1.

Deployment Guide

GlobalMeet® Collaboration December 2020

Table of Contents

Introduction 3 Contents of this guide 3 Intended audience 3 Version information 3 What’s new in this guide 4

About GlobalMeet Collaboration 5 Meeting features 5 Restricting meeting features 6 Desktop apps 6 Mobile apps 7 GlobalMeet for Outlook 8 File library 8 Storage 8 Supported file formats 8 Video file formats and codecs 9 Integrations 9 Google and Outlook calendars 9 GlobalMeet for Microsoft Teams 10 Language support 10 GlobalMeet meeting room, desktop and mobile apps 10 GlobalMeet for Outlook 10 Administrative portals 10 Branding and customization 11 Logo specs 11 Upload custom logos 12

System requirements 13 Web 13 GlobalMeet desktop apps 13 GlobalMeet mobile apps 14 GlobalMeet for Outlook 15

Network considerations 16 Network traffic 16 Note about network quality 16 Ports and protocols 17 Browser and proxy considerations 17

December 2020 GlobalMeet® Collaboration Deployment Guide | 1 Table of Contents

Firewall transversal 17 Required domains 18 GlobalMeet Outlook add-in 18 Bandwidth considerations 19 Bandwidth estimating notes 20

GlobalMeet VRC implementation considerations 21 IP whitelisting (all systems) 21 Supported endpoints 21 H.323 and SIP firewall ports 22 Bandwidth considerations 22

Single sign-on (SAML) 23 Overview of the setup process 23 Required information 24 GlobalMeet login details 24 Data required by GlobalMeet 24

Application installers 25 GlobalMeet desktop apps 25 GlobalMeet mobile apps 25 GlobalMeet browser plugin 25 GlobalMeet for Outlook 26 GlobalMeet add-in 26 GlobalMeet toolbar 26

Managed deployments 27 Automatic updates 27 GlobalMeet desktop app (Windows) 28 GlobalMeet audio and video plugin for Internet Explorer 29 GlobalMeet Outlook add-in 29 Enable for all users in Exchange Admin Center 29 Enable for all users in PowerShell 30 GlobalMeet Outlook toolbar 31 Uninstall the GlobalMeet toolbar 31

GlobalMeet support 32

December 2020 GlobalMeet® Collaboration Deployment Guide | 2

Introduction

Thank you for choosing GlobalMeet Collaboration as your all-in-one web, video, and audio conferencing solution.

Contents of this guide

This guide is intended for use by IT staff during the planning and execution of GlobalMeet product deployment. This document covers the options for deploying the software and Internet-based services related to GlobalMeet personal web conferencing.

It contains the following sections.

 About GlobalMeet Collaboration – a brief introduction to web and video conferencing features, the GlobalMeet desktop tools for Windows and Mac, and mobile applications

 System requirements – hardware and software requirements for hosting and participating in GlobalMeet meetings using a browser, desktop apps, mobile apps, and video room systems

 Network considerations – domain whitelisting, required ports, proxy server considerations, and bandwidth estimation metrics

 Application installers – links to the GlobalMeet desktop app installation files and the GlobalMeet mobile apps in their respective app stores

 Managed deployments – pushing the GlobalMeet desktop app (Windows), GlobalMeet Outlook add- in, and IE browser plugin to your users’ machines

Intended audience This document is intended for IT and network personnel. It is not an end user document.

Version information

Information in this document is accurate for the latest versions of:

 GlobalMeet Collaboration (meeting room experience)

 GlobalMeet desktop apps (Mac and Windows)

 GlobalMeet mobile apps (Android and iOS)

 GlobalMeet for Outlook

December 2020 GlobalMeet® Collaboration Deployment Guide | 3 Introduction

What’s new in this guide This version updates the previous version of the GlobalMeet Deployment Guide released in February 2020. It includes the following product changes and additional implementation details.

 In About GlobalMeet Collaboration, updated meeting features:

> Webcams. Desktop and mobile users can share their own cameras and view up to 16 webcams.

> Waiting room allows hosts to decide which guests to admit. Can be set to On and also required for all meeting rooms.

> Security menu above the meeting stage lets host lock the room, enable and manage the waiting room, and control who can share in the meeting.

> An interactive whiteboard is now available.

> Google calendar integration is now available.

 In System requirements:

> Removed support for Windows 7 for desktop apps and GlobalMeet for Outlook.

> Mac. Minimum supported version is macOS 10.11.

> Updated the system recommendation for a better experience with video calls and online sharing.

> The Android app supports smartphones running Android 6.0 (Marshmallow) and newer. Previously it supported Android 5.0 and newer.

 Added *.s3.amazonaws.com to required domains (for whitelisting); required for companies that upload a branded logo for the meeting room.

December 2020 GlobalMeet® Collaboration Deployment Guide | 4

About GlobalMeet Collaboration

GlobalMeet® Collaboration seamlessly connects people all over the world. Whether you are at the office, on your own couch, or enjoying a latte at a coffee shop, the possibilities are endless. Free online meeting tools, like screen sharing, VoIP audio, and HD video, are just a click away.

Meeting features Access to certain GlobalMeet Collaboration features can be disabled. See Restricting meeting features on the next page.

 Host and attend meetings in Chrome, Firefox, Microsoft Edge, and Internet Explorer 11 browsers, and GlobalMeet desktop and mobile apps.

