Remote Access (Port Forwarding, DDNS, P2P, VPN) Usage Statistics 2021
With new Dahua and Hikvision critical vulnerabilities this month, it raises the question of what integrators are doing for remote access? Port forwarding puts devices at high risk, how many are using that vs other approaches including P2P and VPNs?
In this note, we examine statistics from ~200 integrator responses and examine the trends they reveal.
Survey ********
*** ******** *** **** **** ******* was:
*** ****** ****** ** ***** ************ systems, **** ** *** ********* ***** for ********* (*.*. **** **********, ****, P2P, ***, ***.)? ***?
** ******** ********** (***********), ** *** *** ******* *** term '**** **********' ** *** ********. The ********* ** **** ****** *** in **** ******** *********** **** ********** usage *********.
*** ********
*** ******* *** *** ******* ******, though *********** *** **** **** ****** split ***** ***** ***** ******* **** past *****.
***** *****, ***'* ****** ***** ***** 2017 ** *******. *******, ***** **** forwarding ******* ************* **** **** ** 2019, ** ******** ****** **** **** to ****, **** *** ****** ***** to ***.
Port ********** ***** *******
**** **********, **** */*** ** *********** still ********* *** **** ********** ***** is * *******. **** ********* ******* are ******* ** *** ****** ******** and **** *************** *** ***** (**** the *** ***** *** ********* ****), hackers *** ****** **** *** ******** and ****** ***** *******.
VPN **** ******
*** **** ****** ****** *** ********* VPNs *** **** ** *** *** most ****** ******, **** ****** ******* and ******* ** *** *** ****** to *** ************ *******.
- "*** ****** ** ******* ******** ****** of ********. ***** **** ***** ** not **** *********, ****** ** *** clients ******* ** **** *********. ***** servers ***** **** ** ***** **-**** data ******* ***** *** ******** *** analytics."
- "*** *** **** ** *** ******** since ** **** **** * **** deal ** ****** *** ******* *******. Its **** ****** *** ****** *** to ****** ***."
- "*** ****** *** **** ******** ****** support *** *******, ** ** *** recommend *** **** ** *** ********. Letting **** ****** ******* ****** *** network ****** ******* **** ** ******."
- "** ********* **** ** ***** ********** systems ** ** *** ******** ****** remote ****** ** ** ****** ****** via ***."
- "*******, ** ********* ** *** ********* not ** **** ***** ****** ** outside ****** ******* ** ********. *** the ******* ********* ***** *** ****-******** risks *** ***** ** *** ********, except *** ***** ** *** ******* choice ** *** ******** ******* ** having ****** ******."
- "*** ***** * ******** ******** ** we **** *********** ********* **** *** want *** **** ****** *** ** remote *********"
- "***. ******* ** *** *** **** a ************* ******** ** ********* * secure ********** ****** ** ** ** independent **** *** ********'* ******** **************. If ** **** ** ****** *** configuration ** *** ********'* ******** ******, we **** **** ** ******* *****-***** service *** * *****-***** *******."
- "********* **** ** ***** ** *** customer's ** **** ****** **** ***** a **** ** *** ***** ** work. ***** ****** ****** ** ****** it's ******* **** ********* **** ***** corporate ***."
- "*** ******, ********* ******* * ********** appliance ** **** ***'* ******* **** a ****** ******** ********* ** ***** network. **** *** ********** **** ** setup *** ***** **** ****** ********** than **** ********** *******."
- "***, ********* *** **** *********** **** this ****** *** ********* ******* **** a *** ** *****"
- "*** ** *** **** ** ** can ****** ****** *** ** ************** and ******** ******* *** ********* **** good ***********."
- "*** - ** ** ******** ******** projects *** *********** ** ***"
- "*** **** ** *** ******** **** that *** ** ***** **** ******
- "********* *** *** * **** ****** process."
- "*** - ********* ** ********* *** MORE ******"
- "***. **** ******."
- "*** *** ********* ******** ********."
- "***, ** ** ****** *** ******."
- "*** *** ********. ****** ******* ****** for ****** ******"
- "***. ***** ******* ****** & ******* security."
- "*** ******* ** ******** ** **** and **********"
- "***, ** *** **** ****** ***"
Port **********/**** ********
**** ********** *** **** **** ****** most ******, **** ***** ********* ****** the ********** ** **** ********** ******** to ******* ** * *** *** reliability ******** ** ***.
- "**** **********. **** ** ******* ***** is ****** * ****** ******** *** we ****** ** ****** ******* **** in *** ******'* ******** ** **** allow ******* ******* **** ***** *********."
- "**** **** **** **********. ** **** cases ** **** ***** **** ** certain ** *********. **** ****** *** security **** *** ** *** ******* way ** **** *** ****** ****** work."
