Axis P5635-E - Secure Network Access

AXISP5635–EPTZDomeNetworkCamera
SystemOptions
HTTPS
HTTPS(HyperTextTransferProtocoloverSecureSocketLayer,orHTTPoverSSL)isawebprotocolprovidingencryptedbrowsing.
HTTPScanalsobeusedbyusersandclientstoverifythatthecorrectdeviceisbeingaccessed.Thesecuritylevelprovidedby
HTTPSisconsideredadequateformostcommercialexchanges.
TheAxisproductcanbeconguredtorequireHTTPSwhenusersfromdifferentusergroups(administrator,operator,viewer)login.
TouseHTTPS,anHTTPScerticatemustrstbeinstalled.GotoSystemOptions>Security>Certicatestoinstallandmanage
certicates.SeeCerticatesonpage48.
ToenableHTTPSontheAxisproduct:
1.GotoSystemOptions>Security>HTTPS
2.SelectanHTTPScerticatefromthelistofinstalledcerticates.
3.Optionally,clickCiphersandselecttheencryptionalgorithmstouseforSSL.
4.SettheHTTPSConnectionPolicyforthedifferentusergroups.
5.ClickSavetoenablethesettings.
ToaccesstheAxisproductviathedesiredprotocol,intheaddresseldinabrowser,enterhttps://fortheHTTPSprotocol
andhttp://fortheHTTPprotocol.
TheHTTPSportcanbechangedontheSystemOptions>Network>TCP/IP>Advancedpage.
IEEE802.1X
IEEE802.1Xisastandardforport-basedNetworkAdmissionControlprovidingsecureauthenticationofwiredandwirelessnetwork
devices.IEEE802.1XisbasedonEAP(ExtensibleAuthenticationProtocol).
ToaccessanetworkprotectedbyIEEE802.1X,devicesmustbeauthenticated.Theauthenticationisperformedbyanauthentication
server,typicallyaRADIUSserver,examplesofwhichareFreeRADIUSandMicrosoftInternetAuthenticationService.
InAxisimplementation,theAxisproductandtheauthenticationserveridentifythemselveswithdigitalcerticatesusingEAP-TLS
(ExtensibleAuthenticationProtocol-TransportLayerSecurity).ThecerticatesareprovidedbyaCerticationAuthority(CA).
Youneed:
•aCAcerticatetoauthenticatetheauthenticationserver.
•aCA-signedclientcerticatetoauthenticatetheAxisproduct.
Tocreateandinstallcerticates,gotoSystemOptions>Security>Certicates.SeeCerticatesonpage48.ManyCAcerticates
arepreinstalled.
ToallowtheproducttoaccessanetworkprotectedbyIEEE802.1X:
1.GotoSystemOptions>Security>IEEE802.1X.
2.SelectaCACerticateandaClientCerticatefromthelistsofinstalledcerticates.
3.UnderSettings,selecttheEAPOLversionandprovidetheEAPidentityassociatedwiththeclientcerticate.
4.ChecktheboxtoenableIEEE802.1XandclickSave.
Note
Forauthenticationtoworkproperly,thedateandtimesettingsintheAxisproductshouldbesynchronizedwithanNTP
server.SeeDate&Timeonpage48.
47