A host can set up to five guests to co-host role, allowing them to do everything a host can do during the meeting. A host can also promote guests to presenter role, letting them control shared content and manage other guests’ audio.

 Connect audio. Connect to meeting audio by VoIP audio, dial-out, or dial-in, and change your audio connection during the meeting. Connection options can be set at the enterprise level.

 Webcam. Share your webcam; view up to 16 webcams on stage. Share a file and stream your webcam simultaneously. You cannot share your webcam and screen share at the same time.

 Active talker. The meeting shows the name of the person speaking and highlights the video stream (webcam), if applicable.

 Meeting security. Lock or unlock your room, enable and manage the waiting room, and control who can share in the meeting.

 Public chat. Exchange messages without interrupting the meeting.

 Screen share. Share an application window or your whole monitor; guests can follow along in a browser, desktop apps, and mobile meetings app in normal or full-screen mode. By default, anyone can screen share. Open sharing can be disabled by the host.

 File presentation with cloud file library. GlobalMeet account holders can upload slide decks, PDFs, documents, and videos to their cloud-based file library and share them in a meeting. The file library goes with the account holder, not the meeting room. By default, any account holder can share a file in any meeting. Open sharing can be disabled by the host.

 Whiteboard. Illustrate your ideas and collaborate with your guests in real time.

 Recordings. Capture a high-quality video of your meeting, up to 8 hours, including webcams, screens and files shared, and whiteboards. The meeting can send a replay email to the host and meeting guests. Meeting recordings are available in the desktop and iOS mobile apps.

December 2020 GlobalMeet® Collaboration Deployment Guide | 5 About GlobalMeet Collaboration

 Outlook and Google Calendar integration. When hosting a meeting on your calendar, you can view invitees and their responses, and email recording replays to the entire invitee list, people who attended, or absent guests.

 GlobalMeet Video Room Connector (VRC). A paid add-on feature that lets guests participate in a GlobalMeet meeting from their video conferencing room systems. Video room participants can join a meeting using SIP or H.323 protocol (depending on their video room system).

 Help & Support. The Help menu provides options for interacting with Support agents (live chat, email, or by phone), links to the support site and app downloads.

Restricting meeting features It’s possible to restrict access to GlobalMeet Collaboration features. This disables the features for all meeting rooms created under the same “site” – for example, .globalmeet.com/room1, .globalmeet.com/room2, .globalmeet.com/room3, etc.

The following features can be restricted:

 Screen sharing  Remote desktop control from screen share  File presentation and file library access  Whiteboard  Webcam sharing  Waiting room can be enabled for all meetings  Recording

In addition, the default sharing mode can be set for all rooms to either open sharing or restricted sharing (only the host and promoted guests can share). This default can be locked, so that individual meeting hosts cannot change it in their rooms.

Desktop apps  Available for Mac and Windows computers. GlobalMeet account not required.

 Launch a meeting. GlobalMeet account holders can host their own meetings and join other GlobalMeet meetings by URL or company search. Guests without accounts can join GlobalMeet meetings by URL. The app automatically saves recently attended meetings; click to join again.

 Outlook and Google Calendar integration. View a summary of your day, upcoming meetings, and the next meeting on your schedule. Join meetings from your agenda.

 Share meeting information. Hosts can copy the meeting URL, access numbers, and passcode to the clipboard for sharing.

December 2020 GlobalMeet® Collaboration Deployment Guide | 6 About GlobalMeet Collaboration

 Grant desktop control. Hosts can grant control of a monitor being screen shared to guests during the meeting. Guests can receive control on either the browser or desktop app.

 Recordings. Hosts can copy a recording’s URL, open a meeting recording for viewing or downloading, rename, and delete a meeting recording.

 Settings. Hosts can access Meeting Settings (manage web and audio meeting features, change password, update profile information and avatar).

 Help & Support. Help menu provides options for interacting with Support agents (live chat, email, or by phone), links to the support site and app downloads.

Mobile apps Available for Android smartphones and Apple iOS devices (iPhone, iPod Touch, and iPad). GlobalMeet account not required.

 Launch a meeting. GlobalMeet account holders can host their own meetings and join other GlobalMeet meetings by URL or company search. Guests without accounts can join GlobalMeet meetings by URL. The apps automatically save recently attended meetings; click to join again.

 Outlook calendar integration. View a summary of your day, upcoming meetings, and the next meeting on your schedule. Join meetings from your agenda.

 Connect audio. Connect to meeting audio by VoIP audio, dial-out, or dial-in and change audio connection during the meeting. Connection options can be set at the enterprise level.

 Active talker shows the name of the person speaking.

 Webcam. Share your front-facing camera and view up to 16 webcams on stage.

 View screen share, file presentation, and whiteboard on your mobile device. View full-screen, rotate device for a larger display, and pinch to zoom in and out. Sharing from the mobile apps is not supported.

 Public chat within the meeting room is supported on Android and iOS.

 Recordings. Supported on iOS app. Hosts can copy a recording’s URL, open a meeting recording for viewing or downloading, or delete a meeting recording. Android users can access their recordings in the desktop app.

 Scheduling. Schedule meetings, send invitations, and save to one of the calendars on your device.

 Help & Support. Send email to support from the apps.