- "**** ********** - **'* **** ****** and ****. ********* ** *** ********** anything ***********"
- "**** **********. **** ***** *** ** as **** ** *** ******* *** low ******** ******* - **** * party *****. ****** ******** *** ****** clients **** *** **** **********, *** we ***** ** ** **** ** do ** **** ***** ** ****** and ******** *** ***** *** ******** polices."
- "**** ********** - ******* ** ** easy. ** ****** **** ** **** to ******** ** *********. ************* ***"
- "**** ********** ** *** ****** ************ asks *** ******** * ****** *******-*** with ***** ******, *** **** *** made ***** ** ******* ************."
- "**** ********** *** **** **** ******** focus ** **** ****** **** ********. We ******* **** ** *************, *** they ***** ****"
- "*** ****** ***** ******** *********: **** Forwarding, **** ******* **** ***'* ******* have ** ** ****"
- "**** ********** - *******, ********* *********** that ********* ****. *** ******* *** on ********* ****. ******* **** ** used **** ****** ** ** *** on *******."
- "**** ********** *** **** ********* ** the ****** *** ************** ** *** client."
- "**** *******, ***** ** **** *** best. ***** ***** ** *** ** miss."
- "**** **********. ******* ****'* *** *** I've **** ***** ** *** **** years."
- "**** **********. **'* *** *'** ****** done **."
- "**** **********. ***** ** **** ****** with ****** * *******. ********* **** but *** **** ** **** ***** for *********"
- "**** **********. **'* ****."
- "****. *** ******* ** ** *** most ******** ****** ** ****** ************."
- "**** - ****** *** ***** ****"
- "****, **** *******."
P2P *******/******** ********
*******, ***** **** *********** *** ********* both **** ********** *** **** *** did *** ***** *** *** ******* and ******** ********, ** **** **** there *** ** *** ** ****** who *** ****** ** *****.
- "**** *******, ** ****** ** *** P2P *** ***** ******* * ****** server ***** **** ** *** ***** is ** *****. ** ** **** forwarding *** ******* **** * ********* public ** *** *** ******** ******* or ******** **** ***** ** *** network ** ******* *** ********* **** the **** ** *** *******. **** for **** ** *** ********** ** the ******** **** ****** ** ******* IP."
- "*** ****** *** **** ******** ****** support *** *******, ** ** *** recommend *** **** ** *** ********. Letting **** ****** ******* ****** *** network ****** ******* **** ** ******."
P2P ****** **** ***/**** ****** **** **** **********
***** ********** *** **** ** *** easier **** ******* ** * *** but ***** **** ****** **** **** forwarding *** ****.
- "*** ********** ***** ** ** *** a ***** ******** ****** **** ** has * ***** ***** ******* **** the ****** ** *** *** ******* to ******* ** **** ********, ******, Network *****, ******* ******** ***. *****. The ****** ****** ** ***. ******* connecting ** * ******* ***** ******* are ********* *** ****** ******** ********** from *** *** ******, ***** ** the **** ******. *** ** * close ******. * ***** ***** *** DDNS/Port **********."
- "** *** ****** ***** ****** ******, we **** ********* *** * ***** enabled ***. ** **** **** ** VPN *******, *** **** ** ***** IT ********** ** ***** ** ******* it. ** *** **** ** *** want ** ** *********** *** ******** holes ** * ******** ******* *** that ***** *** ******** ************."
- "** *** * ************* ***** ****.... Digital ******** / **** *** ** help *** ****** ***** ***** *** access... ** ** *** ******* ** change/ ***** ******** ******* ********* ********* for *** ********* *******."
- "***. ** **** **** ***** * lot ** **** (******* *****) ****** so ** **** *** **** ****. It ***** * *** ******* *** patience ** ** **** ********** ** other ******* ******** ** ** *** to ***** ***** ****** *********."
- "*** ******* **** ********** ***'* ** fav ******* * **** ** **** access ** * ****** *** **** is ********* **** *********. *** ******* more ******** ** ** ***** *** more **** ** ****. *** *** is *** ******** * **** *****"
- "***** ** *** ******* **** **** to ***** **** ******* ****** ** we ****** ****. ** ***** ** from ****** ** **** **** **** forwarding *************. ** *** *** ** option ** ********* **** **** ***** a *********** ** **** *** **** Forwarding ********* ** *** ********."
- "*** *********. ***** ** ******* ***** the ******* ********, ** ** ****** need ** *** ** *** **** of **** ********** ** ***. ** any *** ************ ***** ** ** done, *** ********'* ** ********** ******* that *** **."
- "** **** *** ****. **, * guess **** * *** *******, *** transversal **********, *** ***** ***** **********. We **** *** *** **** **********. VPN ** ****** *********** *** *** technicians."
