Genetec Synergis Cloud Link - Complex, Costly and Confusing

By Brian Rhodes, Published Jun 18, 2019, 10:46am EDT

Genetec's Synergis Cloud Link is complex, costly and confusing compared to competitor access control architectures.

Inside this note, we examine Genetec's rationale for the appliance, the problems with it, how it compares to rival access control and what exceptions where it is useful.

Genetec's ******* ***** ****

****** ******* ** *** to *******'* '*******' ******** approach, **** *** ******* even ******* ******* **"**** **** ********". *******, *********** ****** into *** ******** ** not ******, ***** ********* an ********* ************ '****** controller' **** *********** **** not ******** ******* *** doors ******.

*******'* '****** ****** **********' is ***** ****, * ~$*,*** ***** appliance **** ********** **** controllers, ******** **** ****, and ********* ****** **** the ******** ********.

******** ************* ***** **** often **** ******* ** the ********* *****, **** the ********* ******* **** 3rd ***** ****** *******, support ** ***** **** the ***** ** *******'* '***-***********' ****** ******:

*** ******* ******* ***** Mercury ******** ********, **** A1001/1601 ***********, ** **** and ******** *****, ***** Link ** *** ***** integration ***** ******* ******* software *** ****** ********.

*******, ********* ****** *** Genetec ******** ***** **** when *** ******** ** integrates ** ***** **** by *** *********** **** no ******* ******. ** examine *******'* ************* *****.

Cloud ****'* ***********

** ***** ** ********** why ***** **** ** typically ****** ** ********, knowing *******'* ******* ****** for ***** **** ** helpful.

******* ********* ******* ***** Link ** ******* ******* Security's ** *** ** series *********** ** *********** the ******** */* ******, the ** ******.

**** ***** **** ******* familiar **** ***** ****'* development, ********** ********** ******** eliminating *******'* '*********** ***********'******* ~$*** - $*,*** USD** ********* ***** *** product.

*******, ******* *** ************ ******** ****************, ******* ******** *** required **** ***.

******* ***** **** ***** 'unofficially' **** ** ******* Mercury ** ******, ******* has ****** *** '****** controller' ******** *** ******* the **** ********* ** a ******* ********* ******* 'cloud ******' *********.

Relaunching *** *** ** '***** **** '

******* ***** ********** '***** Link' ** ****** ** ****, ********* ** ** enclosureless, ******* ******* ***** module. ** ****,******* ***** ***, ********* it **** ***** ****, ***** **** *** same ********* *** ******** the **** ** * stand-alone **** ******:

Genetec ******** ***** ****... *********

*** ** *** ********* aspects ** *** ******* typically ******** ***** ****, but ***** ***** ** is ******** ***** ** which ******** ******* ** 3rd ***** *********** *** used.

*** *******, ***** **** is ******** **** *********** Mercury ******** ******, **** A1001/1601 ***********, *** **** and ******** ***** ** Genetec's ******** (*** *********) products.

*******, *** *********** ** relaxed *** *** **** and ***** ***********, ***** are ******* ** ********* directly **** *******'* '****** Manager' ********* ********* **********.

********* ** **** **********'* ********************* ***. *** *****, no ********* ** ****** to ********* *** **** Mercury *** **** ********.

******* ************ ****:

*** ******* *************,we **** ********** ******** ***** **** ************ ****** *** ***-**-*** *********** 100 Series and 300 series offering support for the Mercury LP/EP and AXIS A1001 and A1601 integration without Synergis Cloud Link hardware.

*** ********* ** **** customers *** *******'* '***-**-***' appliances, *** ***** **** is *** ****** ******, so *** ** ** needed *** ****** ***********, more ****** ****** ***** 'software ****' ********?

Other ******* ** *** ******* ******* *********

***** '*******' ******* ** not ******* ** ********** ~$1,000 *** ** ******* local ******.

** **** ** ****** device, ******* ******* '****** network ********** ****' ** a ***** **** ********** (ie: ******, *******/***** ****):

*** ****** **'* '****** network **********', ******* ***** Link ** **********, *** able ** ******* *** doors ****** ** **** diagram *****:

******* *******: ******* **** the **** ******* ******** as *******, *** ******** no *****/**** ********* ** all:

Cloud **** *** **** ***** ******

*** ** *** *** benefits ** *** ********* is ***** ** ** a ***** ********** ****** point *** *****-***** ******** systems.