December 2020 GlobalMeet® Collaboration Deployment Guide | 7 About GlobalMeet Collaboration

GlobalMeet for Outlook GlobalMeet for Outlook lets hosts start a web or phone-only meeting, schedule meetings and track meeting invitations on their Microsoft Outlook calendar and customize meeting invitations. There are two versions of GlobalMeet for Outlook:

 An Outlook add-in for Outlook 2016 for Mac, Outlook 2013, 2016, and 2019 for Windows, and Outlook on the web (the GlobalMeet Outlook add-in)

 A COM add-in for Outlook 2013 and newer (the GlobalMeet toolbar).

Review the system requirements to determine which version is right for your users.

File library GlobalMeet account holders can upload slide decks, PDFs, documents, and videos to a personal, cloud- based file library and share them in a meeting. Uploaded files are saved with the user, not the meeting room. In any meeting, an account holder can access their file library and upload, delete, and present a file in the meeting.

Meeting recordings are not available in the file library; they are available in the desktop app.

Storage Video files can be up to 1 GB; all other files can be up to 200 MB. Currently, files in the file library do not expire.

Supported file formats To present a file in the meeting room, it must be one of the following file types. Video formats and codecs are covered on the next page.

Type of Document File Type File Name Extensions

Microsoft Office Documents Microsoft Word .doc, .docx

Microsoft PowerPoint .ppt, .pptx

Microsoft Excel (spreadsheets) .xls, .xlsx

Drawing Adobe Acrobat PDF .pdf

Slide transitions, animations, and embedded audio/video in PowerPoint presentations are not supported. Certain fonts may not be available for all file types during file presentation.

December 2020 GlobalMeet® Collaboration Deployment Guide | 8 About GlobalMeet Collaboration

Video file formats and codecs Video resolutions: 1080p, 720p, and 480p resolution.

Resolution is preserved when you upload a video for sharing but may vary when viewing depending on your Internet connection speed.

File format Supported codecs

AVI Uncompressed, Canopus HQ, DivX/, DV/DVCPRO

MP4 AVC (H.264), PCM, MPEG-2, MPEG-4 part 2, VC-1

MOV Uncompressed, Apple ProRes, AVC Intra 50/100, DivX/Xvid, DV/DVCPRO, H.261, H.262, H.263, AVC (H.264), JPEG 2000 (J2K), MJPEG, MPEG-2, MPEG-4 part 2

MPEG/MPG MPEG-1, MPEG-2

MP4 Uncompressed, AVC Intra 50/100, DivX/Xvid, H.261, H.262, H.263, AVC (H.264), HEVC (H.265), JPEG 2000, MJPEG, MPEG-2, MPEG-4 part 2, VC-1

WebM VP8, VP9

WMV VC-1

Integrations

Google and Outlook calendars Users can connect to their Google or Outlook calendars from the meeting room, desktop apps, and mobile apps (Outlook only).

 The desktop and mobile apps scan the calendar for meetings, show the day’s agenda, and highlight the next meeting on the schedule. Users can click to join a meeting from their calendar.

 The meeting room checks the connected calendar and if the host has a meeting scheduled (the URL in location), it includes features and suggestions to make the meeting more efficient.

Required permissions (Outlook) Users must be able to consent to third-party apps (like GlobalMeet) accessing company data on their behalf. The default Azure AD configuration allows user consent, but this can be restricted from Azure Active Directory  User Settings in the Azure Administration portal.

If application consent is restricted, your non-admin users will not be able to sign in and connect their Outlook calendars from GlobalMeet. Instead, they will see an error message similar to the following:

“GlobalMeet needs permission to access resources on your behalf that only an administrator can grant.”

December 2020 GlobalMeet® Collaboration Deployment Guide | 9 About GlobalMeet Collaboration

GlobalMeet for Microsoft Teams English only. Available from the Microsoft Teams Store. The app allows users to start or join a GlobalMeet meeting directly from Microsoft Teams. It can be installed for one user or in one or more team spaces.

Language support

GlobalMeet meeting room, desktop and mobile apps GlobalMeet supports English, French, German, Dutch, and Japanese. Hosts and guests can attend meetings and use the desktop and mobile apps in any of these languages.

If GlobalMeet detects the user’s language is set to a supported language, it automatically switches to that language.

GlobalMeet for Outlook GlobalMeet for Outlook supports the following languages: English, Dutch, French, German, Swedish, Japanese, Simplified Chinese, and Traditional Chinese.

If the user’s language is set to a supported language, it is automatically displayed, using these methods.

Version Platform/Outlook version Display language matches

GlobalMeet add-in 13.x Outlook for Windows Outlook language preference Outlook for Mac

GlobalMeet add-in 13.x Outlook for the web Operating system language

GlobalMeet toolbar 11.7 Outlook for Windows Operating system language

Administrative portals The administrative tools and user portals offer a language preference setting, that lets users choose from:

 Meeting Settings: English, Dutch, French, German, Swedish, and Japanese

 My Meeting Hub: English, French, Dutch, German, and Japanese

 Admin Portal: English and French

December 2020 GlobalMeet® Collaboration Deployment Guide | 10 About GlobalMeet Collaboration

Branding and customization If allowed by their provider (or reseller), company admins can upload a custom logo and icon to be displayed inside the GlobalMeet meeting room. The branded logo replaces the GlobalMeet logo and icon.

Primary Logo Icon Logo Displayed at the top left corner of Replaces the Primary logo when the meeting room and meeting the meeting window is resized login page

Logo specs  GIF, PNG, or SVG format with transparent background

 Primary logo: 120px x 60px

 Icon logo: 60px x 60px

 Max file size: 128kb

December 2020 GlobalMeet® Collaboration Deployment Guide | 11 About GlobalMeet Collaboration

Upload custom logos All GlobalMeet branding and customization is done through the Admin Portal.

