Create a new user rule using the CMS cli and set the "password_age" to 999999You may have to create a new account for that rule to take affect or at least expire out the existing so that it requests a password change.
Yes, that is correct. The webbridge service needs to run on the CallBridge server(s). TURN and the CMS Webproxy needs to be configured on the Expressways. DNS would also have to be updated (external DNS for CMS join web portal points to Expressway...
iOS devices can only use the CMA client app (download from the Apple app store on the device). Web support is coming in a future release as the CMA thick client will be phased out over time. Android devices can use Chrome to access the meeting URL.