Dahua VIGI NVR1016H Network Video Recorder User Guide

Network Video Recorder
Quick Start Guide
V1.0.0
Foreword
General
This quick start guide (hereinafter referred to as "the Manual") introduces the functions and
operations of the NVR device (hereinafter referred to as "the NVR").
Safety Instructions
The following categorized signal words with defined meaning might appear in the Manual.
Signal Words
Meaning
Indicates a high potential hazard which, if not avoided,
will result in death or serious injury.
Indicates a medium or low potential hazard which, if not
avoided, could result in slight or moderate injury.
Indicates a potential risk which, if not avoided, could
result in property damage, data loss, lower performance,
or unpredictable result.
Provides methods to help you solve a problem or save
you time.
Provides additional information as the emphasis and
supplement to the text.
Revision History
Version
Revision Content
Release Time
V1.0.0
First release.
July 2020
Privacy Protection Notice
As the NVR user or data controller, you might collect personal data of others such as face,
fingerprints, car plate number, Email address, phone number, GPS. You need to be in compliance
with the local privacy protection laws and regulations to protect the legitimate rights and interests
of other people by implementing measures including but not limited to: providing clear and visible
identification to inform data subject the existence of surveillance area and providing related contact.
About the Manual
● The Manual is for reference only. If there is inconsistency between the Manual and the actual
product, the actual product shall prevail.
● We are not liable for any loss caused by the operations that do not comply with the Manual.
● The Manual would be updated according to the latest laws and regulations of related regions.
For detailed information, see the paper manual, CD-ROM, QR code or our official website. If there
is inconsistency between paper manual and the electronic version, the electronic version shall
prevail.
● All the designs and software are subject to change without prior written notice. The product
updates might cause some differences between the actual product and the Manual. Contact the
I
customer service for the latest program and supplementary documentation.
● There still might be deviation in technical data, functions and operations description, or errors in
print. If there is any doubt or dispute, refer to our final explanation.
● Upgrade the reader software or try other mainstream reader software if the Manual (in PDF
format) cannot be opened.
● All trademarks, registered trademarks and the company names in the Manual are the properties
of their respective owners.
● Visit our website, contact the supplier or customer service if there is any problem occurred when
using the NVR.
● If there is any uncertainty or controversy, refer to our final explanation.
II
Important Safeguards and Warnings
The following description is the correct application method of the NVR. Read the Manual carefully
before use to prevent danger and property loss. Strictly conform to the Manual during application
and keep it properly after reading.
Operating Requirements
● Install the PoE cameras indoors.
● Do not place and install the NVR in an area exposed to direct sunlight or near heat generating
device.
● Do not install the NVR in a humid, dusty or fuliginous area.
● Keep its horizontal installation, or install it at stable places, and prevent it from falling.
● Do not drip or splash liquids onto the NVR; do not put on the NVR anything filled with liquids, in
order to prevent liquids from flowing into the NVR.
● Install the NVR at well-ventilated places; do not block its ventilation opening.
● Use the NVR only within rated input and output range.
● Do not dismantle the NVR arbitrarily.
● Transport, use and store the NVR within allowed humidity and temperature range.
Power Requirements
● Use batteries according to requirements. Otherwise, it may result in fire, explosion or burning
risks of batteries!
● To replace batteries, only the same type of batteries can be used.
● Dispose the exhausted batteries according to the instructions.
● Use electric wires within rated specifications recommended by local regulations.
● Use standard power adapter matched with this NVR. Otherwise, the user shall undertake
resulting personnel injuries or NVR damages.
● Use power supply that meets SELV (safety extra low voltage) requirements, and supply power
with rated voltage that conforms to Limited Power Source in IEC60950-1. For specific power
supply requirements, refer to device labels.
● Products with category I structure shall be connected to grid power output socket, which is
equipped with protective grounding.
● Appliance coupler is a disconnecting device. During normal use, keep an angle that facilitates
operation.