Sign in to the Admin Portal using your admin credentials. On the Administration menu, select Site Management ► Manage this Site (or Search for a Site to choose from all your assigned sites). Then, on the Edit a Site page, click Edit Site Branding. Click Browse to select a logo, Click Preview to check how it and then click Upload… looks in the meeting window. Click Save to apply the logo.

December 2020 GlobalMeet® Collaboration Deployment Guide | 12

System requirements

You can host or attend a GlobalMeet meeting in a web browser or in the GlobalMeet desktop and mobile apps.

The GlobalMeet diagnostic test (https://systemtest.globalmeet.com/index.html) helps ensure that a user’s system meets the basic requirements to successfully host or attend a meeting.

Web To host or attend a meeting in a web browser, you must have:

 Windows 10

 macOS 10.11 or newer

 JavaScript® and cookies enabled

 Google Chrome 72 or newer

 Microsoft Edge 79 or newer

Firefox 68 or newer

 Internet Explorer 11 – when prompted, install the GlobalMeet Audio & Video plug-in. This enables VoIP audio, video (webcam), and screen sharing in IE.

If prompted, allow GlobalMeet to access your mic (for VoIP audio) and webcam.

GlobalMeet desktop apps The GlobalMeet desktop apps are available for Mac and Windows computers.

 Windows 10

 macOS 10.11 or newer

 Minimum 1.6 GHz (or higher), 2 core or better

 4 GB RAM

For a better experience with video calls and online sharing, we recommend using a computer that has a 2.0 GHz processor and 4 GB RAM (or more).

December 2020 GlobalMeet® Collaboration Deployment Guide | 13 System requirements

GlobalMeet mobile apps The GlobalMeet mobile apps are available for Apple iOS and Android devices.

 iPhone and iPod Touch devices running iOS 12 and newer. Compatible with iPhone 5s and newer. iPhone 6s and newer recommended.

 iPad devices running iOS 12 and iPadOS 13 and newer. Compatible with iPad (5th and 6th gen), iPad mini (2nd – 5th gen; 4th and 5th recommended), iPad Air (all; 2nd and 3rd gen recommended), and iPad Pro.

 Android smartphones running Android platform versions 6.0 (Marshmallow) and newer. Android tablets are not supported.

 You must have an active data connection, either through your wireless carrier’s network or by Wi-Fi.

December 2020 GlobalMeet® Collaboration Deployment Guide | 14 System requirements

GlobalMeet for Outlook For GlobalMeet account holders.

Two versions are available: an Outlook add-in for Outlook 2016 for Mac, Outlook 2013, 2016, and 2019 for Windows, and Outlook on the web (the GlobalMeet Outlook add-in), and a COM add-in for Outlook 2010 and newer (the GlobalMeet toolbar).

The GlobalMeet toolbar is no longer being updated. We recommend organizations use the GlobalMeet Outlook add-in.

GlobalMeet Outlook add-in GlobalMeet toolbar (COM Add-In)

Mac, Windows, on the web Windows only

Mac (64-bit):  Windows 8.1 or 10

 macOS 10.11 and newer  .NET 4.5.2 or higher

 Outlook 2016 for Mac  Outlook 2013, 32-bit or 64-bit

Windows:  Outlook 2016, 32-bit or 64-bit

 Windows 8.1 or 10

 Outlook 2013 for Windows SP1 (32- or 64-bit), with the March 8 security update

 Outlook 2016 for Windows (32- or 64-bit)

 Outlook 2019 for Windows (32- or 64-bit)

 Internet Explorer 10 or newer

All:

 A Microsoft Exchange mailbox on Outlook.com, Office 365, Exchange 2013 or a newer release (Outlook on the web requires at least Exchange 2016)

 Permission to install Outlook Add-Ins by a URL

 Reading Pane displayed in Outlook

TIP: This Microsoft support article explains how to determine your Exchange version.

December 2020 GlobalMeet® Collaboration Deployment Guide | 15

Network considerations

Deployment of any Internet-based service requires consideration of the impact to the network. GlobalMeet is an HTML5 web application that is designed to minimize the impact to corporate networks.

This section includes:

 Ports and protocols that must be open

 Browser and proxy server requirements

 Domains that must be whitelisted and accessible from your network

 Bandwidth considerations – metrics for estimating usage based on typical meeting activities like screen share, sharing webcam, presenting files, and VoIP audio

Network traffic All traffic between the GlobalMeet clients (browser, desktop, and mobile apps) and GlobalMeet servers requires outbound access by the TLS 1.2 and SNI protocols on TCP port 443. This access is required for globalmeet.com, as well as all child domains (*.globalmeet.com; for example, yoursite.globalmeet.com). Because GlobalMeet was designed to be highly scalable, we cannot easily explicitly identify all server names that are used by GlobalMeet. We are experienced in working with enterprise IT organizations to find reasonable ways to work with network security issues. Please contact our Sales team if you anticipate having difficulties with GlobalMeet connectivity due to unusually restrictive network security policies.

Note about network quality Networks are highly variable. Overall end-to-end latency and jitter will affect your users’ meeting experience. Please ensure that latency and jitter are as low and stable as possible.

