DX Expressway MRA mode (1 of 2)

• No DHCP option 150 served on local network

• DNS is required

• Reset network settings from Settings App

Step 6 of 7

Enabling DX Expressway MRA mode (2 of 2)

Service domain entry will be used to lookup collab-edge DNS SRV record

Step 6 of 7

Persistent User Credentials

• New product specific option introduced on UCM device configuration page

• Enabled via device pack COP file

• Defaults to Disabled, requiring the user to re-enter password on a re-occurring basis

• When Enabled, the endpoint will cache the end user credentials (encrypted on device) and the user will not be prompted to authenticate again

DX series

Step 6 of 7

Problem Report Tool Options

• Problem Report Tool (PRT) can post to a URL even through Expressway

• This is a CUCM parameter enabled via device pack

“Customer Support upload URL”

Sample HTTP Post Script: http://www.cisco.com/c/en/us/td/docs/voice_ip_comm/dx/series/rel-

notes/1023/DX00_BK_RB889E3E_00_release-notes-dx-series-1023.html#DX00_RF_PF35EC13_00

Enhanced Mode Only

Use for Simple Mode,

Enhanced, or over

Expressway

Step 6 of 7

Security ConsiderationsSecurity

Step 7 of 7

Federal Information Processing Standard (FIPS) 140-2 Validated Cryptographic Module

Disable Google Play

Disable Wifi

Disable Bluetooth

Disable App Side-loading

Disable USB

Encrypted Video (SRTP) and Signaling (TLS)

Cisco AnyConnect 4.0 VPN

Cryptographically assured device identity

Manufacturing Inserted Certificates (MIC)

Locally issued digital Certificates (LSC)

Sign firmware images & Secure Boot

Self-Service or Remote Wipe

Factory Reset – Hardware or Software

ActiveSync

SE Android

Reference Slide

http://www.cisco.com/c/en/us/products/collateral/collaboration-endpoints/desktop-collaboration-experience-dx600-series/white-paper-c11-731685.html

PIN Lock – Best Practice

• If PIN is required, on CUCM the “Enforce Screen Lock During Display-On Time” should be unchecked

• On CUCM DX Device Page or Common Phone Profile uncheck this box ….

• This results in a pop-up:

Security - (DX PIN Lock)

Step 7 of 7

Other Considerations - VPN

• Anyconnect VPN is built into the DXNo need to download from Google Play

• Option 1 – Manually create VPN (Android VPN client - CUCM is unaware)

• Option 2 – Provision VPN Profile in CUCM (same as 8800/8900/9900)

• http://www.cisco.com/c/en/us/support/docs/unified-communications/unified-communications-manager-callmanager/115785-anyconnect-vpn-00.html

Security (VPN)

Cisco ASAVPN

Step 7 of 7

* DX 10.2.4 firmware upgrades the Anyconnect VPN client to 4.0.01303

Extension Mobility

• First time login the user receives the Setup Wizard

• Second time the user profile is cached

• DX will check if the required amount of free space ~500MB is available for the new user to login

• If not, the DX will silently delete the least recently used user to create free space

Extension Mobility/Multi-User Overview

Step 7 of 7

Tips

DX Series in Project Workplace

http://www.cisco.com/c/dam/assets/sol/tp/workplace_app/index.html#/

This facilitates the ability to lock the wallpaper to a predetermined image such as a company logo

No “List.xml” configuration required on CUCM

Upload file to Desktops/1600x1280x24

1. Enable on Common Phone Profile

2. Then background on profile

Wallpaper - How to Administratively Lock

DX80 – How to Take a Screenshot

Step 1

Hold down the Volume down

button and power button

simultaneously

Step 2

Go to the Gallery app and

find the screenshot

Within Gallery app you can

email the image or send to

the cloud via Google Drive

Step 3

DX70 – How to Take a Screenshot

Step 1

Hold down the Volume down

button and power button

simultaneously

Step 2

Go to the Gallery app and

find the screenshot

Within Gallery app you can

email the image or send to

the cloud via Google Drive

Step 3

DX650 – How to Take a Screenshot

Step 1

Hold down the Volume down

button and power button

simultaneously

Step 2

Go to the Gallery app and

find the screenshot

Within Gallery app you can

email the image or send to

the cloud via Google Drive

Step 3

Roadmap –New 11.0 Software

Features

UI/UX Improvements

• Aligning the TP portfolio

leveraging common UI for DX,

SX, MX and IX

• WebEx/CMR Calendar

• HDMI audio

Jabber 10.6

Escalation from IM to

WebEx, voice or video

Availability:1H CY15

Remote Access

Support for remote

deployment of DX devices

through Collaboration Edge

Collaboration Endpoint Software for Desk

Version:10.2.4

Availability:2H CY15

Version:11.x

Integrated Collaboration

Webex - Content Sharing over

HDMI

Seamless Workflows

Collaboration Mode – Simple Mode

+ WebEx/Jabber/Email/Calendar

Extension Mobility Fast Login

Demo

Collaboration ModeThe Simple Mode for Full Collaboration Features

Collab Mode = Simple Mode + Jabber + WebEx + Calendar

Note: Stub Browser will launch for SSO requests … nothing else.

Unified Experience across the Portfolio - DX, SX, MX and IXThe DX View

Caller ID &

Presence Status

Home Button &

Drop down for notifications

Instant self-view

& Quick Settings

• Quick access to

• System settings including call statistics for voice, video etc.

• VPN, Bluetooth and WiFi

• Exposure adjustment in or out of call

Unified Experience Quick Settings

Unified User ExperienceSimplified Contacts and Search

Contacts and Directory Search

Contact Sources in 11.0 Public Mode Simple Mode Collaboration Mode Enhanced Mode

Created on device Yes Yes Yes Yes

Imported from Bluetooth Yes Yes Yes Yes

Cisco User Data Services (UDS) Yes Yes Yes Yes

Alternate UDS URL (Centralize & Scalable Lookups) Yes Yes Yes Yes

Jabber No No Yes Yes

Exchange Contacts (no Global Address List search) No No Yes Yes

Google No No No Yes

Third-party apps No No No Yes

Webex Content SharingOver HDMI

Unified User ExperienceSimplified CMR Meeting Join

One click to join video

meeting from calendar invite

CMR join button feature only

supported from calendar

CMR Personal Room favorite

automatically added when you sign

into WebEx

Extension MobilityFast Login

Login process does not

require restart -

10-20 seconds to log in

* *

* Fast login planned for future releases

Intelligent Views – Best View with Auto Framing

Intelligent Views

Best Overview

Intelligent Views

Best Overview

Automatic pan, tilt, zoom to correctly frame peopleDavid has moved his chair in his office. He has not adjusted to center his

camera.

The system detects he is out of position and auto-corrects (digital PTZ)

for the far end participant

Complete Your Online Session Evaluation

Don’t forget: Cisco Live sessions will be available for viewing on-demand after the event at CiscoLive.com/Online

• Give us your feedback to be entered into a Daily Survey Drawing. A daily winner will receive a $750 Amazon gift card.

• Complete your session surveys though the Cisco Live mobile app or your computer on Cisco Live Connect.

Continue Your Education

• Demos in the Cisco campus

• Walk-in Self-Paced Labs

• Table Topics

• Meet the Engineer 1:1 meetings

• Related sessions

Thank you