III
Table of Contents
Foreword .........................................................................................................................................................................................................I
Important Safeguards and Warnings ............................................................................................................................................. III
1 Local Operations ................................................................................................................................................................................... 1
1.1 Starting the NVR ......................................................................................................................................................................... 1
1.2 Initializing the NVR .................................................................................................................................................................... 1
1.3 Configuring Network ................................................................................................................................................................ 4
1.4 Adding IP Camera ...................................................................................................................................................................... 6
1.4.1 Initializing IP Camera ..................................................................................................................................................... 6
1.4.2 Adding IP Camera by Search Result .....................................................................................................................10
1.4.3 Manually Adding IP Camera ..................................................................................................................................... 12
1.5 Configuring Recorded Video Storage Schedule ....................................................................................................... 15
1.6 Configuring P2P Settings .....................................................................................................................................................17
1.6.1 Enabling P2P Function ................................................................................................................................................17
1.6.2 Adding the NVR to Smart Phone Client ..............................................................................................................18
1.7 Smart Motion Detection .......................................................................................................................................................19
1.8 Live View.......................................................................................................................................................................................21
1.9 Recording Playback ................................................................................................................................................................. 23
2 Logging in to Web ..............................................................................................................................................................................25
Appendix 1 Cybersecurity Recommendations .........................................................................................................................26
IV
1 Local Operations
Slight difference might be found on the interfaces of different models. Following figures are for
reference only. The actual product shall prevail.
1.1 Starting the NVR
Before starting the NVR, make sure that:
● The rated input voltage matches the NVR's power requirements.
● The power wire connection is ready.
● For device security, connect the NVR to the power adapter first and then connect it to the power
socket.
● Always use stable current. It is recommended to use UPS as the power source.
1.2 Initializing the NVR
This topic shows how to initialize the NVR before use.
Background Information
When booting up for the first time, you need to configure the password information for admin (by
default). To guarantee device security, we strongly recommend you properly keep the login
password and regularly modify it.
Procedure
Step 1
Step 2
Turn on the NVR.
The system enters device initialization interface.
From the drop-down lists, select region, language and video standard as needed.
1
You can change these settings on setting pages of the NVR after initialization.
Figure 1-1 Set location, language and video standard
Step 3
Step 4
Step 5
Click Next.
Read the Software License Agreement and select I have read and agree to all terms, and
then click Next.
Select time zone and configure system time, and then click Next.
Figure 1-2 Configure time zone and system time
Step 6
Configure the password information for device administrator, and then click Next.
2
Figure 1-3 Configure password information
Table 1-1 Password information
Parameter
Description
Username
By default, the user is admin and you cannot change it.
Password
Enter a new password for device administrator in Password field, and
confirm the password in the next field.
Confirm Password
The new password can be set from 8 characters to 32 characters and
contains at least two types from numbers, letters and special
characters (excluding"'", """, ";", ":" and "&").
Enter a prompt question that will help you recall the password for
your device.
Password Hint
On the login interface, click
help you reset the password.
Step 7
and the prompt will be displayed to
(Optional) Use mouse to draw an unlock pattern, and then draw it again for confirmation.
3
Figure 1-4 Draw an unlock pattern
● The pattern that you want to set must cross at least four points.
● If you do not want to configure the unlock pattern, click Skip.
● Once you have configured the unlock pattern, it will be used as the default
Step 8
authentication method. If you skip this setting, enter the password for login.
(Optional) Apply reserved email and security questions to the NVR.
● Enable Reserved Email and enter the email address.
● Enable Security Question and select questions from the drop-down lists for Question
1, Question 2, and Question 3, and then enter the answers to those questions.
Figure 1-5 Apply reserved email and security questions
Step 9
Click OK.
1.3 Configuring Network
You can configure the basic network settings such as net mode, IP version, and IP address for the
NVR.
Step 1 Select Main Menu > NETWORK > TCP/IP.
Step 2 Configure parameters.
4
You can also configure network parameters in the Startup Wizard.