December 2020 GlobalMeet® Collaboration Deployment Guide | 16 Network considerations

Ports and protocols Your network must allow:

 TCP, UDP, and WebSocket protocols

 Communication on port 443 (TCP)

 VoIP audio requires ports 5060, 5070, 10000-65535 (UDP)

 webRTC screen share and webcam components require ports 443 (TCP) and 19,999 (UDP). For the most consistent experience connections should be allowed on 443 (TCP) and across the entire UDP port range 10,000-19,999.

> Allow outbound connections to all IP addresses for the port ranges specified.

> If port 19,999 is blocked or otherwise assigned in the customer network, screen share and webcam will use other ports in the UDP range.

If UDP is blocked, communication will fall back to TCP 443, with an initial delay of up to 30 seconds while the connection is made. In addition, transfer speed for TCP is slower than UDP, which raises the possibility of reduced performance in the meeting.

Browser and proxy considerations Browsers and proxies must support TLS 1.2 and SNI. For the best user experience, we recommend that proxies support HTTP/2.

GlobalMeet requires WebSocket support for proper functioning. If WebSocket connections are blocked for your enterprise, GlobalMeet apps and meetings will not function properly when accessed by your company network or Wi-Fi.

Firewall transversal In general, GlobalMeet is very firewall friendly and even works well with clients behind most enterprise web proxies. Please note that web proxies can introduce variable latency for streaming media such as VoIP audio, webcam, and screen sharing. Networks that restrict or proxy port 443 in different ways may cause performance problems. One common issue is that firewalls are set to de-prioritize 443 streams.

Our recommendation is unrestricted access to port 443.

December 2020 GlobalMeet® Collaboration Deployment Guide | 17 Network considerations

Required domains *.globalmeet.com is the main GlobalMeet application domain. It is used for GlobalMeet web and audio conferencing, the Administration Portal, and Meeting Settings. Your network must allow inbound and outbound communications to the domains and all child subdomains identified in this section.

Domains Ports Notes

*.globalmeet.com 443 TCP Main GlobalMeet application domain

*.*.globalmeet.com 3478 UDP For STUN

5060, 5070, 10000-65535 UDP For VoIP audio

10,000-19,999 UDP For webRTC screen share and webcam

*.pgiconnect.com 5060, 5070, 10000-65535 UDP GlobalMeet mobile apps. VoIP audio

*.s3.amazonaws.com Required for branded meeting room logo

*.callstats.io 443 TCP Monitoring webRTC components

ciscobinary.openh264.org 80 TCP Internet Explorer users. Required to enable the GlobalMeet Audio and Video plug-in

GlobalMeet Outlook add-in Applies to the GlobalMeet Outlook add-in (Outlook for Windows 2013 and 2016, Outlook 2016 for Mac, and Outlook on the web).

Domain Ports Notes

cdn01.conferencinghub.com 443 TCP

toolbar.conferencinghub.com 80 TCP Used for logos in meeting invitations

toolbarapi.conferencinghub.com 443 TCP Used for API calls

services.pgiconnect.com 443 TCP Retrieves the meeting URL for Start Meeting option

December 2020 GlobalMeet® Collaboration Deployment Guide | 18 Network considerations

Bandwidth considerations Bandwidth requirements vary significantly depending on a large number of factors including network conditions, local hardware and software, number of participants, meeting activities, and many other factors.

The following table contains bandwidth estimates for various meeting activities. For additional guidelines, see Bandwidth estimating notes, on the next page.

Activity Scenario Bandwidth

VoIP audio Host and guests connect audio by the Use 44-64 kbps/connection, depending on the my computer or VoIP audio (mobile) audio codec used option

Webcam Host and guests can share their webcams, 1-2 webcams: 1 Mbps per stream with up to six active webcam streams on 3 webcams: 500 kbps per stream stage. 4-6 webcams: 250 kbps per stream Bandwidth for webcam streams is adjusted based on the number of webcams on stage, except for Internet 1 Mbps per stream shared or viewed in IE Explorer.

Bandwidth usage is the same whether sharing (upstream) or viewing (downstream). Viewing one’s own webcam stream doesn’t contribute to bandwidth utilization.

Screen sharing Sharing an application window or the 1 Mbps for presenter (sharing upstream) entire monitor. 1 Mbps per person the shared screen (downstream)

Screen sharing with webcams During screen share, the meeting can 1 Mbps for presenter (sharing upstream) display up to six webcams above the 1 Mbps per person viewing screen share shared stage, as tiles or thumbnails. (downstream) Bandwidth for webcam streams is lowered Plus: when in thumbnail view, except for Internet Explorer. 250 kbps per webcam shared or viewed

1 Mbps per stream shared or viewed in IE

Video sharing Sharing a video file that has been 1080p: 5 Mbps uploaded to the file library. Bandwidth 720p: 2.5 Mbps usage varies according to video resolution. 480p: 1.1 Mbps

December 2020 GlobalMeet® Collaboration Deployment Guide | 19 Network considerations

Bandwidth estimating notes

Screen share and webcam streaming In many conditions, allowing for a bandwidth estimate of 1+ Mbps per video or screen share stream per user provides the optimal user experience. However, GlobalMeet Collaboration has congestion control mechanisms in place that automatically adjust to the available network bandwidth to provide the best user experience possible, down to 500 kbps per video or screen share stream.

File sharing Your file sharing bandwidth will vary, depending on the size of the file being presented during the meeting and if webcams are being streamed while file sharing. To ensure performance where large files might be shared, Wi-Fi and LAN connections are recommended during any meeting that uses file sharing.

