Axis P3265-V - Firewall

AXISP3265-VDomeCamera
Thewebinterface
Authenticationmethod:SelectanEAPtypeusedforauthentication.ThedefaultoptionisEAP-TLS.EAP-PEAP/MSCHAPv2isa
moresecureoption.
Clientcerticate:SelectaclientcerticatetouseIEEE802.1x.Theauthenticationserverusesthecerticatetovalidatethe
client’sidentity.
CAcerticate:SelectCAcerticatestovalidatetheauthenticationserver’sidentity.Whennocerticateisselected,thedevice
triestoauthenticateitselfregardlessofwhatnetworkitisconnectedto.
EAPidentity:Entertheuseridentityassociatedwiththeclientcerticate.
EAPOLversion:SelecttheEAPOLversionthatisusedinthenetworkswitch.
UseIEEE802.1x:SelecttousetheIEEE802.1xprotocol.
IEEE802.1AEMACsec
IEEE802.1AEMACsecisanIEEEstandardformediaaccesscontrol(MAC)securitythatdenesconnectionlessdatacondentiality
andintegrityformediaaccessindependentprotocols.
ThesettingsareonlyavailableifyouuseEAP-TLSastheauthenticationmethod:
Mode
•DynamicCAK/EAP-TLS:Thedefaultoption.Afterasecuredconnection,thedevicechecksforMACseconthenetwork.
•StaticCAK/pre-sharedkey(PSK):Selecttosetthekeynameandvaluetoconnecttothenetwork.
ThesettingsareonlyavailableifyouuseEAP-PEAP/MSCHAPv2astheauthenticationmethod:
•Password:Enterthepasswordforyouruseridentity.
•Peapversion:SelectthePeapversionthatisusedinthenetworkswitch.
•Label:Select1touseclientEAPencryption;select2touseclientPEAPencryption.SelecttheLabelthatthenetwork
switchuseswhenusingPeapversion1.
Preventbrute-forceattacks
Blocking:Turnontoblockbrute-forceattacks.Abrute-forceattackusestrial-and-errortoguesslogininfoorencryptionkeys.
Blockingperiod:Enterthenumberofsecondstoblockabrute-forceattack.
Blockingconditions:Enterthenumberofauthenticationfailuresallowedpersecondbeforetheblockstarts.Youcansetthe
numberoffailuresallowedbothonpagelevelanddevicelevel.
Firewall
Activate:Turnontherewall.
DefaultPolicy:Selectthedefaultstatefortherewall.
•Allow:Allowsallconnectionstothedevice.Thisoptionissetbydefault.
•Deny:Deniesallconnectionstothedevice.
Tomakeexceptionstothedefaultpolicy,youcancreaterulesthatallowsordeniesconnectionstothedevicefromspecic
addresses,protocols,andports.
•Address:EnteranaddressinIPv4/IPv6orCIDRformatthatyouwanttoallowordenyaccessto.
•Protocol:Selectaprotocolthatyouwanttoallowordenyaccessto.
•Port:Enteraportnumberthatyouwanttoallowordenyaccessto.Youcanaddaportnumberbetween1and65535.
•Policy:Selectthepolicyoftherule.
:Clicktocreateanotherrule.
Addrules:Clicktoaddtherulesthatyouhavedened.
37