Bosch Divar NVR Tested vs Dahua

Published Oct 05, 2017 15:19 PM

Bosch has a partnership with Dahua.

But what type of partnership is it? How much is Bosch's own vs taken from embattled mega-OEM Dahua?

We bought and tested a 16 channel Bosch DIVAR network 2000 to see how it compares to Dahua's own models, examining:

  • Software similarities and differences
  • Physical construction
  • Internal components
  • Hard disk mounting
  • Firmware features
  • Web interface similarities
  • Bosch/Dahua software discovery and operation
  • Cyber security issues

See our full findings inside.

Still Dahua, But With Advantages

The Bosch DIVAR network series is a Dahua OEM and shares many similarities in construction, firmware, and capabilities with Dahua, with the same base software features. Those who dislike Dahua's features/capabilities are unlikely to be swayed by Bosch's changes and additions. Additionally, though Bosch performs separate cyber security testing, base firmware is still Dahua, and may contain vulnerabilities not yet discovered.

However, based on our testing, the Bosch DIVAR network series offers some key advantages compared to Dahua models they are based on:

  • More robust construction: Bosch has made several physical changes to improve thermal management and airflow, hard drive isolation, dust/debris resistance, and more. These improvements are likely to increase NVR and hard drive life compared to Dahua models.
  • Security improvements: Bosch NVRs use Digest authentication and require password creation, not found on all current and past Dahua models. Additionally, Bosch claims their firmware is independently penetration tested by a third party.

Because of these improvements, though they may look and feel like Dahua NVRs, users may find these advances worth the cost premium over similar Dahua models.

Finally, for those using third party cameras, Bosch NVR support should be verified, as Bosch integrates cameras via ONVIF Profile S only, while Dahua includes some direct drivers for common brands.

Not Typical Of OEMs

Bosch has made significant changes to the DIVAR network series which set it apart from typical Dahua and OEM models, though this is not often the case. Many manufacturers claim to have "custom firmware" and be more than simply a relabeled Dahua or Hikvision model, but our testing has historically shown otherwise:

Pricing

An 8 PoE port/16 channel Bosch DIVAR network 2000 (DDN-2516-200N08) sells for about $430 USD online, about $100 more than a roughly equivalent Dahua recorder (N42B2P), ~$330 online.

Non-PoE models are also available, with the 16 channel model selling for about $320 online (DDN-2516-200N00). 

Front Panel Comparison

The front panels of the Bosch and Dahua recorders are very different, with Bosch including front panel controls for setup and operation, as well as space for an optional DVD drive for exports. The Dahua NVR includes only status lights and a USB port for mouse or thumb drive.

Similarities To Dahua

The Bosch NVR shared several similarities and was compatible with multiple Dahua software applications, including:

  • Web interface similarities
  • Discovery via Dahua ConfigTool
  • Operation via Dahua SmartPSS

Web Interfaces Similar/Mainly Aesthetic Changes

The Bosch and Dahua recorder web interfaces are very similar, sharing many UI elements (such as buttons, fonts, etc.) and layout, shown below.

Some menu items have been moved or removed in the Bosch recorder. For example, P2P cloud connectivity found in Dahua models is replaced by Bosch DDNS in the DIVAR series, and some tasks have been moved to a "Service" menu, more typical of Bosch devices, etc.

Bosch Discovery Via Dahua ConfigTool

The Bosch DIVAR was discovered via Dahua's ConfigTool software along with other Dahua product, shown below. 

ConfigTool can also be used for basic configuration and firmware upgrades:

Bosch NVR Operation Via Dahua Smart PSS

Additionally, the recorder was viewable via Dahua's client software, SmartPSS. Live, playback, search, and event viewing all function properly using this client with the Bosch NVR.

Bosch NVR Camera Support

The Bosch NVR supports ONVIF Profile S for camera connectivity only, while Dahua lists some direct camera drivers for major brands, such as Axis, Samsung/Hanwha, Panasonic, etc. In our tests we had no issues connecting/recording ONVIF cameras, but motion detection was not supported on all models.

Firmware Differences

In addition to simply rearranging and removing some options in the web interface, Bosch has added some features not found in Dahua's models.

  • Automatic firmware restore: The Bosch NVR includes a feature which automatically detects and reinstalls firmware from flash if the recorder becomes corrupted. A second "clean" copy of firmware is loaded into flash when the recorder is updated, and simply held until corruption is detected. Note that we could not test this feature, as it is automatic and firmware did not corrupt during the time of our testing.
  • Check and install firmware updates from web: Users may check for firmware updates and install them using a pushbutton in the recorder web interface, a feature not found on Dahua models (which require users to separate download and select the proper firmware file).

Cyber Security Differences

Bosch points out several key security differences in Bosch NVRs vs. Dahua models:

  • Independent Cyber Security Testing: Bosch says firmwares for their recorders are independently tested by a third party, prior to being released to users, in addition to any tests Dahua may perform themselves.
  • No hardcoded accounts: Bosch recorders do not have 888888 or 666666 hardcoded accounts present in many past/current Dahua devices. An account named "default" is present, but is not an actual user, but instead defines behavior of what local interface actions may be taken (PTZ control, layout changes, etc.) when no user is logged into the local mouse/monitor interface.
  • Backdoor not present: Bosch NVRs tested were not vulnerable to the backdoor impacting Dahua devices, detailed in Dahua Backdoor Uncovered and impacting many devices, including other Dahua OEMs such as FLIR.
  • Digest authentication: Bosch also has implemented Digest authentication as standard, which is found in new Dahua recorder firmwares, but older models use vulnerable basic authentication, which may be easily decoded using Wireshark.

Bosch Physical Improvements

Bosch has made several notable physical improvements to the DIVAR models:

  • Improved hard drive mounting for better isolation
  • Improved thermal management
  • Sturdier construction

Improved Hard Drive Mounting

Hard drives are mounted in the Bosch NVR via a drive tray which mounts to the chassis using rubber feet for vibration and electrical isolation. By contrast, Dahua recorders mount the drive directly to the bottom of the chassis using keyhole slots (screwed from the underside). This change is likely to contribute to hard disk life, as shocks, bumps, and vibration are less likely to impact the drive, as they are absorbed by the rubber feet.

Improved Thermal Management

Bosch has made several changes to improve thermal management in their NVRs:

Larger Fans/Better Airflow

Compared to Dahua recorders, similar Bosch models use larger, higher volume fans:

Additionally, the NVR case's perforations are designed for more directed airflow over high temperature components, while Dahua recorders are fully perforated on both sides, which leads to less directional airflow across key areas.

Larger Heat Sinks

Additionally, the Bosch NVR uses a noticeably larger heat sink than the similar Dahua model, seen below:

Improved Construction

Bosch NVRs use a strengthened chassis design, with a double layer of metal on the bottom of the unit, further isolating interior components from dust and vibration. By contrast, Dahua chassis has numerous mounting holes and other perforations in the bottom, for hard drives, standoffs, PCBs, and more, shown below. Over time, these penetrations are likely to introduce more dust and debris than the side vents of the recorder.

Bosch MAC Address Used

Finally, note that the NVR has the MAC OUI 00:04:63, which is registered to Bosch Security Systems (shown below). This is fairly typical of larger OEMs, which often have their own OUI assigned to obscure the relationship to their supplier, as was done here.

Comments are shown for subscribers only. Login or Join