Remote Network Access for Video Surveillance Guide

By IPVM Team, Published Jul 27, 2020, 12:35pm EDT (Info+)

Remotely accessing surveillance systems is key in 2022, with more and more users relying on mobile apps as their main way of operating the system. However, remote access brings unique challenges with system security, ease of access, and configuration difficulty all needing to be weighed against each other.

IPVM Image

Five Remote Access Options for Video Surveillance

In this report, we explain how the four most common remote access options for video surveillance work:

  • Port forwarding
  • Universal Plug and Play (UPnP)
  • Cloud / 'Phone Home' (e.g., Hikvision Hik-Connect, Verkada, Nest)
  • Virtual Private Networks (VPNs)

We also explain why the ancillary remote access service Dynamic DNS is used with port forwarding and VPN.

(Related: Network Addressing for Video Surveillance Guide and Converged vs. Dedicated Networks For Surveillance).

2020: Cyber Security Is Critical

Before putting any surveillance system on the internet, it is critical that users understand the risks involved. Several major vulnerabilities were reported in major manufacturers' cameras, including:

  • May 2020 - Dahua Critical Cloud Vulnerabilities - Dahua and 22 OEMs including Panasonic and Stanley had hard-coded cloud keys / passwords which were shared and could be used to ultimately gain full access to cloud connected equipment.
  • April 2020 - China Surveillance Vulnerabilities Used To Attack China - Anonymous-affiliated pro-Tibet activists Target PRC government by exploiting known vulnerabilities in equipment manufactured by Xiongmai and Dahua.
  • March 2020 - LILIN Vulnerabilities Used by DDoS Botnets - 3 Vulnerabilities: command injection vulnerabilities with NTUpdate, FTP, and NTP, hardcoded credentials, and arbitrary file reading vulnerability with LILIN DVRs.
  • February 2020 - Chinese NVR/DVR Vulnerability - Huawei (HiSilicon) backdoor uses a combination of port knocking to open enable telnet along with hardcoded root credentials.
  • February 2020 - Bosch, Multiple Self-Reported Vulnerabilities: two 10.0 critical vulnerabilities along with 8.6 and 7.7 rated vulnerabilities. The first 10.0 vulnerability affects Bosch BVMS and uses deserialization of untrusted data which attackers can use to remotely execute code. The other 10.0 vulnerability applies to their Video Streaming Gateway and is also remotely exploitable due to the VSG services missing authentication for critical functions.
  • January 2020 - Honeywell Maxpro VMS & NVR Vulnerability - Attackers are able to remotely execute code and via SQL injection vulnerability an attacker can could gain unauthenticated access to the web user interface with admin rights.

See our Directory of Video Surveillance Cybersecurity Vulnerabilities and Exploits for more information on these and other issues, including new ones as they occur.

Because of the severity of these incidents and their increasing frequency, it is critical that users understand the basics of cybersecurity for surveillance systems, and how to protect against simple attacks at the very least.

We strongly recommend reviewing Network Security for IP Video Surveillance before proceeding.

Remote ****** ******* ***

*********** ********* *** **** *** **** / **** ********** **** * ******* minority ***** ***, ** ********** ***** ****** *****:

IPVM Image

Port **********

**** ********** **** *** ******* ** address ** *** ******** ** ** camera ** *** ****** ** ******* of * ****'* ****** ** **** it *** ** ******** **********. ***** so ******** ****** ************* ******* *********** enough **** **** ********** ******* **** struggle ** ** ** *********.

** ****** * ****** ** ********, ports ** (****) *** *** (**** video *********) *** **** ***** **** and **** ***** ******. **** ******* require ********** ***** ** ** ****** for *************, *******, ** **************, ** well. *** *******, **** ***** ***** all *** ***** ********* ** * Dahua *** ** * ******** ******:

IPVM Image

**** **** ** ******** ******* *** to ** ****** *** *** ********, different ******** ***** **** ** ****** to ***** ******** *****, ** ********** the **** **** ** *** ******* results ** ******.

