American Dynamics VideoEdge ADNSNVR-CL1 - Manual (Page 12)

Architect & Engineer Specification
8200-2608-01 B0 VideoEdge ® Network Video Recorder 12 of 20
AMERICAN DYNAMICS
VIDEOEDGE TM NETWORK VIDEO RECORDER
or modification of any files, whether it may be accidental or intentional, that
could cause issues for the server, applications or video data.
49. The Network Video Recorder software shall support minimum number of
open ports. These ports shall be used for discovery and communication
between the clients-and-server as well as the cameras-and-server. This is an
inverse approach when compared with standard distribution operating
systems that have nearly all ports open and are completely vulnerable to
system attacks.
50. The Network Video Recorder software shall support 7 different levels of
permissions for each individual camera. Each group of users shall have their
own unique combination of permission settings:
a. No Access – (Users do not see or recognize these “covert” cameras)
b. Viewer Only – (Users can only view these cameras in their present
position)
c. PTZ Viewer – (Users have same rights as Viewer Only, plus pan-tilt-
zoom)
d. Guard – (Users have same rights as PTZ Viewer, plus search/playback)
e. Operator – (Users have same rights as Guard, plus modify camera
settings)
f. Lock-Out – (Users have same rights as Operator, plus locking out access
to these cameras for all lower-level users)
Note: When Lock-Out is enabled on any camera, all users with lower
access permissions will immediately be denied access to live and
recorded video until the camera's status is changed back to disabled.
g. Administrator – (Users have full rights to camera and system settings)
51. The Network Video Recorder software shall support multiple networks. The
client network (LAN1) shall enable users to log into and access to the
assigned resources of the Network Video Recorder. The private camera
network (LAN2) shall enable only the Network Video Recorder to log into
each individual IP camera and encoder. This topology shall protect the
individual camera devices from unauthorized access, achieves overall higher
performance, and in the event of a denial-of-service attack (DoS), the web
server of the Network Video Recorder shall shutdown and temporarily
prevent any client access, but it shall continue to manage and record video
until the administrator can secure the network and restart the server.
52. The Network Video Recorder software shall support both standard HTTP as
well as HTTPS communication between the clients and server. The open
SSL 128-bit encryption will provide a higher level of security.
53. The Network Video Recorder software shall support custom password
groups for the IP cameras and encoders. Most camera devices have a default
administrator or root username and password. For added security, the
password for the highest level user account can be modified on the camera
device. Therefore, a custom password group for each unique password shall