VoIP audio GlobalMeet has a global audio infrastructure featuring Dolby Voice. Your audio bandwidth requirements will vary, depending on the VoIP audio product associated with your implementation. Standard VoIP audio uses the older G.711 audio codec, which has a higher bandwidth requirement than HD Dolby audio.

December 2020 GlobalMeet® Collaboration Deployment Guide | 20

GlobalMeet VRC implementation considerations

The GlobalMeet VRC (Video Room Connector) feature brings additional considerations. If your organization is implementing GlobalMeet VRC, review the information in this section to ensure your video room system is compatible and your network is configured correctly.

IP whitelisting (all systems) Access through firewalls and proxies is required for both inbound and outbound traffic to the following IP addresses. The IP addresses apply to both H.323 and SIP dialing.

Every GlobalMeet meeting is hosted in one of these three regions. It is recommended that you whitelist traffic to all three IP addresses to ensure your video room system can connect to any meeting.

Region IP address

APAC 13.250.135.9

EMEA 52.29.105.118

North America 35.174.177.7

Supported endpoints GlobalMeet VRC supports all standards-based devices (H.323 and SIP endpoints), including those from Cisco, Polycom, Lifesize, Sony, Huawei, Radvision, Yealink and other vendors. Your system must be running the most recent software version for these standards-based devices.

If you have any questions, please contact our Sales team with your specific room system name and software revision and we will advise you.

December 2020 GlobalMeet® Collaboration Deployment Guide | 21 GlobalMeet VRC implementation considerations

H.323 and SIP firewall ports Your firewall must allow inbound and outbound communications on the ports and port ranges listed in this section. This enables multimedia communication between your video room systems and GlobalMeet meetings.

System TCP UDP

All 80 (http, redirect to https)

443 (WebRTC)

40000-49999 (audio, video, data) 40000-49999 (audio, video, data)

H.323 endpoints 1720 (H.323 H.225 signaling) 1719 (H.323 RAS signaling)

33000-39999 (H.323 H.245 signaling) 40000-49999 (audio, video, data)

SIP endpoints 5060 (SIP signaling) 40000-49999 (audio, video, data)

5061 (SIP secure TLS signaling)

Bandwidth considerations The following table shows the minimum bandwidth required to send different video resolutions. These values do not include the audio component, which can add between 8 kbps and 64 kbps.

Video resolution Minimum bandwidth

HD (720p) 960 kbps

SD (448p) 448 kbps

SD (QCIF) 64 kbps

Notes:  Full HD (1080p) is not currently supported. SD (QCIF) is not recommended.

 Video call speeds lower than 384 kbps and greater than 2 MB are not recommended. Call speeds less than 384 kbps will result in very low-quality resolution, while call speeds over 2 MB will not deliver resolution quality better than 1 MB call speed.

December 2020 GlobalMeet® Collaboration Deployment Guide | 22

Single sign-on (SAML)

Single sign-on requires additional integration work. If you are interested in implementing SSO for your organization, please contact your sales representative.

GlobalMeet supports single sign-on by Security Assertion Markup Language (SAML) 2.0 identity providers (IdPs). Some examples of compatible SAML 2.0 identity providers include Azure, OneLogin, and Okta.

In addition, GlobalMeet supports service provider initiated SAML login – where GlobalMeet (the service provider) generates the SAML request to your configured SAML identity provider and the identity provider responds. If your SAML provider has this option, choose it when setting up SSO for GlobalMeet.

The GlobalMeet integration is solely used to authenticate users; a separate provisioning API is available that allows third parties to provision and de-provision users and manage profiles.

User accounts must be unique. That is, one email address must be tied to only one account and client ID in the GlobalMeet system.

Overview of the setup process Setting up SSO for your organization requires work by the GlobalMeet integration team and by your organization. This is a summary of the process:

1. Using information provided on the next page, set up GlobalMeet in your SAML provider. See: GlobalMeet login details

2. During setup of GlobalMeet in your SAML provider, your SAML provider will generate a certificate and create an Issuer URL, Login URL, and possibly a Logout URL (terminology may differ depending on the SAML provider). Send this information to the GlobalMeet integration team. See: Data required by GlobalMeet

3. Provide login and user information to GlobalMeet integration team:

> Email domain to be configured for SSO. All existing GlobalMeet users with that email domain will be converted to SSO and be required to use the SAML SSO login flow when using the applicable email address.

> The ClientID + GlobalMeet password combination for users will still work and will bypass the SAML SSO login flow.

> Optionally, a list of new users – identified by email address – to be created and enabled for SSO. This requires additional work by our Provisioning team.

December 2020 GlobalMeet® Collaboration Deployment Guide | 23 Single sign-on (SAML)

4. GlobalMeet team sets up your organization for SSO under the assigned email domain and verifies the integration: GlobalMeet service will generate the SAML request to the configured SAML provider and the provider responds back.

Once single sign-on is enabled for your organization, GlobalMeet login pages will detect an SAML SSO- enabled email address and redirect to your SAML login site. There, users sign in using their employee credentials (email address and password). The SAML provider authenticates the users and then redirects back to all SSO-integrated GlobalMeet services.

Required information

GlobalMeet login details Your sales representative will provide the information needed to configure GlobalMeet in your SAML provider. Information required varies by SAML provider; not all SAML providers require this data.