*** *******, ** *** **** *** to ** ****** ******** ***** ** address ***.**.***.**, *** **** *** **** 80, ******** *** **** **** ****:

  • ****: ***.**.***.**:**** ---> ***.***.*.*:**
  • ****: ***.**.***.**:**** ---> ***.***.*.*:**

Universal **** *** ****

********* **** *** **** (****)** * *** ** ********* ***** automate ****** ********* *** ************* ** a ***** *******. *** ** *** aims ** **** ** *********** ****** port ********** (*****), ******** * **** device ** ************* ****** **** ******** in * ****** ******* *** ************ from *** ****.

*** *******, *** ***** ***** ***** UPnP **** ********** ************* ********* ** three ******** ********* ** ******* (******** ports *** ******):

IPVM Image

*******, ** ********, **** ** ********** in **** *****. ** **** ******** networks, ***** *** *****, **** ********* are ****** ***, ********* ****** **** forwarding. ** ******** ***, **** ******** may *** ******** ********, *** ** added **** **** ****, *** ******** with ***** *******, ** *** ****** not ** ***** ** ***. ****** things *****, ***** *********** ** ****** available **** **** **** ******* *****, leaving *** **** ******* *** ***** of ***************. ******* ** ***** *******, manual **** ********** *** ****** **** common ** ********** ************.

Dynamic ***

*********, **** ** *** ******* ****** IP ********* ** *********** *** ***** business ******** (******* ** ********** ******), so **** ****, *** ****** ** address ******** ** **** *** ******. For *******, *** ****** ** ******* of **** ***** *** ** **.**.**.*** today *** ******** ** ***** ** 84.32.34.119. ** **** ****** ***** ****** is ********** ** ******* ** **.**.**.***, tomorrow ** ***** ****.

******* ***, ** ********* ****** ****** service, ******** **** ** ******* ** a ******* ********, *.*. *****-****.******.*** ******* of ***.***.***.***. *** **** ******* ******* the ** ******* ************* ** **** hostname ************, ** ************* ******* ******* and ******* *********** ** **** *****.

** ************, **** ** **** ******** used **** ****/**** **** **** **** port *********. **** ************* **** ***** own ******* **** ******** **** ** users *** ******** ***** ********* (****** ********* ** ****** ****), *** ****, ** *** ****, modern **** ******* * *****-** **** client, **** ** **** *** ******'* IP ******* ** ** ****. ****** may ****** ** *** **** **** when **** **** * ****** ******* as * **** ******** ****** **** may ** ********* **** ** ** address. *** ******* ***** ***** **** services *************.

**** ** ****** **** ** ******* individual ******* ** * ***, ***** the ****** ******* ** ****** *** IP ******* **** * ****** **** render ** ***********, ********* ** **** video *** ********* * **** ***** to ******. ********, ** ************ ************ environments ** ** **** ****** ** remotely ******* ** *** ***/*** *** directly ** *******.

**** ** **** **** **** *** connections *** ******** *** ************** ******* IP ******* ****** ** **** *** users, *******, *** ***** ***** *** access *** *** ****** / ************ even **** *** ** *** *******. DDNS ** **** **** **** *** to ******* * **** **** ******** address ** ****** **** ****** **** an ** *******.

Public ********** ******* **** - ****, ****, *** **** **********

***** ****, **** ***/** **** ********** exposes ***'* ******* ** *** ****** public ********, ******* **** ****** *** attempt ** ******* *** ****** ***'* device ******* (*.*., ****** ** ********). Hackers *** ****** ******** ** ******** of ******* * *** ****** *** public ********, ****** ****** ** ******** trying ** ********* ** ** ******* lists ** *********** ********** ******* (*.*.,****** **** ** ********* ****** ********** - ********* **** ********* *******). *** ***** ********** **** **** risk, ****** ********'* *** ************* ** ***** Hacked: ** ***** * **** *** toaster, *** ** *** *********** ** an ****. **** ******** ******* ** ***** surveillance, ********** ***** ********** ************ ** ****** ********** ****** ** ***** ******* ***** either **** ********* ****** *******. ** ** *** ********* ****** your ******* ******** **********.

**** *** * ****** **************** **** **** ** ***** *************** are ** *******. ** **** **** * ******** assignment ** ************* ********** ******** ******** ** **** (*** sample **********) *******.

Cloud / '***** ****'

** ********* *** ********** *** ********* for ****** ******** ** ****** **** forwarding, ****, *** ******* ***, ***** connections **** ****** **** *********. ***** connections *** * **** ** *** (sometimes ****** ***********-******** ****) ***** ******** limited ** ** **** *********** ** configure.

