Security settings recommendations for NHDR and NVR 4000 series Novus recorders
All rights reserved © AAT Holding S.A.
3
PRELIMINARY INFORMATIONS
1. Preliminary informations
The following instructions describe the recommended settings of the Novus NHDR or NVR 4000
series recorder to properly protect access to the device and data processed on it.
Areas:
•
initial configuration
•
permissions settings / accounts managing
•
password policy
•
device network configuration
•
remote access
2. Initial configuration
2.1 Accounts and access
2.1.1. Recommendations regarding access to the system
•
the recorder should be located in a safe place preventing unauthorized access (e.g. server room,
locked room, etc.)
•
the system should be updated regularly by security patches
•
each of the system users should have their own personal account, which can be easily linked to a
specific person
•
system privileges should be granted based on the consent of the system owner or authorized
person
•
once every six months there should be a verification of active accounts in the system
verification should be carried out by the system owner or authorized persons
•
administrator access should be granted only to the person responsible for system configuration
•
the built
-
in administrator account should be properly secured and used in case of emergency
the administrator account name should be changed from the default "admin" to another
account password should be written down and properly secured (sheet of paper, PenDrive
or other medium located in a safe place, e.g. safe)
account password
random
10
-
15 characters long