Item Example

Single Sign On URL https://login.globalmeet.com/saml/5a1d91c5-5a25-4ba9-b331-2b228951b1a3/assertion

Audience/Entity ID id5a1d91c55a254ba9b3312b228951b1a3

Data required by GlobalMeet When you set up GlobalMeet for SSO, your SAML provider should create the following items (terminology may differ depending on the SAML provider). Send this information to the GlobalMeet integration team.

In addition, send the certificate generated by your SAML provider.

Name Example

Issuer URL Azure: https://sts.windows.net/ff00353ff-d08c-487a-aeb6-0ce5ace74108/

OneLogin: https://app.onelogin.com/saml/metadata/12345

Okta: http://www.okta.com/exk9tdl82huKBfxxg0h7

Login URL Azure: https://login.microsoftonline.com/700353ff-d08c-487a-aeb6-0ce5ace74108/saml2

OneLogin: https://customerdomain.onelogin.com/trust/saml2/http-post/sso/12345

Okta: https://custdomain.oktapreview.com/app/custdomain12345_oktaprodidp_1/xxx/sso/saml

Logout URL (if available) Azure: https://login.microsoftonline.com/common/wsfederation?wa=wsignout1.0

OneLogin: https://customerdomain.onelogin.com/trust/saml2/http-redirect/slo/12345

December 2020 GlobalMeet® Collaboration Deployment Guide | 24

Application installers

This section contains links to installation files for GlobalMeet desktop tools and related apps. Download links and installation instructions are available from the GlobalMeet support site (https://www.mymeetinghelp.com/Home/Resources/Downloads).

Many GlobalMeet apps and tools support a managed deployment, where IT administrators push deployments to their users’ machines, using an installer’s silent mode.

GlobalMeet desktop apps The GlobalMeet desktop apps are available for GlobalMeet hosts and their guests. No GlobalMeet account is required.

 Mac – https://convergencedesktop.globalmeet.com/installers/stable/GlobalMeet.dmg

 Windows – https://convergencedesktop.globalmeet.com/installers/stable/GlobalMeet-Setup.exe

 Windows silent installer – https://convergencedesktop.globalmeet.com/installers/stable/GlobalMeet- Setup.msi

Managed deployment: The GlobalMeet desktop app for Windows can be remotely installed for users. The GlobalMeet desktop app for Mac does not support a managed deployment. See the next section.

GlobalMeet mobile apps The GlobalMeet mobile apps are available from Google Play Store and the Apple App Store. No GlobalMeet account is required.

 GlobalMeet mobile (Android) – https://play.google.com/store/apps/details?id=com.pgi.gmmeet

 GlobalMeet mobile (iOS) - https://itunes.apple.com/us/app/globalmeet/id1356588018?ls=1&mt=8

GlobalMeet browser plugin Internet Explorer participants are prompted to install the audio and video plugin. https://web.globalmeet.com/plugin/download/gmAudioVideoPlugin.msi

Managed deployment: The Internet Explorer plugin can be remotely installed or enabled for users. See the next section.

December 2020 GlobalMeet® Collaboration Deployment Guide | 25 Application installers

GlobalMeet for Outlook GlobalMeet for Outlook is for GlobalMeet account holders only.

GlobalMeet add-in The GlobalMeet add-in supports PGiI authentication, which uses the same sign-in process as the meeting room and apps. Shared authentication lets users provide credentials once for all their GlobalMeet services. If your implementation does not use PGiI for sign-in, use the standalone authentication version.

The add-in is enabled by a definition file (called a manifest), not an installer. Copy the add-in URL to the clipboard, and then open Outlook and add it.

 GlobalMeet Outlook add-in (shared authentication) – https://cdn01.conferencinghub.com/toolbar12/manifests/globalmeet-manifest-auth.xml

 GlobalMeet Outlook add-in (standalone authentication) – https://cdn01.conferencinghub.com/toolbar12/manifests/globalmeet-manifest.xml

GlobalMeet toolbar  GlobalMeet toolbar installer - https://cdn01.conferencinghub.com/apps/installers/GlobalMeet/ci_toolbar/GlobalMeet_Conferencing _Tools_Setup.exe

Managed deployment: All versions of GlobalMeet for Outlook can be remotely installed or enabled.

December 2020 GlobalMeet® Collaboration Deployment Guide | 26

Managed deployments

In a managed deployment, IT administrators push apps or components to their users’ machines. The following components currently support a managed deployment:

 GlobalMeet desktop app for Windows

 GlobalMeet audio and video plugin for Internet Explorer

 GlobalMeet Outlook add-in

 GlobalMeet Outlook toolbar

NOTE: The GlobalMeet desktop app for Mac does not support managed deployments.

Automatic updates By default, automatic updates are enabled for all GlobalMeet apps and browser plugins. Behavior:

 Desktop app – the app checks for software updates on startup, downloads new versions, and automatically installs them when the app is idle.

 GlobalMeet Outlook add-in – is enabled by a URL; users always access the most recent version.

 GlobalMeet Outlook toolbar – the toolbar automatically checks for software updates every seven days. Users can change the frequency on the Settings page – from always (every time Outlook is started) to every two weeks.

To disable update checks, perform a managed deployment and use the installer argument --cfu false.

 GlobalMeet browser plugin (IE) – when a user joins a meeting using Internet Explorer, the GlobalMeet meeting client checks for new versions, and then prompts the user to download and install the update, if found.