*** ****, ***** **** provides * ******** *******, and * ***** ********* to *********** *********** ****** and ********** ***** *******, maintenance, *** ****** ** provided ** ***** ****.

*******, ******* '*****' *********** are ********, **** ******* sharing *** *********** ******** of *** ******* ****** systems **** ****** *** on-premise, ******* ********* *******.

******, *** ******* ********* to **:

***** **** ****** * secure ******* ** *** cloud ************ ******** *** strongly ************* ************** ******* field ******* *** *** ACaaS ********.

But ***** **** **********

*** ******* ***** ******** Cloud **** *** ***-***** systems. ** ***** *** company *** *** ****** is ******** *** '*****' installs, **** ** '*****/******' access ** *** * factor? **** *********:

******** ***** **** ****** more **** * ******* to *** ***** **** added *************, **** ***********, resiliency, *** ********. *******, cloud-readiness ** **** ********** for ********* ******* *** a ******-***** ******. ******* they *** ***** ** not ** **** ***** access ******* ** *** cloud *****, ******** ***** Link ****** * **** to ***** **** ** needs ** ****** *** topology ** ****** ***** hardware **********.

Comments (62)

However, integrating access into the platform is not simple, often requiring an expensive intermediate 'master controller' that confusingly does not actually control any doors itself.

I would say this is not actually true. You can connect HID's VertX V100/V200/V300 modules directly to the Cloudlink's RS-485 ports and the Cloudlink will act as the master controller without the need to add the VertX V1000 master controller. I have many clients who have done this due to the very low cost of deployment with little to no loss of functionality. 

Agree: 12
Disagree: 1
Informative
Unhelpful
Funny

The post notes that:

However, the requirement is relaxed for HID Edge and VertX controllers, which are allowed to integrate directly into Genetec's 'Access Manager' bypassing Cloudlink altogether.

Agree
Disagree
Informative
Unhelpful
Funny

Sure, but that is not what I was referring to.  If you have the expansion modules tied to a V1000 it will indeed bypass the Cloudlink communicating directly to the access manager but you can use the Cloudlink as a master controller. 

Agree
Disagree
Informative
Unhelpful
Funny

A VertX V1000 is ~$750, a Cloud Link is ~$1,000.  Pick your poison?

Agree: 1
Disagree
Informative
Unhelpful
Funny

For sure. I had to do a comparison for a client and found that the V1000 had a few limitations mostly centered around threat levels and in the end they felt the Cloud Link was worth the extra cost.

Agree: 6
Disagree
Informative: 1
Unhelpful
Funny

Yes, this has bitten us in the butt so much that we will no longer design with V1000s. Always a Cloud Link.

Agree: 2
Disagree
Informative: 1
Unhelpful
Funny

The other benefit with a Cloud Link in that comparison is that a V1000 can only control V100/200/300 boards whereas a Cloud Link can then also support EP boards and wifi locks if the end-user uses multiple hardware types (we have several that pick and choose between the open architecture options for whatever suits their needs at each location)

Agree: 4
Disagree
Informative
Unhelpful
Funny

Other access systems (and even Genetec in some versions) support directly connecting EP/LP boards, as they do with the V1000. We make clear note of this in our post.

Agree
Disagree: 1
Informative
Unhelpful
Funny: 1

Absolutely, mine wasn't a disagreement with that post- just a comment that the Cloudlink does have an advantage over the V1000 (enough to justify the price surplus) in that a V1000 can only connect to downstream V100/200/300's whereas a Cloudlink can make the same number of V100/200/300 connections and then also serve EP/LP boards in addition to that (a little cost surplus but it does come with added flexibility in comparison with a V1000 board)

Agree: 1
Disagree
Informative: 1
Unhelpful
Funny

Which Version of Genetec supports EP/LP without Cloudlink?  

