Axis P1365 - System Options; Security

To Next Page

To Previous Page

AXISP1365NetworkCamera

SystemOptions

HTTPS

HTTPS(HyperTextTransferProtocoloverSecureSocketLayer,orHTTPoverSSL)isawebprotocolprovidingencryptedbrowsing.

HTTPScanalsobeusedbyusersandclientstoverifythatthecorrectdeviceisbeingaccessed.Thesecuritylevelprovidedby

HTTPSisconsideredadequateformostcommercialexchanges.

TheAxisproductcanbeconguredtorequireHTTPSwhenusersfromdifferentusergroups(administrator,operator,viewer)login.

TouseHTTPS,anHTTPScerticatemustrstbeinstalled.GotoSystemOptions>Security>Certicatestoinstallandmanage

certicates.SeeCerticatesonpage52.

ToenableHTTPSontheAxisproduct:

1.GotoSystemOptions>Security>HTTPS

2.SelectanHTTPScerticatefromthelistofinstalledcerticates.

3.Optionally,clickCiphersandselecttheencryptionalgorithmstouseforSSL.

4.SettheHTTPSConnectionPolicyforthedifferentusergroups.

5.ClickSavetoenablethesettings.

ToaccesstheAxisproductviathedesiredprotocol,intheaddresseldinabrowser,enterhttps://fortheHTTPSprotocol

andhttp://fortheHTTPprotocol.

TheHTTPSportcanbechangedontheSystemOptions>Network>TCP/IP>Advancedpage.

IEEE802.1X

IEEE802.1Xisastandardforport-basedNetworkAdmissionControlprovidingsecureauthenticationofwiredandwirelessnetwork

devices.IEEE802.1XisbasedonEAP(ExtensibleAuthenticationProtocol).

ToaccessanetworkprotectedbyIEEE802.1X,devicesmustbeauthenticated.Theauthenticationisperformedbyanauthentication

server,typicallyaRADIUSserver,examplesofwhichareFreeRADIUSandMicrosoftInternetAuthenticationService.

InAxisimplementation,theAxisproductandtheauthenticationserveridentifythemselveswithdigitalcerticatesusingEAP-TLS

(ExtensibleAuthenticationProtocol-TransportLayerSecurity).ThecerticatesareprovidedbyaCerticationAuthority(CA).

Youneed:

•aCAcerticatetoauthenticatetheauthenticationserver.

•aCA-signedclientcerticatetoauthenticatetheAxisproduct.

Tocreateandinstallcerticates,gotoSystemOptions>Security>Certicates.SeeCerticatesonpage52.ManyCAcerticates

arepreinstalled.

ToallowtheproducttoaccessanetworkprotectedbyIEEE802.1X:

1.GotoSystemOptions>Security>IEEE802.1X.

2.SelectaCACerticateandaClientCerticatefromthelistsofinstalledcerticates.

3.UnderSettings,selecttheEAPOLversionandprovidetheEAPidentityassociatedwiththeclientcerticate.

4.ChecktheboxtoenableIEEE802.1XandclickSave.

Note

Forauthenticationtoworkproperly,thedateandtimesettingsintheAxisproductshouldbesynchronizedwithanNTP

server.SeeDate&Timeonpage52.

Other manuals for Axis P1365