Subscriber Discussion

What To Include In An Enterprise VMS Checklist?

Avatar
Brian Karas
•Aug 25, 2017
IPVM

What are the key features and functionality required in a VMS to make it 'enterprise class'?

Post your requirements in the comments, and we will compile them into a list here.

Features listed so far:

  • 2 Factor Authentication support
  • 3rd party integrations/API
  • Active directory support
  • Alarm/Event notification and management
  • Alarm/Event scripting/automation (move PTZ on event, etc.)
  • Automated software update option
  • Camera statistics/details (bitrate info, online status, storage used, etc.)
  • Configuration backup/import from server
  • Detailed logging
  • Dual stream support (for cameras that offer it)
  • Encrypted client/server communications
  • Encrypted server/camera communications (where supported by camera)
  • Federation support
  • Global/cross-server configuration management options
  • Granular logging of user login/logout, configuration changes, rights grants, etc.
  • Granular rights management, by group or user
  • Graphical log viewer/parser
  • Invalid login alerts
  • Mapping functionality
  • Multiple alert methods - email, popup, video push, etc.
  • Multiple NIC support
  • Notification of critical events (loss of camera, loss of disk, etc.)
  • NTP Synchronization support
  • ONVIF Device discovery
  • Per-device recording and retention management settings
  • Private bookmark ability
  • Redundant recording support
  • Server failover capability
  • System statistics report (retention data, oldest video stored, retention per camera, CPU usage, memory usage, network errors)
  • Two way audio support
  • Unlimited client connections
  • Unlimited device support (may be restricted by hardware/network)
  • Unlimited, or very high limit for users and groups
  • Video wall support
  • Watermarked/verified video export
(2)
Avatar
Brian Karas
•Aug 25, 2017
IPVM

Some items from Milestone's XProtect Comparison:

  • Server failover ability
  • HTTPS camera connection support
  • Dual stream support
  • Two way audio
  • Alarm scripting/automation (move PTZ on event, etc.)
  • Camera Discovery
  • NTP Synchronization support
  • Configuration backup/import for server
  • Video wall support
  • Mapping functionality
  • 3rd Party Integrations/API
  • Active Directory support

 

 

 

UI
Undisclosed Integrator #1
•Aug 25, 2017
In reply to Brian Karas

Alerting via multiple methods - push video, email, etc.

Federation/clustering - logging into 70 NVRs would be annoying.

Full support for L3 routing - looking at you Pelco Sarix motion detection

Automated updates or a means to set it up

 

 

 

 

VK
Vasiles Kiosses
•Aug 25, 2017

Ability to be patched when information security vulnerabilities are reported.  Good example is controls for authentications. SSLv3 if vulnerable.

Avatar
Brian Karas
•Aug 25, 2017
IPVM
In reply to Vasiles Kiosses

I am not sure I understand what you mean. Practically speaking, every VMS can be patched, and manufacturers commonly issue patches/updates.

Can you elaborate on how this distinguishes enterprise VMSes specifically?

VK
Vasiles Kiosses
•Aug 29, 2017
In reply to Brian Karas

I come across systems that needed security updates.  It turned out that the VMS vendor had to do a complete update to their software to turn off SSLv3. We are still waiting for the release to be made.  Vendors should design their software to be easily configured even at the file level to keep up to date with vulnerabilities.

U
Undisclosed
•Aug 25, 2017

Live Report showing each Camera's Bit Rate, Storage per Camera, and whether or not the camera is online (Milestone Has this - Genetec does not)

Role Based configuration of client software - meaning that a given user because he is a member of a given role will have certain settings applied when he logs in to the client from any computer.

 

 

Avatar
Brian Karas
•Aug 25, 2017
IPVM
In reply to Undisclosed

I added:

  • Camera statistics/details (bitrate info, online status, storage used, etc.)

I had:

  • Granular rights management, by group or user

Is this different than your suggestion of:

Role Based configuration of client software - meaning that a given user because he is a member of a given role will have certain settings applied when he logs in to the client from any computer.

Avatar
Mike Dotson
•Aug 25, 2017
Formerly of Seneca • IPVMU Certified

Easy to use Health Monitoring such as:

  • Log files with meaningful messages about devices or storage
    • GUI access to this information is bonus
  • Per device active stream info and storage used
  • Overall Storage used by devices
  • Historical info on storage, devices

Controls/Setup:

  • Ability to set same 'common' setting on multiple selected devices simultaneously
  • Flexible ways to add devices in bulk.
    • Question... would a CSV Import/Export function add useful benefit  ?

 

 

Avatar
Brian Karas
•Aug 25, 2017
IPVM
In reply to Mike Dotson

I added:

  • Detailed logging
  • Graphical log viewer/parser
  • System statistics report (retention data, oldest video stored, retention per camera, CPU usage, memory usage, network errors)

Based on your suggestions.

We already had:

  • Global/cross-server configuration management options

Which I added previously with the same idea in mind as your "common" settings suggestion.

Avatar
Tony Darland
•Aug 25, 2017
IPVMU Certified

A Microsoft Group Policy assigned configuring them to only allow updates to be applied manually by the system admin. That way the end user/system admin can control updates.

The ability to RDP into a server to allow the local system admin to make adjustments or check settings.

Avatar
Brian Karas
•Aug 25, 2017
IPVM
In reply to Tony Darland

These are things that are more part of Windows though, correct?

Avatar
Tony Darland
•Aug 25, 2017
IPVMU Certified
In reply to Brian Karas

Yeah, your right. I was thinking more along the lines of what I as an end user like to see. It doesn't really fit the criteria your looking for.

UM
Undisclosed Manufacturer #3
•Aug 28, 2017

Cross site automatic Disaster recovery failover

(1)
DL
David Lieberman
•Aug 28, 2017
IPVMU Certified

I just spent a bunch of hours putting together my own list, which is not nearly as comprehensive as yours. How I wish I'd seen this last week!

(1)
Avatar
Lynn Harold
•Sep 05, 2017

I would like an As-Built type report that lists all devices (cameras, encoders, audio modules, door controllers, etc.), their settings, and which also includes a snapshot of each camera's FOV.  I create these manually, it serves as a Deliverable and is a good way to document the system in case a camera needs to be replaced, at least you know what it was looking at.  I know many VMSs have textual reports, and I think Milestone includes the pics.

(1)
Avatar
John Bazyk
•Sep 05, 2017
Command Corporation • IPVMU Certified

Will you be releasing a list of VMS that meet the qualifications you outline as enterprise class?

(1)
JH
John Honovich
•Sep 05, 2017
IPVM
In reply to John Bazyk

IPVM will not likely release a list of enterprise vs non-enterprise class VMSes.

What we can do is better test, analyze and document which and how many enterprise features a VMS has to help users make their own decisions about which enterprise features they care about relative to what each VMS offers.

(1)
New discussion

Ask questions and get answers to your physical security questions from IPVM team members and fellow subscribers.

Newest discussions