Dahua Access Control Tested

Published Oct 10, 2017 15:25 PM

*** ***** ****** * ***** ***** in ****** *******? ** ****** *****'* ASC1202B [**** ** ****** *********] ** find ***.

** ****** ***** ****** *** *** management *********** ** *** *** ** stacks ** ** *********** ** *** security *****.

**** **** ******, ** ***** ***** findings *** ****:

  • * *** ********* *** * *** weaknesses
  • *** ******* ********** ******* ** *****'* access *******
  • *****-**** ********** ******** ** *** ********
  • * ******** **** ***** ******* *** inside ** *** **********
  • * ***** *********** ********** *** *****'* ********** client *****
  • ********** ** *****'* ********** ** ****, *** *** Mercury
  • *********** ** ***** ************ ********* *** weakness
  • ********** **** ****** *********
  • ******* ************* ******

******, ** ****** *** ******** ** how **** *** ****** ********, ***** it ** ****, *** *** ** compares ** ***** ****** *******.

[****: ** **** ****** *** *** ******* Hikvision's ****** ******* ******** ** ****, expect **** ****** ***** ** *******.]

Key ****** ********* 

*** ***** ****** *****'* *** ********* could ** *********** *** ********* ********* who ********** ****** * ***** **** for ***** *********** / ********:

  • ******** ********: ******* ***** *** ******, ** ****, hangups, ** ********* ******** *** ********.  In *** ****, ***** ****** **** and **** ****** ********, **** **** multiple *********** **** *********. ***** ******** interface *********** ****** **** ** ***** to **** ******* ** *** ****** ** ******** *****/********* *********, *** hardware ********** ***** ****** **********, ****** up, ** ****** ** ******* **'* basic ****** ******* ********.
  • ******* ***** ********: ** ****** *****'* '********* ********', 'Two-Man ******', *** '***** **** ******' features, *** **** ****** ********. ***** many *****, ***** ****** ******* **** not *** *****, *** **** **** are ******** ** **** ***-**** ******** for **** ***** ****** ****** ********* could **** ***** ** ********* ****** for ****.
  • ***** ******* ********:***** ****** ******** *** ***** ** thumbnail ********** **** * ***** ****, so ** ** ******** ** ******** confirm ********** ******* *** ****** *** ones ***** ****** ****** ** * glance *** *** ************ ***********.

Biggest ******** ** ********** *****

*****'* ******* ********** ****** ** *** a ****** *****, *** * ***** pricing **********. *** ********* *************** ***** offers ** *** *****. * *** door ********** *** * ****** **** of ~$***, * ******** ** *** $500 - $*** **** ** ********** competitors. **** ***** **** ** ********* Dahua ****** ****** *** *** **** or **** ***** ***** ****** *** many ********* ****** *********.

*** *******, ***** ** ~**% **** expensive **** **** ** ***. *** example, *****'* * **** ** ********** at * ***** ** ~$*** ****** the **** ***** ** * ***** of ~$*** *** *****'* ***** ****** RFID ****** ** ~$** ****** ** HID ***** *** ~$***.

*** **** ******* ******** ******* ********* four-door ****** ****, *** *** ***** *** ********* ******** ****** ******* ****.

Key ****** **********

*******, *** **** ******* *** ********** key ********* ** ***** ******:

  • ****, *** **********, ***** ************: *** **** **** ****** ******** integration ** ***** ***** ********** **** access ******. *******, *** ******* *** take **** ** ******* ** ******* when * **** ** ******* *** sometimes '***** ***' **** ** ********* video. ***** **** ********** * ******** integration *** ********* ** **** ***** free ** ***-**** ****** *********, *** slow *********** ***** **** ****** ****** have ****** ** *** **** ***** connects.
  • ***** ****** *****, ** ***: ** ****** ** ******* *** own ***** ***********, ** **** ** sold **** *** ****. ***** ** VDC ***** ******** *** *** ********* to **** *** ********* ** **** than $**, *** **** ***** ******* furnishes ***, *** **** *** **** support ***, ***** ******** *** ** extra **** ********** **** ** ********. The **** ** *** ******* **** means **** ********** ************** ***** ** be *** ** *** ****, * costly *** ***** ********* ************* *** needed **** *** ***********.
  • ***** ******** ****: *** ********** ** **** ******* via *****'* **** ***** *** ********, and *** ********** ****** ** ********* or ******* ******* *** ***** ********. This *********** ***** **** ***** ** cameras *** ** **** *** **** of *** **** ******** ********, **** video ************.
  • ******** ** ********: ***** *** ******* **** **** switching ******* ******** **** **** **** than *** ********** ** ***** ****. Even **** *********** ***** *** *** Smart *** ******* *** ****** *** minimums ****** ** *** ******, *********** is ******** *** ***** ******** ** the **** ** **********, ******** *** monitoring ******** **** ****** ** ***** feeds *** **** **** **** ** seconds.
  • ** *********: ******* *** ******** - ** printable *******. ****** *** ******, *** they **** ** ******** ******** ** fixed **** ****** *** *** *** exportable ** *********. **** ****** *******, even **** ******** ** ***** *********** of ***** ********* ******* ***** *******.  
  • **** ******* ** ***** *******: ** ******* ******* ***** ** readers, ********* *****'* *** ******* ******, and *** *** *** ** **.** MHz ******.  *** **** ****** *** connecting **** ** ***** ***** *** basic, **************, ************ *******. **** ******* systems*** ******* ****** ** ****** ** ******** ******** of *** ****** ***, *** *****'* platform ******** **.
  • ********* ****** ********: ** *** ****, ****** *** controller *** ******** ** *** **** no ***** '**** #' ****** *** available. ** ***** ** ********* ***** set ** ***** ******** ****** ** Door * *** ***** ******* ****** to **** *, **** ***** *** error *** ******. ****** ********** ***** be ******** ****** ** *** **** of ***** ******* ******.