- "***. ** ******* ** ****** ********* Dahua *** *** *** **** ****** so ******. ** **** **** **** it's * ****** **** ****** **** port **********. ** **** ********* ***** security **** **** ******* *** **** isn't ********* ** *** ******** ** work ****."
- "** *** ****, **** ********** *** our ** **. ** *** ******* many *** ******** *** ****** *****, and ****** ****** ** ** ****** possible. *** ******** ****** ** ****** P2P ** ****. ** ** ******* access ** *** **********, ** **** often ****** * ****** **** *** be ********* **** ***"
- "** **** ** ** **** **** Port ********** *** **********, ** ** gave ** *** **** ******* **** the ******* *** ****** *******. ** also ********* * *** ** ******* calls ***** **** *** ******* ******** providers ** *** * *** ******, which * ***** ******* ***** *** as * **** *****. *** *** we've ******** ** ****** ***, ** it ** **** ******** **** * network **********, **** ****** ** ****** our ****** ** *** ******* *** remote *******."
- "****** ** **** **** **** ***** the ************ ******** ***** *******. ****** and ******* **** ******* ****** ***** access ** ** **** *******"
- "***. ** ** ********* *** **** method **** ***** *** **. **** access *** ** *********."
- "**** ****** ** *** ***** ***** routing **** **** *** ******** ** punch * ********** ******** **** *** client ****."
- "****** ****** ****** ******** ** *** manufacturer."
- "*** **** ** *** ****. ****** and ********** ******."
Customer *********
**** *********** ********* **** *** ****** access ****** ******** ******** ** *** customer. **** ***** **** *** ****** down ** *** *** **** ******* corporate ** ********** ********* *** *** or **** ********** *** ******* ** residential *********.
- "******* ** *** ******. ********** ***** customers ** *** ** ** * private **** *** *** ***** ******. Residential ******* **** ** **** **** forwarding ** * *********** **** *****."
- "******* ** *** ********, ******* **** forwarding ******** ** *** ** **** forwarding ** *** ********."
- "********* ** ********* *****, ******* *************, video *******,** ***** ************ *** ******** that ******* * **** ****** ** resources, *** ******** *** ** ****, in ****** ** **** **** ******** in *** ******** ** *** ****"
- "*** ** **** ********* ** ********* preference. *** ******** ** *** ** preferred, *** **** ** *** **** the *******, ** **** *** *********."
- "***. ******* ** ********, ***** ******* and ****** **********. *** ** ********* on ********* ********. **** ** *** for ***** ********** *** ***********."
- "******* ** *** ****** **** ******** client *** *** *** *** ***** security ***** *** **** ********** ** there ****** *******."
- "******* ** ****** ******* *****. **** Forwarding ** ***** ***** * **** the *** **** ** ******* ********. VPN ****** *** ** **********. **** common ** *** ***** ***** ******* that **** *** ******** ** ***** a ********** ******** **** *** ****** site."
Port ********** **** *******
******* *** ***** ** ******* ******* directly ** *** ******** (*.*., ****** critical********************************), **** ********** ***** ******* **********, leaving **** ******* ********** ** ********. While ** ****** *** ***** ** continue ** **** ** **** *****/**** add ******-********** ***** ******, **** *********** feel **** *********** ** *** ** reliable ** **** ********** *** **** VPN ***** ******* *** ******* *** their ***********. ***** ******* ***** ***** issues ** ******* ********** ********** ** their *********, **** ********** ** ****** to ****** * ***** **** ** surveillance.
**** ** ** ** ****** *********** issues, *.*.,*** '**** **' '***** *** ****** Access' - ********* ******* **** ************* ***** ** *********'* **** ************* that *** *** *********** ********* ******** to **** **********.
***** * ***** *** ** *** port ********** ** *** * ***** idea, ******** *** ** **** ***** is *** ****** * ******** **** for * *** **** / ******* an ** ********** ********.
******** ***? ** *** **** ******** what *** *** ******* ** * certain **** ******* ** *** ********? I ***** *** ****** *** **** is ****** **** ** ******* ** the ************* ** ****** ** *** IP ********* *** **** ******* ***** to ******* **** * *** ** (whether **'* * ******* ** ******* changing ** * ****** ********** **** a *** ********, ***.). **** **** make ***** ** ** * **************** your *****?