 

Agree
Disagree
Informative
Unhelpful
Funny

From the post above:

Bypassing is true for Genetec's Streamvault appliances too. For those, no Cloudlink is needed to integrate the same Mercury and Axis hardware.

Genetec acknowledges this:

For smaller installations, we have integrated Synergis Cloud Link capabilities inside our all-in-one Streamvault 100 Series and 300 series offering support for the Mercury LP/EP and AXIS A1001 and A1601 integration without Synergis Cloud Link hardware.

The confusion is when customers buy Genetec's 'all-in-one' appliances, the Cloud Link is not really needed, so why is it needed for better provisioned, more common server based 'software only' installs?

Agree
Disagree
Informative
Unhelpful
Funny

Not only the cloud link can replace the V1000, provide secure OSDP functionality, a secure communication between different networks, and make all access control decisions without needing the Access manager; it is like a mini server functionality that proves to be essential in distributed enterprise architecture where the Access Manager is hosted at the central location , and the cloud links are installed at the other remote sites locally ( LAN) connected with the mercury board and other hardware for an online functionality ( all the ACS features ) . The access manager isn’t required to be connected at all time.
I know from experience how much the end users benefit from this gateway appliance where you can leverage the device to meet your needs based on customers’ system landscape setup.

We have implemented a system takeover ( Lenel, Continuum and Honeywell) into one Synergis system with approximately 1250 readers across 70 remote sites in the US and Canada last year!

This gateway appliance proved to be essential, the end users vote for it!

Agree: 2
Disagree
Informative: 1
Unhelpful
Funny

The Cloud Link neither accepts nor controls readers or locks directly.  The VertX expansion modules are required and are additional costs beyond the Cloud Link itself.

Agree
Disagree
Informative: 1
Unhelpful: 1
Funny

Sure, just like if you used a Mercury LP2500 which does not directly control doors and requires the MR52 expansion modules and are additional costs beyond the LP2500 itself

Agree: 2
Disagree
Informative
Unhelpful
Funny

In the case of Mercury LP2500, it's even worse - dealers have to use both Cloud Link and the LP series panels.

It's worth pointing out that VertX is slated to be redesigned and reintroduced in coming months, so as not to compete with HID's Mercury Security offerings.

Agree
Disagree
Informative
Unhelpful
Funny

"Complex, Costly, and Confusing"

doesnt this fall in line with all Genetec products or naw?

Agree: 6
Disagree: 6
Informative
Unhelpful: 4
Funny: 5

The cloud link is an overly complex Wile E. Coyote access control device. I don't care about the cost, but the confusing part is wondering why Genetec fails to clean up this design.

On a positive note, you can charge your USB devices (Istar Ultra and Edge can do this as well). Perhaps Mercury or someone else can fabricate a usb port that plugs into a Mercury reader port.

Agree
Disagree
Informative
Unhelpful: 1
Funny

The LP controllers from Mercury have USB ports on them. 

 

Agree
Disagree
Informative: 1
Unhelpful
Funny

Yup, but you can’t be the agility of the platform IMO and you get what you pay for if you’re willing to put in the effort to configure it properly.

Agree
Disagree
Informative
Unhelpful
Funny

This is the exact reason I never push Genetec access control when I don't have to. I never liked the concept or the embedded XP/7 versions (bad design). It is about time someone posted a comparison. Ccure9000, Onguard for large enterprise scalability and Synergis by demand or bid only. Hirsch, Amag for DOD accounts and anything else under the sun for the rest of the small systems.

Agree
Disagree: 4
Informative: 1
Unhelpful
Funny

I wish there was a way for Genetec to see this post and understand the frustration the Cloud Link causes, but I don't think it will happen. I have brought this up many many times but get shut down every time. Back in the day it made sense because our options were the V100s and SMC. Then we were hooking MR panels to the SMC. Then Genetec said they are no longer supporting Mercury hardware. Then they came back and said they will but with the EP panel like you mentioned - to "respect the Mercury architecture".