Compatible **** **** ***** ********

*** ******* *********** *** **** ** the ****** **** ****** ** ***** Access *********** ** **** **** **** Smart ***, ***** **** ****** ***** the ******** ****** *** ****** ******* into ******** *** ***** *** *** install *******. *** ****** ********** ***** with ***** ***, ***** ** **** only ***** **** ***** ** *******, so ******** ********* ****** ** ********* into *** ***********.

***** *** *********** ** **** *** no ********** ******** ********* ** ****** to *** ******** **** *********, *** fact ** **** ***** **** ***** hardware ** ***** ** **** **** many.

** ******** ** *** ***** ***********, Dahua ******** **** * ********, ***** Mercury ******** ***** **** **+, *** VertX **** **+, *** **** **** 8+ ********* *******.

Controlled ****** ***** *** ********** **********

*****'* **** ********** ******** ******** **** video, ******, ***** ******** ******** ********. 

*** **** ********* ******* *********** ** the ******** **** **** ****** ** the ***** ** *** ****** *********** and *** **** ** *******/***** *** app ** ***********.

*** **** *********** *** ******** *****'* ******* specs [**** ** ****** *********] ** ***** of **** *** ***** (*** **** station *** ** ** *** ** Dahua's ******* **), ** *** ******* 2GB *** ****, *** ******* ******* GBs ** **** *** *****. *******, even **** **** *** ********* ** camera *** *** ********* ***********, **** software ********* **** **** *** **** 10 ******* ** ****** ** ********. The ******* ****** ** ********* ******* is ****** ** ***, ** *** a ****-**** ****** *** *** **** be ~*,*** *****, *** **** ****** performance ** ****** ** ***** **** before *** ***.

** ***** ** ******* *******, ***** PSS ******** ***** **********, *******, ********** video/access ***** ***********, *** ****** **** 'unlock' *** '****' ******** ******* ** other ***** ****** *********.

*******, **** ******** *** *******, **** as ** ** ***** ********, *********** reports, *** ** **** ********* ** multi-location **********.

Access ********** ******** ********

** ***** ** ****** ************, *** video ***** *********** *** **** *** build ******* ** *** **********.
*** ********** ** ******** *** *** rail ** **** ********, *** ***** an ********* **** **** ***** *******, and ********* ****** ****** ** ******* if ******* ******* ** ** ********** enclosure *** ********.

Teardown ****

****** *** **********'* *******, * ******** field *********** **-**** ***** *******, **** of ******, *** ******* '**' (***** Instrument) ****-** ***** *** *******. (****** ******* ****):

No *** ********* *** *********** ***********

****** ********* **** * ***** ******* called '*********', ***** **** ** **** as *** ****** ********** **** *** include * ********* ** *****, ****** most ***** **** ***********.

*** ********* **** ** ******* ** those **** ** ***** ** *******. Once * ****** ** ********* ** is ********, *** *********** ** ** longer **** ** *********:

**** *********, ******* *** ******** **** inside ***** ***, *** ***** *** use ******* ********** ********* ** ************:

*** ******* ** ******* ** ****** Dahua's ** *******, *** ****** ***** access ********* **** *** ******* ******** sites ** ** ***** ****** *** system ****** ****** *****, ** ***** adding ******* ***** ***** *** *** controllers.*** ***** ***** ************ *** ******* in ******* ******:

Door ********** ****-**-**** ********** 

*** *** ********* ***** ******* ** controller ****** ** *** ********** ******** direct *** **** ******** ********* **** in ********** ************. ******** ** * rail ******* ***** ***** ** * large ***** *********, ** *** ********** itself ** *** ******* ****** *** has ******* ***** ***********.

