Here, you can find some guidelines to secure your installation as well as recommendations and best practices for setting up the VMS to work securely with the Video API in a network environment. We assume that the reader is familiar with the basic principles of IT security and that computers and the network have a state-of-the-art IT setup including regular security patches and established access and password policies. For securing the ecosystem of the subsystem, consult the corresponding subsystem manuals.
Firewall Rules
In typical deployment cases, the Video API service runs on the same computer as the VMS server. Deploying the Video API service this way is strongly recommended. The MSI package does not change the firewall configuration. If a Commissioning Engineer needs access from a service laptop, modifying the firewall to allow access from this single IP address instead of disabling it is recommended.