Figure 1-6 TCP/IP
Table 1-2 TCP/IP parameters
Parameter
Description
IP Version
In the IP Version list, you can select IPv4 or IPv6. Both versions are
supported for access.
MAC Address
Displays the MAC address of the NVR.
Enable the DHCP function. The IP address, subnet mask and default
gateway are not available for configuration once DHCP is enabled.
DHCP
IP Address
Subnet Mask
● If DHCP is effective, the obtained information will be displayed in
the IP Address, Subnet Mask and Default Gateway. If not, all
values show 0.0.0.0.
● If PPPoE connection is successful, the IP address, subnet mask,
default gateway, and DHCP are not available for configuration.
Enter the IP address and configure the corresponding subnet mask
and default gateway.
Default Gateway
IP address and default gateway must be in the same network
segment.
Preferred DNS
Enter the IP address of DNS.
Alternate DNS
Enter the IP address of alternate DNS.
5
Parameter
Description
Enter a value for network card. The value ranges from 1280 byte to
1500 byte. The default is 1500.
The suggested MTU values are as below.
● 1500: The biggest value of Ethernet information package. This
value is typically selected if there is no PPPoE or VPN connection,
and it is also the default value of some routers, network adapters
and switches.
● 1492: Optimized value for PPPoE.
● 1468: Optimized value for DHCP.
● 1450: Optimized value for VPN.
MTU
Click Test to test if the entered IP address and gateway are
interworking.
Test
Step 3
Click OK.
1.4 Adding IP Camera
You can add an IP camera by search result or by manually entering IP information.
Cameras you want to add must be in the same network with the NVR.
1.4.1 Initializing IP Camera
The topic shows how to initialize new cameras or the cameras after restoring factory defaults.
Background Information
The IP camera shall be initialized before connecting to an NVR, otherwise the connection will fail. The
initialization will change IP camera's login password and IP address.
When connect a camera to the NVR through PoE port, the NVR will automatically initialize the
camera. And the camera adopts the password and email information of the NVR by default.
Procedure
Step 1
Step 2
Select Main Menu > Camera > Camera List > Add Camera.
Enable Uninitialized, and then click Search Device.
6
Figure 1-7 Search uninitialized device
Step 3
Select the camera to be initialized and then click Initialize.
Figure 1-8 Initialize the camera
Step 4
Apply password and email information to the IP camera.
● Use the NVR's settings.
7
1. Select Using current device password and email info..
This check box is selected by default.
Figure 1-9 Apply device settings
2. Click Next.
● Manually set password and email information.
1. Cancel Using current device password and email info..
Figure 1-10 Set password
2. Set password.
8
Table 1-3 Password
Parameter
Description
User
The default value is admin that cannot be changed.
Password
The new password can be set from 8 characters to 32 characters and
contains at least two types from numbers, letters and special characters
(excluding"'", """, ";", ":" and "&").
Confirm Password
Enter a strong password according to the password strength bar
indication.
3. Click Next.
4. Enter an email address and click Next.
Figure 1-11 Set email information
Step 5
Configure camera IP address.
● Select DHCP if there is a DHCP server deployed.
● Select Static, and then input IP address, subnet mask, default gateway and incremental
value.
Set the incremental value when you need to change IP addresses of multiple cameras
at one time. The NVR will incrementally add the value on to the fourth section of the IP
address when allocate IP addresses for those cameras.
9
Figure 1-12 Configure IP address
Step 6
Step 7
Click Next.
Wait 1–2 minutes for the initialization to complete.
Click Finished.
1.4.2 Adding IP Camera by Search Result
Prerequisites
Make sure that the cameras you want to add have already been initialized and connected to the
right network.
Procedure
Step 1
Select Main Menu > CAMERA > Camera List > Add Camera.
Step 2
Click Search Device.
10
Figure 1-13 Search device
Step 3
Add IP cameras.
● Add by double-click: Double-click the target camera to add it to Added Device list.
You can add only one camera by search result at one time.
● Add by check box: Select the check box of the target camera, and then click Add to add
it to Added Device list.
