- #Milestone xprotect essential system requirements install#
- #Milestone xprotect essential system requirements verification#
In the Management Client, perform these steps:
#Milestone xprotect essential system requirements verification#
If you upgraded your system from a previous version of XProtect, you must restart the Mobile Server to enable the two-step verification feature. On the relevant role, select the Users and Groups tab. You have added users and groups to your XProtect system in the Management Client on the Roles node in the Site Navigation pane. Two-step verification increases the protection level of your surveillance system. In addition to the standard user name and password, the user must enter a verification code received by email. To impose an additional login step on users of the XProtect Mobile client or XProtect Web Client, set up two-step verification on the Mobile Server. Para obtener más información, consulte la página web de comparación de productos. La funcionalidad disponible depende del sistema que esté utilizando. Set up users for two-step verification via email NIST 800-53 CM-6 Configuration Settings. NIST 800-53 AC-17 Remote Access (Disable Unused Protocols). For more information, see Disable non-secure protocols. The same recommendation is given for the Management Server. 
This requires configuration of Windows and other system components, and the proper use of digital certificates and keys. For example, implement the latest version of the Transport Layer Security (TLS, currently 1.2) and disable all other cipher suites and obsolete versions of SSL/TLS protocols. Milestone recommends that you use only the necessary protocols, and only the latest versions. It is not possible to configure a Mobile Server in a DMZ when the Management Server is in a cluster (failover mode).
Mobile Server in a DMZ only works with a single instance of Management Server. This allows mobile client users to connect to Mobile Server with a public IP address, without compromising the security or availability of the VMS network.
#Milestone xprotect essential system requirements install#
Milestone recommends that you install Mobile Server in a DMZ, and on a computer with two network interfaces: Use a "demilitarized zone" (DMZ) to provide external access
NIST SP 800-53 SC-7 Boundary Protection. The following control(s) provide additional guidance: Milestone recommends that you enable only the ports that Mobile Server uses, and block all other ports, including the default Windows ports.īy default, the XProtect Mobile Server uses ports 80. XProtect Mobile Server Only enable ports that Mobile Server uses
0 kommentar(er)