The SCL is just running Windows 7 embedded with a very small program call Softwire running on it. It is a translator. It would make more sense to be turned into a role or run it as a service on the Access Control Manager but I don't see that happening. The software will clearly run on any Windows instance but they have gone to great lengths to prevent it from running anywhere else. This "3 tier architecture" is ridiculous. If want to design an entire site of LP/MR panels and all of the servers are VMs where the customer has clustering abilities and now I have to buy this piece of hardware and bolt it to the wall for the LP panels to talk. If the hardware dies or that building goes away we are now stuck without a connect. Yes, Genetec will sell you the Softwire program to run in your own VM environment, for $8k whereas the the SCL is $1k or the SV-100 is $1,200. It makes using Mercury hardware not cost effective for small sites, so we typically go with the SCL and V100s. However, as soon as you do that and the customer wants to leave Genetec the SCL is useless and Genetec is no longer "open platform". Stop making and selling hardware and stick to the software.

Agree: 7
Disagree: 2
Informative: 5
Unhelpful
Funny: 2

I wish there was a way for Genetec to see this post...

 

Agree
Disagree
Informative
Unhelpful
Funny: 1

Trust me, those of us in the studio audience now suffering through escalated Genetec issues will make sure they know about this article ;-)

Agree
Disagree
Informative
Unhelpful
Funny: 1

The Cloudlink is definitely an "added" device, but 1.) it's not that costly (in the grand scheme of any "Enterprise" deployment), 2.) it's not confusing, and 3.) there is a legitimate reason for it.

For those familiar with Lenel, the best comparison that I have heard is that the Cloudlink is very much like a Comm Server. While I won't get into the weeds on Comm Servers, they basically are where the bulk of the transactions are processed into the server/database itself. Adding too many controllers/readers/transactions/cameras/inputs/etc onto a single Comm Server can result in the system becoming overloaded and transactions taking longer to process, alarms not populating correctly, etc.

The Cloudlink is effectively a Comm Server, in that it is what does the initial buffering and communications of all the transactions that enter into the system. This is especially important in the Genetec environment where they accept multiple different types of access control hardware -- it allows them to be even further agnostic than most other access control systems on the market in terms of what they can support.  You mention S2, but S2 supports only S2 and Mercury hardware. You mention Feenics, but they ONLY support Mercury. There aren't many access platforms on the market that accept as many different hardware types as Genetec -- Mercury, HID, Axis, and then all of the various wireless platforms.

The other thing that I will add is that of course the number of Cloud access control deployments is low -- the product has barely been on the market a year, and it's still being developed to where it has a competitive feature-set with their on-premise solution. That said, I've deployed one cloud-based access system with Genetec, and it was by far one of the easiest deployments I've ever done. The CloudLink sync'd up with the CloudAccessManager immediately and it was online within minutes. We also Federated two Stratocast cameras in with it, so all of it is visible within SecurityDesk, including cameras linked to doors and events. With the added ability to Federate those cloud-based systems into a larger Genetec environment, it is a powerful deployment option for a large number of situations.

The one complaint I will definitely throw out there -- the name is just stupid and confusing. Putting the word "cloud" into any product should result in someone being tarred and feathered. It creates so much confusion with people who don't understand the architecture and makes them think there is more "cloud" involved in something when it's just used for a typical on-premise deployment...

Agree: 19
Disagree
Informative: 9
Unhelpful: 1
Funny

Thanks for the comment.  I will say that using Lenel to contrast simplicity for Genetec is a little like using Calculus to justify how simple Trigonometry is.  

For many clients, the customer is not after the calculus or trig versions of access. They want 2nd grade arithmetic flash card version.

You could make the argument those customers aren't 'Genetec grade' opportunities, sure.  But with adjustment to the Cloud Link vs. Synergis, more Genetec access opportunities would open.

Agree
Disagree: 2
Informative
Unhelpful
Funny

Thanks for the comment. I will say that using Lenel to contrast simplicity for Genetec is a little like using Calculus to justify how simple Trigonometry is.

Well, that's all well and good, except for the fact that nowhere in my post did I even say the word "simple". I guess to be fair I did say that their Cloud deployment was one of the "easiest" I've ever had, but that has nothing to do with "simplicity."