11
You can select more than one check box and add cameras in batches.
Figure 1-14 Add IP camera by search result
Result
● If the status of the added camera is green ( ), it indicates the camera is properly added to the
NVR.
● If the status of the added camera is red ( ), it indicates connection failure between the camera
and the NVR. Check the parameters of the camera such as password, protocol and channel
number, and then try adding it again.
1.4.3 Manually Adding IP Camera
You can add an IP camera by IP information at one time.
Prerequisites
Make sure that the cameras you want to add have already been initialized and connected to the
right network.
Procedure
Step 1
Step 2
Select Main Menu > CAMERA > Camera List > Add Camera.
Click Manual Add.
12
Figure 1-15 Manual add
Step 3
In the Manual Add dialog box, configure parameters.
13
Figure 1-16 Configure manual add parameters
Table 1-4 Manual add parameters
Parameter
Description
Channel
From the Channel drop-down list, select the channel that you want use on
the NVR to connect the remote device.
Manufacturer
From the Manufacturer drop-down list, select the manufacturer of the
remote device.
In the IP Address field, enter the IP address of the IP camera.
IP Address
RTSP Port
Change the default value (192.168.0.0) which the system cannot connect
to.
The default value is 554. You can change the value as needed.
The default value is 80. You can change the value as needed.
HTTP Port
If you enter another value, for example, 70, and then you should enter 70
after the IP address when logging in to the NVR by browser.
TCP Port
The default value is 37777. You can change the value as needed.
Username
Enter the username of the remote device.
Password
Enter the password of the user for the remote device.
Remote CH No.
Enter the remote channel number of the remote device that you want to
add.
Decoder Strategy
In the Decoder Strategy list, select Default, Realtime, or Fluent as needed.
14
Parameter
Description
● If the IP camera is added through private protocol, select TCP.
● If the IP camera is added through ONVIF protocol, the select Auto, TCP,
Protocol Type
UDP, or MULTICAST.
● If the IP camera is added through other manufacturers, select TCP or
UDP.
If the IP camera is added through ONVIF protocol, enabling the Encryption
check box will provide encryption protection to the data being transmitted.
Encryption
To use this function, the HTTPS function must be enabled for the remote IP
camera.
Step 4
Click OK.
1.5 Configuring Recorded Video Storage Schedule
By default, all cameras continuously record videos 24 hours a day. You can modify the settings as
needed.
You can also configure storage schedule in the Startup Wizard.
Procedure
Step 1
Select Main Menu > STORAGE > Schedule > Record.
Figure 1-17 Record schedule
Step 2
Configure parameters.
15
Table 1-5 Record parameters
Parameter
Description
Channel
From the Channel drop-down list, select the channel to change video
recording settings for.
Pre-record
In the Pre-record field, set the time for capturing extra video that occurs
before an event to provide context to a recording. Value range: 0 to 30 s.
Allows users to set one of the HDDs as the redundant HDD to save the
recorded files into different HDDs. In case of HDD failure, you can find the
backup recoding in the redundant HDD.
● Select Main Menu > STORAGE > Disk Manager, and then set a HDD
as the redundant HDD.
● Select Main Menu > STORAGE > Schedule > Record, and then select
the Redundancy check box.
Redundancy
◇
◇
If the selected channel is not recording, the redundancy function
takes effect next time you record no matter you select the check
box or not.
If the selected channel is recording, the current recorded files will
be packed, and then start recording according to the new
schedule.
● This function is available on select models.
● The redundant HDD only backs up the recorded videos but not
snapshots.
Select the check box of the event types.
Event type
Period
● General: General recording means that the NVR records all videos for
the specified time frame. General recording is represented by the
color green.
● Motion: Motion recording means that the NVR records video only
when the motion detection is triggered. Motion recording is
represented by the color yellow.
● Alarm: Alarm recording means that the NVR records video when an
alarm is triggered. Alarm recording is represented by the color red.
● M&A: M&A recording combines motion recording and alarm
recording. The device records video when the motion detection or
any alarm is triggered. M&A recording is represented by the color
orange.