******* ************* ***** ***** *** ********* which ******* ******* *** **** ** the *****, **** ****** *********,********* (***** / ***-*******),*******, *** ******. ********/******** ** ****** cameras *** ********/**** ********** ******* ********* also *** **** **** ** ************, such ****** ***,******* ********,******, ******.

**** ********, ***** *** **** * growing ***** ** ***** ****** ***** access ** ***** *****, ** ***** may ** ********* ******** ** *** mobile ******* ***-****, *****************,*****, ********** *****. **** ****** ****** ****** ********** without **** **********, *** **** *** directly ******* ******* ** *** *****.

TLS *******

***** *********** *** ********* **** *** a ********* (********* ***** ********, ** ********** protocol)******, *** ** *** ***** ***** steps (***** ** *** ***** *****):

  1. ********** ****** ***** * ***** ******* to ******* * **********.
  2. ****** ***** ***** ***** **** ********* ***********.
  3. * ********* ** ********* *** * secure ****** ** *** **.
  4. **** *** *** ****** ** ** place, **** **** ******* ** ** encrypted, **** ******** *** **** ********* obscured (***** **** ** "*********** ****" in *** ******* *****).

***** ** * ********* ***** *** an **** ****** **** **** *******:

IPVM Image

****** ***** **** ** "*********** ****" above, **** *** ****** ** *** up, ******* ********* **** ** ****(*), RTSP,***, ***,***., *** **** *** ****** ******* and *********.

***** / '***** ****' *********** *** the ******* *** **** ******** ******* to ******* ****** ****** ** **** and ***** ********. *******, *** ********* or ******** *****, ** ************** *** be ********* ***** ******** ***** ******* to '*** ******' ***** *********.

Push ** **** ** *****

***** **** *** **** ********** **** been ******* *** *****, ***** *** been * **** ** **** ** cloud ******** ** *** **** *** years, ** ***** ** **** *** to *** ******** ********** *** ***** *******. ******* '*****-*****' ***** **** **** pushing **** *****, **** **************, ***** ********* ****************. ************, *** ********** **** ** Genetec *** ********* **** ******** ***** VMS, ** **** (******* ********************** *****).

**** **** **** ***** ***** ************* **** ****** ** ***** *** other **** ** *********** *** ****** tunnel, ******** ** ***** **** *** control ** ***** ** *** ************/********* providing *** *******, ** **** ** those ********* ******* ********. **** ***** that, *** *******, ***********'* ***** *******,***** *******, ********* ********, *** ***** ** *** service *** ****** ** ** ********, instead ** **** ******* ******* ******** associated **** ******** *****.

Dedicated ******* ******* ********

*** **** ****** ****** ************ *** larger ************* ** ******* ****** ******* and ***** ** * ********* ***, typically ***** ******** ********** (**** ** SonicWall ** ***** *********) ******* ** each ****. **** ********* ******* * tunnel ******* *** ******** ** *** server ********, *********** ******** * ****** video *******, ******* ***** ** ********* locations.

** ************, ********* **** *** ********* used **** **** ** ****** *****-**** installations. *** ********** **** ************ **** $300-500 *** ****, ****** ****** *** dropping, ******** ******* ******** ** $*** ** less.

Recommended - ****

** ********* ****** ******** ****** **** ***** ************ devices. ***** **** ********** (** ****, DDNs, ***.) *** ** ******* *** simpler ** *****, **** ****** **** devices ** ***** ******** *** ****** as *** *************** *** *****. ***** cloud ******** *** ***** ********, *** run *** **** ** **** ***** exploited ***/** *** ***** ******* ******** accessing ** ******* **** ******.

***** *** *** ****** *** ************** used ** ***** ************, **** ** site *** *** ****** ****** ***. A **** ** **** *** ******** one ******** ** *******, **** * main ****** *** * ********* ******. This ** ******** **** ** ******* to ******* ***/** ******* ******** ** one ******** ** *******. **** ** illustrated *****:

IPVM Image

*** ***** ****** ***** ** ****** access. **** ** **** *** * single ******, **** * ****** ** mobile ****** ** ******** ******* ** the ***** ************ *******. **** ** illustrated *****:

IPVM Image

Test **** *********

**** ***** ******** *******.

Comments (9)

Undisclosed Integrator #1

07/27/20 05:18pm

***** *** **** ***** ** **** that *** * ****** ********.

******* *** ******** ******* **** ** address ** * ******* ********, *.*. Site2-NVR3.dyndns.org ******* ** **.***.*.*.

*** **** **** **.***.*.* ** * private ** *******, *****? **** ***'* going ** **** ****** ****** ** the *********.

** ********* ****** ******** ****** **** ***** ************ devices. ***** **** ********** (** ****, DDNs, ***.) *** ** ******* *** simpler ** *****, **** ****** **** devices ** ***** ******** *** ****** as *** *************** *** *****.