*** ***** ***** *****, *** * don't ***** **'* ** ********** ** practice. **** *****, * *** * network *** ****** ****.
* *** ****** **** *** **** forwarding ****** ** ******* ** *** source ** ** *** **********'* ** range. **** ** * *** *** pop ********** *** ****** **** **** sort ** ******** ***** ******** *******. All ** *** ***** ******** ***** the ****** ** ******* * ****** IP **** ******** ***** ******* *** a ******* ***. **** ** *** larger ************* **** **** *** * static /** ** ******** ********** ** that ***'** *** ******* ** * single ** *******. **** ** *** integrator *****'* **** *** ** **** ability ** **** * ****** *** whatever ******, ***** ********* **** ***** the ******* *** ****** ** **********. A ****** **** *** ***** ** this **** ***** ***** ********, *******, and ***** **** ** *** ****** like **** ******* *** *** ****** back ***** *** ***** *** *****.
*****, ***** * ******* *** * would **** **** **** ****** ** the *********** ** ** *** ******** network, *** ********* ** ***** **** they ***** *** ** **** ** land ***** ******* ** * ******** network, ** **** * ********* **** of ***** *** ******* ** ****'** just ******* * ****** **** ****.
************ *** ******** ** ***, *** integrator ****** *******'* **** ** ****** the **** ** ****** *** **** they're ****** **** ****** *** ****** ISPs (*** ***'* **** ***** *** /24 ** ***** **** ****) ** don't **** **** ****** ***** ***** set ** ** ***** ****.
*** *** *** ******** ** ** the ***** ** ** ********* ** a ******** ******** ** ******** ***** to ***** *** ****** ** *** road **** *** *****? ****'* *** main ********* ******* * ***'* *** feasible ** ******* **** ******** *** even ** ****** *****, ** ****** travel, ** ********* **** ****** *************, depending ** ********, ***.
*** *******, *** ***** ******** ** WiFi ** * ****** ****, ***** to ******* ** ****** *** ** now ******* ******* *** ** ******* range ** *** ****** **** ** not ********, ***. ********?
* **** **** ** **** ****, either ******** ** *** ********'* *******, on *** **********'* *******, ** **** cloud ********. **** ****** ** ****** a ******** **** **** ** * one **** ***** **** ** ***** be ** *** ** *** ********** a ********'* ***, ********** ** **** don't **** *** ** ***** ** be **** ** ****** **.
** *** ******** (********/*********/******** *****) ***'* willing ** ** ********* **** **** there's ** *** ****'** ***** ** give * **** ***** ******* ******** anyways *** * ***'* ****** *** them ** ******* ** *** **** a *** ** ***** ****** **** they **** ** *** ***** ******* on * ****.
***** ***** ********* ***** *** *********** of *********.
** *** ***** *** ******* *** hosts *** ******** *******?
*** ***** ***** *********? (*** ***** to ****)
*** ***** *** **** ******, ** it ******? ** ** ** ***** or **** ****** ** ******?
***** = ******* ****'* ********.
*** *** ****** *** *** ** a ******** ******* (** ****), *** only ** *** ****** *****'* **** who **** *** *****. *** ********, a ******* ***** *** *****'* **** if ******* ******* ***** ********* ** see *** **********. ** ** ********** facility ** *******.
***** ***** ********* ***** *** *********** of *********.
*** = *** ********** ** ********* - ***** *** ****** ****** *** all *********** ** *** ****** *** their *****, * **** ******** ***** for ** *********, **** **** ***** in **.
******, *** ***** *** ***** * P2P ******? *** *** **** *** would ** ********* ** *** ******** and ***************?
********** *****, ** **** ****** ** thru * *** ***** ******** ******, AKA *****.
*** ****** **** ** ******** **** HIKUA ********* : ** ******* !***** *** *** ****** ** ******** location **** ******* ***** ********** :
*. ****** ****** ******** *** *** video ************
*. **** ********** ****** *** ****** from ******* , ****** *** ** logged
*. ** **** **** *** **** 10, **, **+ ** ******* , you *** ****** ********** *** ** ****
*. *** *** *** *** **** server ***** *** **** ** * service ** * *** ******
*.**** ***** ****** **** , *** example ** ***** ****** ******* ****** to **** ***** ************ ****** *** time **** *** **** ********** ** not ******* (**. **-**) .
**** ***** ** **** ** ***** useful ******** , ** ******** ** receiving ** *-**** **** ***** ** restored ** *** ****** , *** best ***** ************ *** ********* ** the ******* ****** ** ******** *** procedure ** ******** *** ********* ******* .
**** ********** ****** *** ****** **** outside…
****** **** **** *** ****** ***’* initiate **** *** ****** ** ****…
***** !!!
******* ******* **** ****** **** ******** issue .
**** , ****** *** , **** and **** .
: ** ******* !
**** ** *** *** ******* ******* on ** **** ******* *** *** up **** * **** ***'* ** running ******** ** **** ****.
**** ********* ** *** ** **** Port ********** ***** ** ***. *********** that *** ** **** *** ********* from ** **** *************, ** ** more ****** *** ** **** ***** easier ** *** **, * ******** to **** **** **** ********** ******** by ***.