● Intelligent: Intelligent recording means that the NVR records video
when the smart detection is triggered. Intelligent recording is
represented by the color blue.
● POS: POS recording means that the NVR records video when the POS
machine is used to make a payment. POS recording is represented by
the color purple.
Defines a period during which the configured recording setting is active.
The system only activates the alarm in the defined period.
16
Parameter
Description
Copy to
Click Copy to to copy the settings to other channels.
Step 3
Set the schedule by drawing or editing.
● Drawing: Press and hold the left button of the mouse and drag the mouse to draw the
period.
● Editing: Click
Step 4
to configure the period and then click OK.
Click Apply.
The configured record schedule can come into effect only when the auto record function is
enabled. For details to enable auto record, see User’s Manual.
1.6 Configuring P2P Settings
You can use the QR code to connect a smart phone to the NVR for management.
Make sure that the NVR has been connected to the Internet, and if yes, in the Status box of the P2P
interface, it shows Online.
1.6.1 Enabling P2P Function
You need to enter P2P interface to enable P2P function and scan the QR code to download the smart
phone application.
Step 1 Select Main Menu > NETWORK > P2P.
Figure 1-18 P2P
Step 2
Step 3
Click Enable to enable P2P function.
Click Apply
17
1.6.2 Adding the NVR to Smart Phone Client
This topic takes adding the NVR to smart phone client as an example for smart phone management.
Step 1
Open the application and tap
Step 2
Select SN/Scan.
.
Figure 1-19 Add device
Step 3
Select , enter a name and password for the NVR, and then tap Save.
18
Figure 1-20 Start live view
1.7 Smart Motion Detection
This topic shows how to configure Smart Motion Detection (SMD).
Background Information
The Smart Motion Detection (SMD) is an ideal monitoring feature for low populated areas where you
want an alert for human or vehicles anywhere in the scene without having to set rules and draw
lines.
Procedure
Step 1
Select Main Menu > AI > Parameter > SMD.
19
Figure 1-21 SMD
Step 2
Select and enable a channel, and then configure parameters.
Table 1-6
Parameter
Description
Sensitivity
The higher the value is, the easier it is to trigger an alarm. But at the
same time, the false alarm may occur. The default value is
recommended.
Effective Target
Choose human or motor vehicle or both.
Schedule
Configure the period and in the set time range, the corresponding
configuration item will be linked to start the alarm.
Anti-Dither
Indicates the time taken from the end of motion detection to the end
of alarm linkage action. The range is 0 to 600 seconds.
Alarm-out Port
The alarm device (such as lights, sirens, etc.) is connected to the
alarm output port. When an alarm occurs, the NVR device transmits
the alarm information to the alarm device.
Post-Alarm
When the alarm ends, the alarm extended for a period of time. The
time range is from 0 seconds to 300 seconds.
Show Message
Check box to enable a pop-up message in your local host PC.
Select the check box. When an alarm occurs, the NVR device uploads
an alarm signal to the network (including the alarm center).
Report Alarm
● This function is available on select models.
● You need to set the alarm center first.
20
Parameter
Description
Select the check box. When an alarm occurs, the NVR device sends an
email to the set mailbox to notify the user.
Send Email
You need to set the email first.
Record Channel
Select the check box and select the needed recording channel
(support multiple choices). When an alarm occurs, the NVR device
activates the channel for recording.
You need to enable intelligent recording and auto recording first.
Post-Record
PTZ Linkage
At the end of the alarm, the recording extends for a period of time.
The time range is from 10 seconds to 300 seconds.
Select the check box and click Setting to select the channel and PTZ
action. When an alarm occurs, the NVR device associates the channel
to perform the corresponding PTZ action. For example, activate the
PTZ in channel one to turn to the preset point X.
● Tripwire alarm supports to activate PTZ preset point only.
● You need to set the corresponding PTZ actions first.
Select the check box and select the channel for tour. When an alarm
occurs, the local interface of the NVR device displays the selected
channel screen.
