Security settings recommendations for NHDR and NVR 4000 series Novus recorders
All rights reserved © AAT Holding S.A.
11
INITIAL CONFIGURATION
Recommended encryption algorithms for the connection
The device also allows to use the UPnP (Universal Plug
-
and
-
Play) protocol to connect to some network
services remotely. To use this option:
•
activate the option directly on the device (see instructions below)
•
in case of providing Internet services, run the UPnP option on the edge router
IMPORTANT
: for security reasons, it is not recommended to use the UPnP protocol in remote access
to devices (with particular emphasis on access from untrusted networks such as the Internet). An
alternative option is to set up a VPN tunnel or ultimately provide network services on a "Port
Forwarding" basis with restrictive firewall rules.
Running the UPnP option
To configure UPnP in the
„Network”
menu,
„General”
submenu, select the
„Port Configuration”
tab.
The UPNP options can by enabled for individual ports in the
„UPNP”
column. It is possible to change
default TCP / IP port for each service. After setting all parameters, all changes have to be accepted by
„Apply”
button.
Acceptable
a
lgorithms
Symmetric Key Algorithms
AES
-
128, AES
-
192, AES
-
256
Cipher modes
GCM, CBC with integrity check
(SHA),
Hashing Algorithms
SHA
-
256, SHA
-
512, SHA
-
3
Diffie
-
Hellman
Group 14 (2048) or higher
RSA
Factoring modulus ≥ 2048
Elliptic Curves (f)
f ≥ 256
Key Exchange
IKEv2
Transport layer protocols
TLS1.2