**** * **** ***********, *** ********** itself ** ****** ******. *** ***** two-door *** ****-**** ****** ***** ** identical *******, *** *** ******* ********* is ****** *** ***** **** ***** than ***** ******* ***/*** **** ***********, as ***** ** **** *****:

*** ***** **** ** *** ********** will ****** ** **** ****** ** mounted ** * ******** ********* ***, and *** *** ************* **** *** likely ** ****** *** *** ******** of *********** ******** ** **** ** enclosure ***** *******.

Vague ********** **** ******

*** ********** *** **** ** ******* in ****** *******, *****'* ********** ****** ports *** *** ******* **** ******* tags. *** *******, ******* ***** ********* group ******* ** **** ****** #* is ******* **** *** ******* ********. In ********, ***** '*****-*******' ****** ********** that ********** ******* **** ****** **** color-coded ********* *****, ** **** ******* where ** **** ********* ********** ** more ****** **********.

** *** ***** *****, ******** ** label ********, **********, *** ******** ** compared ** **** ***** ***** ** **** ****** *** ****** to **** *** '**********' ****** ********** than *** ***** ****.

Dahua's **** ********** *********

******* ***** *****'* ****** ********* ** be ********** **** ***** ***** ****** platforms, ********* ******** **** ****** ****** events, ****** ****** ********, *** **** controller *** **** ********** ******** ********.** *** ****, *** ******** ********** correctly, *** *** ******* ** ******** trouble ****** **** *****.*** ***** ***** ***** *** *** basic ********* *** ******** ** ***** PSS's ********** *********:

*** ******* ** ****** *********** *** provisioning ****** ** ******* ** **** access *********, *** ****** **** ******** access *********, ******** **** ********* ** pictures *** ********:

*** ***** ***** ******** ********** *** user ******* ******** ** *****:

********** ***** ************ ********, *** ********** Useful

*** '*****' *********** ****** ***** *** is *** *********** ** ***** ** cameras ** ******** *****.  *******, *********** of *** ******* ** ****, *** the ****** ** **** ****** ** connect ***** **** ** ****** **** the ****** ***** ** *** ******** of *****.  ** *** **** **** one ********* **** ******, *********** ** bringing ** ***** ******* **** ****** 40 ******* *** ********* ***** *** with ******* **** **** * ***** window, ******* *** ******* **** ******** miss **** ****** ****** **** **** take * *** ******* ** ****** in ********.

*** ********* ***** ***** ** ******* of *** '*****' ****** ******* ***** happens ****** * ******, *** **** showing *** '********* *****' ******* **** displays ***** *********** *** ***** ****:

*** ***** ***** ***** *** **** overlay **** ******* *******:

******** *** *********** ******* ***** *** cameras ** *************** ** ** '*****', and ******* ***** **** ***** ******* up *** ***** *****, ** **** on ******** ******** ****** **** ****** door ** ******* *********** ***** ****:

*** ***** ****** ************* ** *****

** *** ***** *****, ** **** at ******** ******* ********* ***** ******* 13.56 ***, *******, *** *********** ******. We **** ****** *** ********** ****** using ******* ***********, *** ***** *** controller ******* ********* ***** **** ***** units.

*** ******* ******** **** *****'* ****** support **** ****, ***** ****** **** * ***** unencrypted ****** ** ******** ****** *************.** **** ********* ******** *** ********** of *****'* ********* ~$*** *********** ****** and ***** *********** ** *** **** other *********** *********** *****.  *** **** detailed ****** ** **** ** **** of *** ****** ** ********* ** a ******** ******.

******** *** **** *********

*** ****** **** ****** ****** *** the ******* ** ***** *** ***** or ****** ******** *******. ***** **** provisional ******** ** *****/ **** *******/ and *****, ** ***** ******** ** custom ******** *** *********.********, **** *** ***** ******** *** done, ******** **** ** ********* **** from ****** *** *********** ** *** supported, *** ******* ***** ** ********* are ******.  ** ******** **** ** *** ***** below:

***** ***** *** **** ****** ********* support ********* ** .*** ** .*** files, ** ******* *** ********* *** batch ******** ** ******** *******. ***** access **** *** ***** *** ** these.

****** ***** ************* ******** *** *********** *****

*** ****** ** *****'* *********** ** examined *** *** '****' *** ******* are ** ********, *** *** ********** they *** ********* ****** ***** ********.

