Subscriber Discussion

Is It Not Possible To Configure An Axis Camera With IE Anymore?

UI
Undisclosed Integrator #1
•Apr 16, 2019

Hi.

I had to change the password on an axis camera with the latest firmware, v9 something, and had only the security restricted internet explorer on a windows server available. I was expecting it to deny me the live view etc, but that I would be able to get into the menu system and change the password anyway. In stead, all I got was a page telling me to use firefox, chrome, safari or edge. After trying a couple of things, wasting time, I had to climb up to the camera with my laptop to get between the switch and the camera with a poe pass trough adapter. Btw I was not allowed to install anything on the server, and the network switches did not allow me into the network with my laptop. 

This is rather annoying, and wasted a lot of my time. It is understandable that there is no point in continuing to support IE for live video and configuring motion detection and stuff like that. But why is there absolutely no way to do the simple stuff, like configuring network settings, time or passwords with an unsupported web browser? A simple, static html menu system and form is not hard to do. They used to have one.

If someone know of a hack to bypass the stupid web browser check, or have some other way of changing the simple settings on an axis camera, using only the stuff that comes with a restricted windows server install, please tell me. I am bound to end up in the same situation at some point, and would love to come prepared.

(1)
Avatar
Ethan Ace
•Apr 16, 2019

For now you can append "/operator/basic.shtml?id=70" to the camera's IP address to access the legacy menu on 9.10 firmware. But they have the ominous message about it being removed at the top of the UI:

(2)
UI
Undisclosed Integrator #1
•Apr 16, 2019
In reply to Ethan Ace

Excellent:) Lets hope they forget to take it out.

Avatar
Nuno Antunes
•Apr 22, 2019
IPVMU Certified

You can also use /index.shtml

its easyer to remember :)

U
Undisclosed #2
•Apr 23, 2019

UEU#1 You case scenario makes plenty of sense. Camera manufacturers that run LinuxOS for their hardware need to allow SSH to configure basic settings such as network, dns, ntp, smtp, users. However from a windows machine you will then need to install puTTY for access. Configure via SSH is fast and secure, you will need CLI experience but it does not take long to learn. If I asked you to ping an IP address I am sure you are perfectly capable understanding the why and how of that request.

The Sysadmins of the windows servers need to know that SSH access is needed to configure devices on your network such as cameras, poe switches etc. They should not have a problem with PuTTY. If they do, then they need to install the supported browser necessary for PD configurations. I have worked with a few banks that allow chrome or firefox the only difference being the installation methods. The browser applications have to be installed offline and not live to the internet. Google this installation method.

Our network their network? This could end up a split argument so here is my take. I would like to own my own network from a secondary NIC from the VMS server(physical or VM), and from there all switching, routing is mine, corpIT has no access to the security infrastructure. Case closed, they have no access as the are not willing to manage it. CorpIT only manages that which broadcasts on their domain. Pen Testing is only as fair as the ability to manage a private network and send alerts, In the end I would say my network is more secure than CorpIT, my routing tables are simple, confined and have no outbound anomalies. Not a perfect world, but better than some scrub blue team IT guy bumping his gums.

Just my 2 cents, good luck!

(2)
UI
Undisclosed Integrator #3
•May 21, 2019

I noticed this posting my only reconmendation is to use Microsoft edge !! Which is a copy cat of chrome. IE is the new safary as in google. 

So when u have your IP discovered tru, Axis device manager go to Microsoft edge and type in your discovered IP on the browser and it will take you right in to the login screen.. you ll see all the menus listed at the botton screen.  

Avatar
Sean Nelson
•May 21, 2019
Nelly's Security

Genius Move by Axis. I was logging into one today and I saw this, and I slowly began grinning. Most Chinese cameras are IE only. Axis turns around and doesnt allow IE at all.

(1)
New discussion

Ask questions and get answers to your physical security questions from IPVM team members and fellow subscribers.

Newest discussions