Axis M5075 - Prevent brute-force attacks; IP address filter; Custom-signed firmware certificate; Users

AXISM50PTZCameraSeries
Thedeviceinterface
Clientcerticate:SelectaclientcerticatetouseIEEE802.1x.Theauthenticationserverusesthecerticatetovalidatethe
client’sidentity.
CAcerticate:SelectaCAcerticatetovalidatetheauthenticationserver’sidentity.Whennocerticateisselected,thedevice
triestoauthenticateitselfregardlessofwhatnetworkitisconnectedto.
EAPidentity:Entertheuseridentityassociatedwiththeclientcerticate.
EAPOLversion:SelecttheEAPOLversionthatisusedinthenetworkswitch.
UseIEEE802.1x:SelecttousetheIEEE802.1xprotocol.
Preventbrute-forceattacks
Blocking:Turnontoblockbrute-forceattacks.Abrute-forceattackusestrial-and-errortoguesslogininfoorencryptionkeys.
Blockingperiod:Enterthenumberofsecondstoblockabrute-forceattack.
Blockingconditions:Enterthenumberofauthenticationfailuresallowedpersecondbeforetheblockstarts.Youcansetthe
numberoffailuresallowedbothonpagelevelanddevicelevel.
IPaddresslter
Uselter:SelecttolterwhichIPaddressesthatareallowedtoaccessthedevice.
Policy:ChoosewhethertoAllowaccessorDenyaccessforcertainIPaddresses.
Addresses:EntertheIPnumbersthatareeitherallowedordeniedaccesstothedevice.YoucanalsousetheCIDRformat.
Custom-signedrmwarecerticate
ToinstalltestrmwareorothercustomrmwarefromAxisonthedevice,youneedacustom-signedrmwarecerticate.The
certicateveriesthatthermwareisapprovedbyboththedeviceownerandAxis.Thermwarecanonlyrunonaspecic
devicewhichisidentiedbyitsuniqueserialnumberandchipID.Custom-signedrmwarecerticatescanonlybecreated
byAxis,sinceAxisholdsthekeytosignthem.
ClickInstalltoinstallthecerticate.Youneedtoinstallthecerticatebeforeyouinstallthermware.
Users
Adduser:Clicktoaddanewuser.Youcanaddupto100users.
Username:Enterauniqueusername.
Newpassword:Enterapasswordfortheuser.Passwordsmustbe1to64characterslong.OnlyASCIIprintablecharacters(code
32to126)areallowedinthepassword,forexampleletters,numbers,punctuation,andsomesymbols.
Repeatpassword:Enterthesamepasswordagain.
Role:
•Administrator:Hasfullaccesstoallsettings.Administratorscanalsoadd,update,andremoveotherusers.
•Operator:Hasaccesstoallsettingsexcept:
-AllSystemsettings.
-Addingapps.
•Viewer:Hasaccessto:
-Watchandtakesnapshotsofavideostream.
-Watchandexportrecordings.
-WithPTZuseraccess:pan,tilt,andzoom.
38