** *** * **** ****, *** found *** ********** **** * ***** common ******* ****, *****, *** **** inbound *** ******** *********. *** ****** itself *** ** *********, *** ***** indexed *** ** *******, *** ****** configuration *** ********** ****** ** ********. ** *** *** **** *****'* ****** ******** ********** *** ******.

******* ****** ************* *** ********** ***** place **********, *** ******* ****** *************** with ***** **** *** ** ******* were *** ********.  ** ********, ****** sniffing ******* ******* ****** **** *** be '**** ****' *** ** ******** against ******* **** ********:

******, *** ********** **** ******* ********* and ********* ****** *******, *** ****** specific ********* ** **** ** ******** them, *** ******** ******** ** ******* or ******* ******* ****.

*** ****** ** *** ****'* ******** was *********** *** *** *** ******* formal *********** ******* ** ************* *********** of ****** ********, *** ***** *** vulnerabilities ** ***** *******, ** ********** of ******** ** ****** ****** ****** be ********. 

 

Comments (22)
RS
Robert Shih
Oct 10, 2017
Independent

Branded is totally different I bet. </sarcasm>

*Inside joke with IPVM staff*

(1)
(1)
UD
Undisclosed Distributor #1
Oct 10, 2017

Hi everyone,

in our company we have install this access control in 11 doors. 2x stand alone and 3 x 4 door controllers have been used.

All running on SmartPSS V2.01 including about 30 various dahua CVI and IP cameras (from 1Mp up to 4K resolution, including fixed, ptz and fisheye).

I forgot to mention that the company VDP is also running there.

SmartPSS is split in 3 monitors were monitor 1 display 11 of the most important cameras in extra stream, monitor 2 display access control and monitor 3 has an e-map.

All the above are on a dedicated network, not shared with the rest of the company.

As you can understand we are using our company also for live demonstration purpose.

For the total of the report i generally agree. After all as you said it is low cost and give features of much more expensive products.

But it would be a pity to dont mention that so far we have not notice any slow down performance on SmartPSS and also in case of event the camera pop up in about 2-3sec. We never experience 40sec of delay!!

Also the feedback that we are getting from local installers is very positive. Biggest installation is about 100 doors.

I have no idea how the system perform in more than this amount of doors, but for the price i guess is very good.

 

p.s. 1

You can buy Dahuas DSS platform that is open to ONVIF cameras. SmartPSS is free and is reasonable to be "locked" to Dahua.

 

(1)
Avatar
Brian Rhodes
Oct 10, 2017
IPVMU Certified

That's helpful feedback, thanks!

We tested the US version with US firmwares on all devices and with the latest version of Smart PSS (v2.01.1 07/24/2017) for US release.  Are you using the same?

 

UD
Undisclosed Distributor #1
Oct 13, 2017

Hi Brian,

we are located in Europe but all the firmwares that we use are downloaded from the official www.dahuasecurity.com website.

 

SmartPSS we use v2.01.0 21/06/2017

BS
Bob Schenck
Oct 10, 2017
IPVMU Certified

Does Dahua list the power draw for the controller?  If it is under 2A, you could use an external POE splitter.  12V POE splitters are $9 on Amazon.  This is how ZK boards use POE.  

(2)
JH
Jay Hobdy
Oct 10, 2017
IPVMU Certified

I am no computer guy but wondering if anything else was running on the test computer that may have slowed performance?

 

Also the report says only Dahua cameras can be used. Does the camera need to be connected to Smart PSS directly or will an NVR work with the camera integration? Dahua NVR's work with various cameras so unless I am missing something, saying the access control only works with Dahua cameras may be false?

 

The product could be great but a few shortcomings make me look elsewhere. We are new to access control but we installed our first takeover a few weeks ago. One key feature was the ability to import a user list. This was for a HOA with 500 homes and exporting a list from DoorKing, modifying and adding to the new system was key. Exportable reports were key to.

 

One thing I didn't see is what kind of access levels were available and how granular could you control it?

 

It seems like it could be a great entry level product but like usual Dahua falls short on some key items and will probably never address them. 

 

Avatar
Brian Rhodes
Oct 10, 2017
IPVMU Certified

Thanks for the comment.

During our test, nothing else was running on the machine, aside from the HTML5 based screen capture software.

Utilization did not exceed 10% of resources with Smart PSS exited.

With that said, Smart PSS does work with Dahua NVRs, up to '2000 channels' worth of video is the claim, but something we have not tested.  I'll clarify by changing it to 'IP Cameras' in the report.

