Quadrox WebCCTV, Installation Manual

Page: 71 / 90

WebCCTV Installation Manual
71
Version 4.3 Series
6.2.5
6.2.6
on this software. Those people would have to know a lot about the internal workings of the
server, which is difficult. This being said, Quadrox engineers are working hard to keep the
number of possible security risks to an absolute minimum.
Only one application remains, namely the web server (IIS). Quadrox uses tools issued by
Microsoft like urlscan and lock-down to block any action that is not related to WebCCTV
functionality. To ensure security of IIS, please make sure that all necessary security updates
are applied (see above).
6.2.4.7 VPN
Setting up a virtual private network (VPN) can potentially increase security, similar to having
a dedicated network or limiting the clients on IP address. It uses encryption of data that goes
over the network to achieve this goal.
Setting up a VPN for your video surveillance equipment is outside the scope of Quadrox
support. Be aware that the encryption process can cause delays that might affect the
performance of the video system.
Other types of access
Apart from the network, there are several other ways in which a malicious piece of software
can end up on WebCCTV. These ways include all information carriers that can be connected
to WebCCTV, like CDs, floppies and USB memory drives.
When connecting these information carriers to WebCCTV, pay special attention to security.
Make sure that they are scanned for viruses and malware before connecting them.
You should also pay extra attention when you introduce foreign objects in a shielded
environment, e.g. a technician's laptop in a dedicated video network.
3
rd
party security tools
When the machine is locked down like described above, it should be resistant against the
majority of threats. The limited increase in security that would be achieved by pre-emptively
introducing additional security tools probably does not justify the additional cost of licenses
and efforts for installation and maintenance. Furthermore, this software might interfere with
the functionality of WebCCTV.
Such tools include virus scanners, malware/spyware/adware removal tools, additional pop-up
blockers, firewalls with extended functionalities, script blockers, etc. None of these software
products are installed on WebCCTV by default for the reasons mentioned.
If the situation forces an installation of such tools, the installer will be responsible for the
proper working of the system. Quadrox cannot give support on such non-standard installations,
unless otherwise agreed.