Tour
● You need to set the time interval and mode for tour first.
● After the tour is over, the preview interface is restored to the
screen split mode before the tour.
Select the Snapshot check box to take a snapshot of the selected
channel.
Picture Storage
To use this function, select Main Menu > CAMERA > Encode >
Snapshot, select Event in Type list.
Buzzer
Select the check box to activate the buzzer when an alarm occurs.
Check the box and then select the corresponding audio file from the
drop-down list. System plays the audio file when the alarm occurs.
Alarm Tone
You need to add audio file first.
Step 3
Click Apply.
1.8 Live View
After you logged in, the system goes to multiple-channel live view mode by default. You can view
the monitoring video of each channel. Note that the number of displayed window may vary model
21
to model.
To enter the live view screen from other interfaces, click
at the upper-right of the screen.
Figure 1-22 Live view
Live View Screen
You can view the live video from the connected cameras through each channel on the screen.
● By default, the system time, channel name and channel number are displayed on each channel
window. This setting can be configured by selecting Main Menu > CAMERA > Overlay >
Overlay.
● The figure at the lower-right corner represents channel number. If the channel position is
changed or the channel name is modified, you can recognize the channel number by this figure
and then perform the operations such as record query and playback.
For the icons displayed on each channel, see Table 1-7.
Table 1-7 Icon description
Icon
Description
Video is being recorded.
Motion detection occurs in the scene.
Video loss is detected.
Channel monitoring is locked.
22
1.9 Recording Playback
To play back a recording, you can select Main Menu > Playback or right-click on the live view
interface and select Search.
Figure 1-23 Playback main interface
For details about the instructions on playback main interface, see User's Manual.
Instant Playback
You can play back the previous 5 minutes to 60 minutes of the recorded video.
By clicking , the instant playback interface is displayed. The instant playback has the following
features:
● Move the slider to choose the time you want to start playing.
● Play, pause and close playback.
● The information such as channel name and recording status icon are shielded during instant
playback and will not display until exited.
● During playback, screen split layout switch is not allowed.
To change the playback time, select Main Menu > SYSTEM > General > Basic, in the Instant Play
box, enter the time you want to play back.
23
Figure 1-24 Set instant playback time
Smart Search Playback
During playback, you can analyze a certain area to find if there was any motion detection event
occurred. The system will display the images with motion events of the recorded video.
This function is for some series product only.
To use the Smart Search function, you need to enable the motion detection for the channel by
selecting Main Menu > ALARM > Video Detection > Motion Detection.
24
2 Logging in to Web
The web provides most of the functions on local GUI. You can log in to web to manage the NVR as
needed.
Slight difference might be found on the interfaces of different models. Following figures are for
reference only. The actual product shall govern.
Procedure
Step 1
Step 2
Open the browser and enter the IP address of the NVR, and then press Enter key.
Enter the username and password.
Figure 2-1 Login
● The default administrator account is admin. The password is the one that was
configured during initial settings. To security your account, it is recommended to keep
the password properly and change it regularly.
● Click
Step 3
to display the password.
Click Login.
25
Appendix 1 Cybersecurity Recommendations
Cybersecurity is more than just a buzzword: it’s something that pertains to every device that is
connected to the internet. IP video surveillance is not immune to cyber risks, but taking basic steps
toward protecting and strengthening networks and networked appliances will make them less
susceptible to attacks. Below are some tips and recommendations on how to create a more secured
security system.
Mandatory actions to be taken for basic equipment network security:
1. Use Strong Passwords
Please refer to the following suggestions to set passwords:
● The length should not be less than 8 characters;
● Include at least two types of characters; character types include upper and lower case letters,
numbers and symbols;
● Do not contain the account name or the account name in reverse order;
● Do not use continuous characters, such as 123, abc, etc.;
● Do not use overlapped characters, such as 111, aaa, etc.;
2. Update Firmware and Client Software in Time
● According to the standard procedure in Tech-industry, we recommend to keep your
equipment (such as NVR, DVR, IP camera, etc.) firmware up-to-date to ensure the system is
equipped with the latest security patches and fixes. When the equipment is connected to the
public network, it is recommended to enable the auto-check for updates function to obtain
timely information of firmware updates released by the manufacturer.