No, it's not simple. But the reality is that access control is not as "simple" as many would like it to be, even after all these years. It's even less simple when you factor in the difficulty of working with non-proprietary and varied hardware from varied manufacturers, which speaks to the overarching point that I was making -- the Cloudlink is part of what enables Genetec to support a wide array of hardware successfully. They build a separate software layer (which is presented in the form of a piece of hardware, as noted by UI#3 right above) to handle the communications with all of that hardware, standardize the communication, and send it back to the Access Manager role. Is it an additional item that most don't have? Yes. Is it a way to allow Genetec to do things that most can't? Yes.

In the grand scheme, one of the last things I want my access control system designed around is "simplicity." There is no point in being needlessly complex, but starting with simplicity is a great way to make sure you build a niche product.

Agree: 9
Disagree: 1
Informative: 1
Unhelpful: 1
Funny

I have to agree and disagree.  While it is annoying to have to buy a Cloudlink to put above our Mercury panels it has not really been confusing and the cost is not really a factor when we consider that we can use it to control our existing Lenel panels as well as newly installed Mercury panels.

Agree: 8
Disagree
Informative: 1
Unhelpful
Funny

The cloud link controller is a hardware layer device and is not comparable to a software application layer service such as the Lenel Communications Server(service) which can multiplex global communications across the architecture by multiple instance installments; I.E region 1,2,3.

The cloud link controller is more akin to a Netcontroller2 (ADC Continuum) when comparing a hardware role 1:1.

Other controllers to think about are the Ultra Master/Slave clustering, Ccure900 MAS/SAS architecture or SNIB2/3 network (Sorry S2 global, nope).

I cringe when I hear Genetec say federated, unified or cloud link. Additionally, which company in their right mind would scale enterprise on Vertx or Axis hardware?

Not a hater, but Genetec you if you read this. CLEAN UP YOUR DESIGN, get off of Windows.

Agree
Disagree: 5
Informative
Unhelpful
Funny

This is fundamentally false. Cloudlink is not a hardware layer at it's core. While it does introduce hardware capabilities, they are not fundamental to the purpose of it. This can actually be evidenced in a couple of ways --

1. Cloudlink does not require any physical connections with Mercury controllers. All communications with Mercury controllers are, by default, via network. You CAN make connections via RS-485, but that is not a requirement.

2. Softwire, the Cloudlink application, CAN be installed separate from the actual physical device. Genetec even has subscription pricing for it in their price book.

It is not a direct comparison to Lenel Comm Servers in terms of overall function, but it's the closest thing with an easy comparison that I know of. I'm not familiar with ADC Continuum, so you may be right that it's similar there. All I know is that it is not, at it's core, a hardware layer as you state.

Agree: 6
Disagree: 1
Informative
Unhelpful: 1
Funny

So since it is not hardware can it be virtualized? 

This is the same problem I run into with Software House Istar Ultra and IP-ACM deployments, I would rather have the Ultra panel virtualized or run as an application without the Ultra hardware and simply pay for door licenses rather than buying into the software house ultra footprints. Example 1 server to support 250 IP-ACM controllers versus scaling with a hardware footprint (rackmount / wallmount ultra or NUC ).

If Genetec can upgrade their design and virtualize the Cloudlink then I could see a valid use case for it's service and then, agree with you that Cloudlink is on some hybrid application layer. To me it looks likes hardware, mounts like hardware and line items on the BoM as hardware (Tax & Freight). However, Lenel's version of software tax is their expensive SUSPs yet the comm server service is sold without any freight. CEO's got to eat to, right?

Agree
Disagree
Informative
Unhelpful
Funny

So since it is not hardware can it be virtualized?

Directly from the Genetec price-book...yes it can.

 

Regarding the iStar Ultra scenario you mentioned, I believe you fundamentally misunderstand the purpose of some of those devices. Similar to how a Mercury MR62e requires an attached controller, the IP-ACM's are the same way. Those devices are less expensive and thus less capable of handling direct communications with the main systems themselves, even to the point that they're not intended to traverse an L3 network and the primary communications are intended to be L2. So, while I understand what you're wanting to do, there are really good reasons why you can't. And, those are fundamentally different scenarios than how a Cloudlink is used.

Agree: 1
Disagree
Informative: 2
Unhelpful: 1
Funny

Can you put this part number on a persistent license?

