Securing a Barracuda DVR video surveillance system?

From: Jeff Davis (jeff_at_dynamictelecard.com)
Date: 07/25/05

  • Next message: Chris Griffin: "Email Encryption" 
    Date: Mon, 25 Jul 2005 10:37:47 -0500
To: security-basics@securityfocus.com

    I have a company that wants to run a 'Barracuda DVR video
    surveillance system' and use the remote viewing capabilities.

    I was curious is anyone on the list has
    experience in trying to secure this.

    I just got a copy of the installation instructions,
    and there is no mention of how to secure this.

    In fact its basically run the install, open a
    bunch of ports on your router.

    For the client it tells it only works in IE,
    and then to change your security settings so
    that IE prompts you to allow downloading and
    initialization of unsigned ActiveX controls.

    I contacted the company and asked some
    questions about the software.
    I got what I expected.

    "The webserver is proprietary..."
    "The database is proprietary..."
    ..etc...

    I did get told that they prefer that you
    *not* run any anti-virus software on the
    box, because some of them interfere
    with the surveillance software and also
    degrade performance.

    If anyone has more info on this,
    I would greatly appreciate you sharing.

    Thanks,

    Jeff

  • Next message: Chris Griffin: "Email Encryption"