December 2020 GlobalMeet® Collaboration Deployment Guide | 27 Managed deployments

GlobalMeet desktop app (Windows) Windows only.

The GlobalMeet desktop app allows users to start (host) and join GlobalMeet meetings.

The GlobalMeet MSI file lets you push the desktop app to your Windows users. As an administrator, use the /quiet option of the Windows installer (msiexec.exe) and run the MSI.

The MSI creates the folder C:\Program Files (x86)\GlobalMeet Installer and places the installer file globalmeet.exe in that folder.

You must run the MSI as an administrator or with sufficient permissions to create the folder in C:\Program Files (x86).

The next time the user logs in to their computer, globalmeet.exe runs silently and:

 Installs the GlobalMeet desktop app in C:\Users\{USERNAME}\AppData\Local\globalmeet

 Creates desktop and Start menu shortcuts

Ensure that your users log out and log back in to their computers to complete the installation.

To install the desktop app on users’ machines:

1. Download the MSI file from:

https://convergencedesktop.globalmeet.com/installers/stable/GlobalMeet-Setup.msi

2. As an administrator, run the MSI file:

msiexec /i GlobalMeet-Setup.msi /quiet

The msiexec options /p and /update are not supported.

December 2020 GlobalMeet® Collaboration Deployment Guide | 28 Managed deployments

GlobalMeet audio and video plugin for Internet Explorer The GlobalMeet plugin for Internet Explorer is required to support audio and video (webcam) in the meeting room. The first time a user accesses a meeting by the IE browser, GlobalMeet prompts to install the plugin.

You can push the plugin to your Internet Explorer users with the /quiet option of the Windows installer (msiexec.exe).

To install the plugin on users’ machines:

1. Download the MSI file from:

https://web.globalmeet.com/plugin/download/gmAudioVideoPlugin.msi

2. Run the plugin installer silently:

msiexec /i gmAudioVideoPlugin.msi /quiet

GlobalMeet Outlook add-in Supports Mac, Windows, and Outlook on the web users.

You can enable the GlobalMeet Outlook add-in for all Outlook users by the Exchange Admin Center (EAC) or by PowerShell. After installation, you can use the EAC or the Shell to make the app optional or required for your users, and to specify whether you want the app to be enabled or disabled.

To install the GlobalMeet Outlook add-in from a URL, your users must have at least the “My Custom Apps” role in Exchange. Remember there are two versions of the manifest URL.

 Shared authentication (by PGiI) – globalmeet-manifest-auth.xml  Standalone authentication – globalmeet-manifest.xml

Enable for all users in Exchange Admin Center 1. From the EAC dashboard, navigate to Organization > Apps.

2. Click New +.

3. From the drop-down list, select Add from URL.

4. Use the appropriate URL, paste it in the URL field, and then click install.

https://cdn01.conferencinghub.com/toolbar12/manifests/globalmeet-manifest-auth.xml https://cdn01.conferencinghub.com/toolbar12/manifests/globalmeet-manifest.xml

5. Click Save.

December 2020 GlobalMeet® Collaboration Deployment Guide | 29 Managed deployments

Enable for all users in PowerShell Open a remote Windows PowerShell session on your Exchange server and use the New-App cmdlet with the following PowerShell command.

Shared authentication (by PGiI):

New-App -URL:"https://cdn01.conferencinghub.com/toolbar12/manifests/globalmeet-manifest-auth.xml"

Standalone authentication:

New-App -URL:"https://cdn01.conferencinghub.com/toolbar12/manifests/globalmeet-manifest.xml"

You can use the following additional PowerShell cmdlets to manage the add-ins for a specific mailbox:

 Get-App – Lists the add-ins that are enabled for a mailbox.

 Set-App – Enables or disables an add-in on a mailbox.

 Remove-App – Removes a previously installed add-in from an Exchange server.

December 2020 GlobalMeet® Collaboration Deployment Guide | 30 Managed deployments

GlobalMeet Outlook toolbar Windows only. A standalone version of the GlobalMeet toolbar installer is available for GlobalMeet Collaboration meeting hosts who require the GlobalMeet 11.7 toolbar.

To install in silent mode, use the following command line.

GlobalMeet_Conferencing_Tools_Setup.exe --mode unattended

Use the format --argument true|false to specify installation options. If you do not include an argument, the installer uses the default setting.

Argument Default Description

--tor=1 n/a GlobalMeet toolbar. Sets meeting invitations to text-only format.

--cfu true|false true GlobalMeet toolbar. Controls automatic update checks. The default is true, meaning auto-update checks are ON.

Set to false to disable automatic update checks.

Users can change how frequently GlobalMeet checks for updates from the Settings page. Options range from always (every time Outlook is started) to every two weeks.

--help n/a Display all available installer arguments and usage.

Uninstall the GlobalMeet toolbar The uninstaller – uninstall.exe – is in the directory:

%USERPROFILE%\GlobalMeet Conferencing Tools\

To uninstall in silent mode, use the following command line:

uninstall --mode unattended

December 2020 GlobalMeet® Collaboration Deployment Guide | 31

GlobalMeet support

Everyone needs support from time to time, and we are here to help.

Visit the GlobalMeet Support Site

View video tutorials

Send an email directly to GlobalMeet Support: US: [email protected] Canada: [email protected] EMEA: [email protected] Asia Pacific: [email protected] India: [email protected]

December 2020 GlobalMeet® Collaboration Deployment Guide | 32