Agree
Disagree
Informative
Unhelpful
Funny

Not that part number as it is a subscription. You would have to contact Genetec to see if there is a perpetual license for Soft Wire.

Agree
Disagree
Informative: 1
Unhelpful
Funny

 

It is available both in a permanent license and subscription based.

Regards,

Despina Stamatelos, Product Marketing Manager for Access Control, Genetec

Agree
Disagree
Informative: 1
Unhelpful
Funny

So is this saying that I can run softwire on my own VM or physical server or is this still for SV appliances only?  Just looking to get some clarification as it could be a big deal when we are considering Genetec Access Control with Mercury panels for our global HQ and remote locations.

Agree
Disagree
Informative
Unhelpful
Funny

Only certain SV appliances only

Agree
Disagree
Informative
Unhelpful: 1
Funny

It is not for SV appliances only. As outlined above, it CAN be installed onto a server, but a license is required to do so.

I'd be curious to understand the specific reason why this could be a "big deal", though. I can imagine some scenarios where it could make an impact, but there aren't many.

Agree
Disagree
Informative
Unhelpful
Funny

Aside from potential cost savings.  Deploying a single server for our global deployment over multiple SCL devices lowers the failure points.  Throwing it on a VM further increases redundancy.  It reduces the number of cabinets we need because we are now not having to stick an SCL in the cabinet.  Additionally for small deployments 5-6 cameras 2-4 doors running softwire on the server that is deployed for directory, archiving, etc could make cost, configuration, installation, and support simpler for the integrators that are not familiar with SCL devices.

Agree
Disagree
Informative: 1
Unhelpful
Funny

I'm glad im not the only one thats confused as all hell about the purpose this device serves and when/why its actually needed

All i want to know is whats the path to functional threat levels if i have a bunch of sites with v100/etc connected to v1000 in genetec? My understanding is that threat levels wont work without these?

should i still be buying v100/v200/v1000?

should i just be buying these things?

Should i be replacing the v100/v1000 crap?

Agree
Disagree
Informative
Unhelpful
Funny

should i still be buying v100/v200/v1000?

should i just be buying these things?

Should i be replacing the v100/v1000 crap?

We've spoken with HID previously about plans for VertX. The company is planning to redesign the boards and re-engineer the firmware to be compatible with Mercury Security's firmware.

HID told us that no existing VertX customers would be left in the lurch and that existing equipment will remain supported. At some point the V1000/V100/200/300 would be replaced by native Mercury boards, but that older hardware would be supported as well.

I'll reach back out to HID on this and queue up a future post when the changes happen.

Agree
Disagree
Informative: 2
Unhelpful
Funny

You should confirm with Genetec but threat levels to one extent or another are supported on all the access control hardware from HID, Mercury, Axis, Etc. Sometimes due to hardware limitations a particular feature or subset of a feature may not be supported.

Agree: 1
Disagree
Informative
Unhelpful
Funny

I am a long time Genetec dealer.  Undisclosed #4's write up above is right on the money.  Great summary and comparison.  My biggest issue is cost, the functionality achieved when used in a standard type enterprise access control solution - it is way to expensive.  Note that the functionality of the cloudlink can be achieved in certain Genetec servers i.e. the physical cloudlink is not required.

Agree: 2
Disagree
Informative
Unhelpful
Funny

UI#7 Hopefully they can build that feature or have it available, I was not aware of it.

….yay just got 3 RFQs I got to slam out, no more playing on IPVM today.

 

:"(

Agree
Disagree
Informative
Unhelpful
Funny

This is Despina Stamatelos, Product Marketing Manager for Access Control, at Genetec.

Brian, thank you for your article and opinion on the Synergis Cloud Link appliance. I also appreciate all the comments on here which we are carefully reading and taking into consideration for future improvements.

Overall, the access control market is a traditional one and we are challenging the status quo by innovating and introducing solutions that give our customers more options to design their system in a cost-effective and resilient manner. Given this, I would like to address three major points that come across in your article and the interesting discussion it has generated:

The Cloud Link is too expensive as a “Master Controller”

Synergis Cloud Link isn’t a master controller. Synergis Cloud Link is a micro-server that reduces the total cost of ownership. For multi-site deployments, which represent the majority of our customer base, Synergis Cloud Link replaces the need for a Commercial Off-the-Shelf server at remote sites, therefore, reducing the total cost of ownership associated with purchasing and maintaining a server throughout its lifetime.  However, customers always have the option to install the software on their server.