● We suggest that you download and use the latest version of client software.
"Nice to have" recommendations to improve your equipment network security:
1. Physical Protection
2.
3.
4.
5.
We suggest that you perform physical protection to equipment, especially storage devices. For
example, place the equipment in a special computer room and cabinet, and implement
well-done access control permission and key management to prevent unauthorized personnel
from carrying out physical contacts such as damaging hardware, unauthorized connection of
removable equipment (such as USB flash disk, serial port), etc.
Change Passwords Regularly
We suggest that you change passwords regularly to reduce the risk of being guessed or cracked.
Set and Update Passwords Reset Information Timely
The equipment supports password reset function. Please set up related information for password
reset in time, including the end user’s mailbox and password protection questions. If the
information changes, please modify it in time. When setting password protection questions, it is
suggested not to use those that can be easily guessed.
Enable Account Lock
The account lock feature is enabled by default, and we recommend you to keep it on to
guarantee the account security. If an attacker attempts to log in with the wrong password several
times, the corresponding account and the source IP address will be locked.
Change Default HTTP and Other Service Ports
We suggest you to change default HTTP and other service ports into any set of numbers between
1024~65535, reducing the risk of outsiders being able to guess which ports you are using.
26
6. Enable HTTPS
We suggest you to enable HTTPS, so that you visit Web service through a secure communication
channel.
7. Enable Allowlist
We suggest you to enable allowlist function to prevent everyone, except those with specified IP
addresses, from accessing the system. Therefore, please be sure to add your computer’s IP
address and the accompanying equipment’s IP address to the allowlist.
8. MAC Address Binding
We recommend you to bind the IP and MAC address of the gateway to the equipment, thus
reducing the risk of ARP spoofing.
9. Assign Accounts and Privileges Reasonably
According to business and management requirements, reasonably add users and assign a
minimum set of permissions to them.
10. Disable Unnecessary Services and Choose Secure Modes
If not needed, it is recommended to turn off some services such as SNMP, SMTP, UPnP, etc., to
reduce risks.
If necessary, it is highly recommended that you use safe modes, including but not limited to the
following services:
● SNMP: Choose SNMP v3, and set up strong encryption passwords and authentication
passwords.
● SMTP: Choose TLS to access mailbox server.
● FTP: Choose SFTP, and set up strong passwords.
● AP hotspot: Choose WPA2-PSK encryption mode, and set up strong passwords.
11. Audio and Video Encrypted Transmission
If your audio and video data contents are very important or sensitive, we recommend that you
use encrypted transmission function, to reduce the risk of audio and video data being stolen
during transmission.
Reminder: encrypted transmission will cause some loss in transmission efficiency.
12. Secure Auditing
● Check online users: we suggest that you check online users regularly to see if the NVR is
logged in without authorization.
● Check equipment log: By viewing the logs, you can know the IP addresses that were used to
log in to your devices and their key operations.
13. Network Log
Due to the limited storage capacity of the equipment, the stored log is limited. If you need to
save the log for a long time, it is recommended that you enable the network log function to
ensure that the critical logs are synchronized to the network log server for tracing.
14. Construct a Safe Network Environment
In order to better ensure the safety of equipment and reduce potential cyber risks, we
recommend:
● Disable the port mapping function of the router to avoid direct access to the intranet devices
from external network.
● The network should be partitioned and isolated according to the actual network needs. If
there are no communication requirements between two sub networks, it is suggested to use
VLAN, network GAP and other technologies to partition the network, so as to achieve the
27
network isolation effect.
● Establish the 802.1x access authentication system to reduce the risk of unauthorized access to
private networks.
15. It is recommended that you enable your device's firewall or blocklist and allowlist feature to
reduce the risk that your device might be attacked.
28
">