**** *** *** ** *********** ** DDNS. ** *** ***'* **** * static ****** ** *******, ***'** ***** need ** *** ** **** ** order ** ******* *** ***. *********, how ***** **** *** ******** **** what ** ******* **?

*** *** ****** ******* **** ******* to **** ** ***** **** *** options *******-**********, ***, ****, *** *****, ******* of ****, ***, ****, *** *****? DDNS ****** *** ** ********** **** the ***** ************ **** ****.

* *** **** *'* *** *** first ** ***** **** **. ******* ******* **** ****.

Agree: 2
Disagree
Informative: 2
Unhelpful
Funny
Avatar

John Scanlan

IPVM | IPVMU Certified | In reply to Undisclosed Integrator #1 | 07/27/20 06:18pm

** - ******. *** ** ******* is *******, *** * **** ****** the ****** ** ******* **** **** is ** ********* ****** ****** ******* commonly **** **** **** ********** *** VPN ** ***** ******* ** ******* as **** ** ******* * **** user ******** **** ** ***** ** IP.

Agree
Disagree
Informative
Unhelpful
Funny

Cameron Stewart

In reply to Undisclosed Integrator #1 | 07/28/20 12:52am

**** **** *** ** ****** ** noted **** *** **** ***** ** a *** ********** ******* * ****** IP *******.

*** ******* ** * ******* ** have **** **** ******** **** ******* static ** *********. ******* *** ******* is ****** ** *** ***** ****** clients/cameras/entire ******* **** **** ******* ** addresses **** ** ** **** * VPN **** ** ******.

Agree
Disagree
Informative
Unhelpful
Funny
Avatar

John Scanlan

IPVM | IPVMU Certified | In reply to Cameron Stewart | 07/28/20 02:16pm

******* - ******, ****** ********* *** not ******** *** ****. * ***** IPVMs **** ***** * *********** ** both ****** *** ******* ********* ** different *********. * **** *** **** even **** ****** ********* *** ****. Using **** **** ****** ********* ****** us **** ** ***** ******* ~*.* years ***. *** ** ******* ** the ****** ******* **** ** *****, but * *** *** **** ** reconfigure ****** ******* *** ******* ******* they **** ********** **** *** ****** name ****** *** *** ** *******. DDNS ****** ***** **** ** ******** from ***** ** ***** *** *** IPs ******* *****.

Agree
Disagree
Informative: 1
Unhelpful
Funny

Tariq Saleh

07/28/20 04:21am

*********** **** **** **** ** ***** depreciated *** **

Agree
Disagree
Informative
Unhelpful
Funny

John Honovich

IPVM | In reply to Tariq Saleh | 07/30/20 01:15pm

*****, **** ********* ****** ******* *.* *** **** **** ** available ****** ******. ****** *** ******* this.

Agree
Disagree
Informative
Unhelpful
Funny

Tariq Saleh

In reply to John Honovich | 07/31/20 03:59am

*** **** *** *** **** **** not *** *** *.*

*** *** **** *** ********* *** published ** ****** ****

Agree
Disagree
Informative
Unhelpful
Funny

Undisclosed Integrator #2

07/28/20 03:24pm

* **** *** **** ** *** end ** **** *******! ***** *** to ********* ********. ****** ** **** more *****!

Agree
Disagree
Informative
Unhelpful
Funny

Jon French

IPVMU Certified | 08/09/21 02:49pm

*** *** ***** ** *** **** this *** *** ***.

Agree
Disagree
Informative
Unhelpful
Funny
Login to read this IPVM report.
Why do I need to log in?
IPVM conducts reporting, tutorials and software funded by subscriber's payments enabling us to offer the most independent, accurate and in-depth information.
Loading Related Reports