 

Synergis Cloud Link is complex and confusing

Proprietary systems are simple and easy to understand. Offering customers a truly open architecture enables them to protect their investment for years to come. As a provider of a truly open architecture, we offer our customers choices on how to design and deploy our system using hardware from Mercury, HID, AXIS, Salto, Assa Abloy, just to name a few.  

 

Cloud Link for rare Access Control as a Service

There’s a big interest in ACaaS, particularly on the enterprise side. With Synergis Cloud Link we are future-proofing our customer’s system and investment by ensuring that they are ready to go to the cloud when they wish to do so.

Agree: 6
Disagree
Informative: 10
Unhelpful
Funny

Despina, thanks for the update.

Agree: 1
Disagree
Informative
Unhelpful
Funny

So I don't see many comments on "why" the CL is used, can you talk about some of the added benefits of the PACS solution with using the CL such as P2P Global Anti-Passback w/o host comms, support for Wireless Locks w/o additional gateways, STid Support etc.  It's pretty powerful device that allows Genetec to develop more features for the Mercury hardware for users to take advantage of.

Agree: 2
Disagree
Informative: 2
Unhelpful
Funny

...and Threat Level Lockdown without need for scripting is also supported by Cloudlink.

 

This device is useful for certain functionalities, but should be an option when the real need arises.    

 

For your average access control deployment where using an EP/LP or V1000,  and where special functionality is not required, then it should be a simple softwire service.

Agree
Disagree
Informative
Unhelpful
Funny

and Threat Level Lockdown without need for scripting is also supported by Cloudlink

Genuine question. Do you need this box to threat level lockdown without scripting? Does that mean Genetec Security Center / Synergisis cannot do this on its own? If so, why not?

Agree
Disagree
Informative: 1
Unhelpful
Funny

Threat Level management is an emergency procedure that can be activated on one area or on the entire system to deal promptly with a potentially dangerous situation. The ability to generate a lockdown procedure is one of the multiple and most common actions that a threat level can trigger.

It is a system-wide feature available as part of Security Center Synergis. As a  micro-server,  Synergis Cloud Link offers a level of reliability, such that in a case of disconnection from the main server, Threat Level management is still active and able to respond to a threat by activating lockdown for example.

Synergis Cloud Link also supports Minimum Security Clearance, that automatically reconfigures all access rules so that only authoritative credentials (i.e. first responders) would be able to access the doors. This is all possible through system configuration, and therefore no scripting is required.

Despina Stamatelos, Product Marketing Manager for Access Control, Genetec

Agree: 1
Disagree: 1
Informative: 2
Unhelpful
Funny

This statement is not accurate. Macros will ALWAYS be required for lockdown where IP readers or controller such as HID EH400 or MR51e is installed.

My understanding is that custom scripting is a service offered by Genetec through their professional services and requires updating each time a version is released.

$$$

Agree
Disagree
Informative
Unhelpful
Funny

In full disclosure, this is Thibaut Louvet, Director for the Access Control Product Group at Genetec. I’d like to bring some clarity to your comments.

The HID Vertex boards don’t support lockdown natively, we have therefore developed a macro to enable that functionality on the HID Edge and V200 boards. This macro is maintained by Genetec from version to version as an add on to our access control solution.

The MR51e being integrated through the Synergis Cloud Link as well as all other downstream devices, benefit from the above stated benefits mentioned in the thread and do not require any macros to execute a lockdown.

Agree
Disagree
Informative
Unhelpful
Funny

I think this article is interesting but lack some perspective ans the unit is made for a worldwide audience, so that it can accomodate many "local" market request. 

The Cloudlink can be a door controler in a very extreme case that is used currently in France for very high end security. 