JH
Jay Hobdy
Oct 10, 2017
IPVMU Certified

Long story short we were running SPSS with Live View and the Event window open. No problem until I pulled the event tab into its own window so I could resize live view and events and have both displayed at the same time.

 

This brought my I5 laptop to a halt and put CPU usage at 80-90%. I can not remember the exact number.

 

Point being I found it pretty irritating. You would think it would be standard for someone to run liveview and events at the same time.

 

I have a few stations elsewhere running older versions of Smart PSS that have 4 monitors, and 4 liveview windows and they run fine...

 

Maybe that is the issue with the video feed? multiple windows open? Did you check resources with SPSS running?

 

 

Avatar
Brian Rhodes
Oct 10, 2017
IPVMU Certified

You would think it would be standard for someone to run liveview and events at the same time.

I agree, and Dahua does not disclaim running the software in this way.

I did not experience this, but I only used one PSS session. Within PSS it is possible to open multiple tabs, but only one is shown.  I did use the software with 'live view' and 'access' modules loaded at the same time during the slow downs, but only one view was active in PSS.

FYI to all:

I just grabbed this from my workstation:

PSS is overreporting CPU utilization compared to Task Manager, but RAM is about equal.  I have one 3MP Dahua camera and one Dahua controller connected, Smart PSS, and one browser session open for this.

The  i7 CPU and 16 GB RAM this machine has far exceeds the i3, 2 GB RAM minimums Smart PSS needs according to the manual.  I am using Win 10, which PSS says is good to go:

If the build of this workstation contributed to poor performance, it would be unfair to criticize Dahua, but we have performed multiple tests using this machine with various platforms and not seen similar issues.

Dahua Smart PSS Minimum Requirements:

UE
Undisclosed End User #2
Oct 10, 2017

Integrated Video Verification Included, But Marginally Useful

Did you test playback to see if it was metatagged or equivalent properly? In other words, would the archived video contain the event, or did the delay cause the recorded video to be useless?

UM
Undisclosed Manufacturer #3
Oct 10, 2017

The IPVM staff who did the intro in the physical overview video sounds really depressed/exhausted to me. I even felt chest pressure after watching the video.

Am I the only one?

Avatar
Brian Rhodes
Oct 10, 2017
IPVMU Certified

That was me.  I'm not depressed or exhausted!  

JH
John Honovich
Oct 10, 2017
IPVM

#3, that's an East Coast / Oklahoma difference you are seeing. Slower pace out there.

UM
Undisclosed Manufacturer #3
Oct 10, 2017

I have no ill intentions. Maybe I was at that point and projected the feeling towards the video I am watching.

Avatar
Brian Rhodes
Oct 10, 2017
IPVMU Certified

No worries!

U
Undisclosed #4
Oct 11, 2017
IPVMU Certified

No surprises here from Dahua.

Shockingly cheap but functional hardware with some random software thrown in for good measure...

 

(1)
UM
Undisclosed Manufacturer #5
Oct 11, 2017

Don't disagree on any of the points listed. 

They have a controller available in enclosure (ASC1204C) but the cost is more than double of the DIN rail version.

(1)
UD
Undisclosed Distributor #1
Oct 13, 2017

The enclosure provide also PSU with a 12V/7A battery charger and tamper protection.

its not just a box.

(1)
Avatar
Brian Rhodes
Oct 13, 2017
IPVMU Certified

This is interesting.  The kit including the enclosure and power supply/battery charger is about twice the cost of the controller less those parts.

 

UE
Undisclosed End User #2
Oct 13, 2017

Let me rephrase my unanswered question regarding:

"Integrated Video Verification Included, But Marginally Useful

One 'tight' integration within Smart PSS is the combination of Dahua IP cameras to specific doors. However, performance of the feature is slow, and the length of time needed to connect feeds will be longer than the actual event in the majority of cases. In our test with one connected test camera, performance in bringing up video streams took around 40 seconds and sometimes timed out with nothing more than a blank window, meaning the feature will outright miss most access events that only take a few seconds to happen in realtime."

So my question regards the retained video associated with the event. Does or did it actually capture the event? I can understand the poor performance regarding live, but think that for the price, if it is able to properly record events like forced door and held open alarms, it could still be considered for certain applications or solutions.

 

Avatar
Brian Rhodes
Oct 13, 2017
IPVMU Certified

Hello, apologies for missing your initial post.

Video clips are recorded in full, so viewing them in playback shows the whole event including the portions initially missed live.

Like you note, forensic applications/research could still make use of the feature.  

(2)
UE
Undisclosed End User #2
Oct 13, 2017

Brian,

Greatly Appreciated!, sounds like something Dahua could eventually fix hopefully...