Plantronics + Polycom. Now together as Poly Logo

Intune Conditional Access and Polycom VVX phones

Highlighted
Advisor

Intune Conditional Access and Polycom VVX phones

We currently restrict access to our O365 deployment to compliant or Azure joined devices.  We have excluded one of our on premise networks which allows our VVX phones to operate as long as it is on this network but we do have situations where users would like to have a vvx set outside of our network.  What is the recommended way to setup a Intune condtion to allow the VVX phones from outside of our network?

Message 1 of 8
7 REPLIES 7
Highlighted
Occasional Contributor

Re: Intune Conditional Access and Polycom VVX phones

I would be interested in this answer as well.  I turned on conditional access yesterday and all of our VVX 601 phones went offline.

I have configured an Azure Active Directory conditional access policy and it has an exclude list (Policy -> Users -> Exclude) where I have added the users that have remote phones and do not have a static IP address (I would use a trusted location for a static IP).  It would be better if I did not need to exclude the users from the policy.

Message 2 of 8
Highlighted
Polycom Employee & Community Manager

Re: Intune Conditional Access and Polycom VVX phones

Hello all,

welcome to the Polycom Community.

It is always useful to include the currently used UC Software version as issues experienced or a question asked may already be addressed in a newer release.

This also allows yourself and others to check against current software release notes, Administrator Guides or FAQ post’s.

The above is also stated in the "Must Read First" and is the absolute minimum requirement every new post should include. .

In addition providing us with this basic information gives Polycom an idea what Software Versions are used in the field and avoids wasting time trying to troubleshoot issues which have already been addressed.

Therefore the Polycom VoIP FAQ contains this post here:

Question: How can I find out my SIP or UC Software Version of my Phone?
Resolution: Please check here

Please ensure to provide some feedback if this reply has helped you so other users can profit from your experience.

Best Regards

Steffen Baier

Polycom Global Services

----------------
The title Polycom Employee & Community Manager is a community setting and does not reflect my role. I am just a simple volunteer in the community like everybody else. My official "day" Job is 3rd Level support at Poly but I am unable to provide official support via the community.

----------------

Notice: This community forum is not an official Poly support resource, thus responses from Poly employees, partners, and customers alike are best-effort in attempts to share learned knowledge. If you need immediate and/or official assistance please open a service ticket through your proper support channels.
Please also ensure you always check the VoIP , Video Endpoint , Skype for Business , PSTN or RPM FAQ's
Message 3 of 8
Highlighted
Occasional Visitor

Re: Intune Conditional Access and Polycom VVX phones

having the same issue.

we have azuread conditional access for o365 for domain joined / intune managed devices. exceptions can be made for known-ip's. but in our branches ip addresses are dynamic.

 

Message 4 of 8
Highlighted
Advisor

Re: Intune Conditional Access and Polycom VVX phones

Same issue here.  Polycom any update here?  We have Intune Conditional Access Policys that restrict all devices except Windows, iOS, and Adriod but this prevents our remote users from logging into their devices.  

Message 5 of 8
Highlighted
Polycom Employee & Community Manager

Re: Intune Conditional Access and Polycom VVX phones

Hello @SRANE ,

 

Welcome to the Poly Community.

Your post does not contain the minimum outlined information we require so therefore, to avoid disappointment, please open a ticket.

 

In order to raise a support ticket, you need to work with your Poly reseller as they may need to do this for you.

End Customers are usually unable to open a ticket directly with Poly support. Available End User Poly services offerings are detailed here

If this is some sort of an Internet discounter providing your MAC address or your Poly devices serial will enable us to look up who would be able to support you. This may not be who you purchased the Poly device from.

If the unit is no longer within the warranty please be prepared to Pay Per Incident / PPI. This is all outlined in detail here


Please ensure to provide some feedback if this reply has helped you so other users can profit from your experience.

Best Regards

Steffen Baier

----------------
The title Polycom Employee & Community Manager is a community setting and does not reflect my role. I am just a simple volunteer in the community like everybody else. My official "day" Job is 3rd Level support at Poly but I am unable to provide official support via the community.

----------------

Notice: This community forum is not an official Poly support resource, thus responses from Poly employees, partners, and customers alike are best-effort in attempts to share learned knowledge. If you need immediate and/or official assistance please open a service ticket through your proper support channels.
Please also ensure you always check the VoIP , Video Endpoint , Skype for Business , PSTN or RPM FAQ's
Message 6 of 8
Highlighted
Advisor

Re: Intune Conditional Access and Polycom VVX phones

My apologies, the current UC on my VVX is 5.9.0.9373 and my Trio 8500 is on 5.9.1.11135.  Do these devices have the ability to be excluded in a Modern Environment so remote users can use these devices outside of a trusted location (like remote employees)?

Message 7 of 8
Advisor

Re: Intune Conditional Access and Polycom VVX phones

Stating FACTS for the others who come here looking for an answer to this very simple inquiry and found the post "Your post does not contain the minimum outlined information we require so therefore, to avoid disappointment, please open a ticket" to be totally useless here's the details.

 

If you leverage a modern workplace with Intune and Conditional Access, you cannot use calendaring information for remote workers on the VVX if you block access based on trusted location.  Basically the VVX is nothing more than a phone and loses One Touch Join and the ability to see meeting info and you will see ***WARNING*** Exchange Authentication failed.

 

This is because Polycom doesn't have a way to exclude these devices in a modern workplace and cannot use legacy auth for Exchange.

 

Hope this helps anyone coming here looking for answers.  

Message 8 of 8