For some history: in this country , there is a national bureau called ANSSI (roughly translated as National Agency for IT Security) that devised a rought certification in acces control. (called CSPN) 

in this method, the reader needs to be totally "dumb" and is connected throught a RS485 directly to the master controler and only the controler, not the reader can decode the cypher, then read the card, and afterward take the decision. 

the cypher is contain in 3 SAM card that can fit in the unit and those are design to be wiped out if you remove them from the unit without authorisation. 

in this configuration throught its RS485 ports, and extension ports it can connect directly to 16 doors. 

(but you still need some V100 or V200 to open the doors, V100 so you don't pay the licence fee, or V200 if you don't care about price) 

this is a little step up from the OSDPv2 protocol and only 4 supplier currently pass this national  certification step. 

The older cloudlink cannot do it by the way, only those with the red strip on it. 

some other functionnalities are not support without the cloudlink on a Security system such as turnstile mode and global anti passback for instance. 

So even if it need some improvment, I still like this module as it simplifies my work on many project, since a lot of ACS system in Europe are still very proprietary for security Reason. 

 

 

 

 

Agree
Disagree
Informative: 4
Unhelpful
Funny

That's interesting feedback, thanks.

Just to clarify, are you saying that to be ANSSI conformant, credential information cannot be decoded in the reader, but must be done in the controller?

Agree
Disagree
Informative
Unhelpful
Funny

yes, it's to mitigate the possibility of somebody removing the reader to retro engineer the secret and /or cypher in the device.

 

 

 

Agree
Disagree
Informative
Unhelpful
Funny

It appears to be an unimaginative industrial intel PC brick.  I assumed it was the Linux kludge they duct-taped on the side of their existing windows-based architecture.  They seem tone-deaf when you point out the pain this causes during use, troubleshooting, upgrading (and probably pricing, that old fashioned brick can't be cheap.)  I'm all for panel diversity but really people can't you just toss in another DLL and have your PACS talk to 12 different vendors?   The current architecture suggests a lack of (focus, sane licensing terms, product requirements, engineering maturity.)

Agree: 2
Disagree
Informative
Unhelpful
Funny

As a matter of fact, they can just "toss in another DLL", and do so on 100 and 300 series Streamvault BCD/Dell OEM appliances.

From the report:

Bypassing is true for Genetec's Streamvault appliances too. For those, no Cloudlink is needed to integrate the same Mercury and Axis hardware.

Genetec acknowledges this:

For smaller installations, we have integrated Synergis Cloud Link capabilities inside our all-in-one Streamvault 100 Series and 300 series offering support for the Mercury LP/EP and AXIS A1001 and A1601 integration without Synergis Cloud Link hardware.

Agree
Disagree
Informative
Unhelpful
Funny

Hi all,

I can't login to 2 of my Cloudlinks. Ping is ok. Can't load web link. Also can't reset it even followed the instruction. Please give me advice.

Agree
Disagree
Informative
Unhelpful
Funny

Share with us the URL you are using to login? can you post a snapshot of the webpage you are receiving when attempting to login?

Agree
Disagree
Informative
Unhelpful
Funny

Hi,

i can find out SCL via ip scanner tool. It is not accessible via web browser just like trying to login to unknown link.

Agree
Disagree
Informative
Unhelpful
Funny

May I suggest that you reach out to our support team if that hasn't been done already. You can also message me directly.

Agree
Disagree
Informative
Unhelpful
Funny

Hi,

thank you. Still didn't solve it. How to reach your support?

Agree
Disagree
Informative
Unhelpful
Funny

I don't get why this is so hard to grasp, yes we all agree that it could be done with out the "Brick" as its often reffered to but it is no differnt then having to stand up a Lenel Comm Server to handle traffic. In fact the Comm Server metodolgy can be more costly in terms of supporting, MS/VM Licensing, rack space, patcing etc. For those opperating in a large enterprise PACS deployment this is not really an issue, when I say Enterprise I mean 250K+ cardholders, 10K+ openings.

Agree
Disagree
Informative
Unhelpful
Funny
Read this IPVM report for free.

This article is part of IPVM's 7,092 reports and 940 tests and is only available to members. To get a one-time preview of our work, enter your work email to access the full article.

Already a member? Login here | Join now
Loading Related Reports