Quadrox QGuard Installation Manual - Manual (Page 60)

GuardNVR Installation Manual 60
Version 4.4 Series
6.2.2 Windows security updates
To keep your system secure, it is important that you keep it up to date. This will prevent an
attacker from using vulnerabilities that have already been removed by Microsoft.
Quadrox is not responsible for keeping the installed GuardNVR software and Windows OS up
to date. This is the responsibility of the installer. Quadrox is not responsible for problems that
originate from not keeping the machine up to date (patches until the last release applied). If
such a problem occurs (e.g. a virus), Quadrox will recommend a full re-installation.
6.2.3 Network security
The network is the main interface of GuardNVR, through which an attack can occur. That’s
why it is important to pay special attention to its security.
In accordance with our general security policy, we will try as much as possible to limit the way
in which the network can be used, while not interfering with GuardNVR functionality. There
are several ways to limit the network:
Physical limitation (dedicated network)
Limiting the number of connections (LAN versus Internet)
Using only one network protocol (TCP/IP)
Allowing only traffic on the necessary network ports (Firewall)
Allowing only known clients
Limiting the functionality of the web server (securing IIS)
6.2.3.1 Dedicated network versus integration with the
corporate network
Having a dedicated network for video surveillance, adds an intrinsic level of security by
physically eliminating access points for attacks. This way, you can easily have a safe and
robust system. The network becomes a safe entity in itself, while if GuardNVR is incorporated
in a more general network, security should be built around the GuardNVR server.
A dedicated network also ensures that the video traffic doesn’t interfere with other general
data. This potentially increases the performance of both GuardNVR and other applications on
the network.
On the other side, integrating the video network with the corporate network can potentially
reduce the costs of installation and administration. Both solutions are possible and endorsed by
Quadrox. The choice depends on your performance, cost and security needs.