Quadrox QGuard Installation Manual - Manual (Page 63)

GuardNVR Installation Manual 63
Version 4.4 Series
6.2.4 Other types of access
Apart from the network, there are several other ways in which a malicious piece of software
can end up on GuardNVR. These ways include all information carriers that can be connected
to GuardNVR servers, like CDs, floppies and USB memory drives.
When connecting these information carriers to GuardNVR server, pay special attention to
security. Make sure that they are scanned for viruses and malware before connecting them.
Along the same line of reasoning you should pay extra attention when you introduce foreign
objects in a shielded environment, e.g. a laptop of a technician in a dedicated video network.
6.2.5 3
rd
party security tools
When the machine is locked down like described above, it should be resistant against the
majority of threats. The limited increase in security that would be achieved by pre-emptively
introducing additional security tools probably does not justify the additional cost of licenses
and efforts for installation and maintenance. Furthermore, this software might interfere with
the functionality of GuardNVR.
Such tools include virus scanners, malware/spyware/adware removal tools, additional pop-up
blockers, firewalls with extended functionalities, script blockers, etc.
As a general guideline, script blocking should be disabled at all times, since GuardNVR uses
scripts to implement its functionality. The 3
rd
party tools also need to allow the proper
installation and execution of signed ActiveX components.
6.3 Error recovery mechanisms
GuardNVR has the ability to automatically recover from common problems like crashes,
overheating, etc. This is achieved through: System Health Service (SHS).
System Health Service is software running on GuardNVR as a service. It monitors the
hardware and some vital processes on the machine, like the GuardNVR server and IIS. If
something happens (e.g. a crash) to any of these processes, the SHS will try to recover by –
depending on the seriousness of the situation – restarting the process or rebooting the PC.