Axis P3245 Series - Prevent brute-force attacks; IP address filter; Custom-signed firmware certificate; Accounts

AXISP3245NetworkCameraSeries
Thewebinterface
Clientcerticate:SelectaclientcerticatetouseIEEE802.1x.Theauthenticationserverusesthecerticatetovalidatethe
client’sidentity.
CAcerticate:SelectCAcerticatestovalidatetheauthenticationserver’sidentity.Whennocerticateisselected,thedevice
triestoauthenticateitselfregardlessofwhatnetworkitisconnectedto.
EAPidentity:Entertheuseridentityassociatedwiththeclientcerticate.
EAPOLversion:SelecttheEAPOLversionthatisusedinthenetworkswitch.
UseIEEE802.1x:SelecttousetheIEEE802.1xprotocol.
Preventbrute-forceattacks
Blocking:Turnontoblockbrute-forceattacks.Abrute-forceattackusestrial-and-errortoguesslogininfoorencryptionkeys.
Blockingperiod:Enterthenumberofsecondstoblockabrute-forceattack.
Blockingconditions:Enterthenumberofauthenticationfailuresallowedpersecondbeforetheblockstarts.Youcansetthe
numberoffailuresallowedbothonpagelevelanddevicelevel.
IPaddresslter
Uselter:SelecttolterwhichIPaddressesareallowedtoaccessthedevice.
Policy:ChoosewhethertoAlloworDenyaccessforcertainIPaddresses.
Addresses:EntertheIPnumbersthatareeitherallowedordeniedaccesstothedevice.YoucanalsousetheCIDRformat.
Custom-signedrmwarecerticate
ToinstalltestrmwareorothercustomrmwarefromAxisonthedevice,youneedacustom-signedrmwarecerticate.The
certicateveriesthatthermwareisapprovedbyboththedeviceownerandAxis.Thermwarecanonlyrunonaspecic
devicewhichisidentiedbyitsuniqueserialnumberandchipID.OnlyAxiscancreatecustom-signedrmwarecerticates,
sinceAxisholdsthekeytosignthem.
Install:Clicktoinstallthecerticate.Youneedtoinstallthecerticatebeforeyouinstallthermware.
Accounts
Accounts
Addaccount:Clicktoaddanewaccount.Youcanaddupto100accounts.
Account:Enterauniqueaccountname.
Newpassword:Enterapasswordfortheaccount.Passwordsmustbe1to64characterslong.OnlyASCIIprintablecharacters
(code32to126)areallowedinthepassword,forexample,letters,numbers,punctuation,andsomesymbols.
Repeatpassword:Enterthesamepasswordagain.
Privileges:
•Administrator:Hasfullaccesstoallsettings.Administratorscanalsoadd,update,andremoveotheraccounts.
•Operator:Hasaccesstoallsettingsexcept:
-AllSystemsettings.
-Addingapps.
•Viewer:Hasaccessto:
-Watchandtakesnapshotsofavideostream.
33