Q: Security Reminder

2024-03-08

---

#Security

ASUSTOR has recently noticed an increase in ransomware attacks.

ASUSTOR strongly recommends taking the following actions to ensure your data is secure again:

• Change your password.
• Use a strong password.
• Change default HTTP and HTTPS ports. Default ports are 8000 and 8001 respectively.
• Turn off Terminal/SSH and SFTP services and other services you do not use.
• Enable the AbuseIPDB risk detection greylist.
• Make regular 3-2-1 backups and ensure backups are up to date.

Keep your ASUSTOR NAS up to date as updates provide security fixes.

Click here to read more about how to protect your data from ransomware.

Q: Severe Vulnerability Detected - Update Surveillance Center Now

2024-02-07

---

#Security

An emergency update is being pushed for Surveillance Center in response to a severe vulnerability detected in the software that could potentially allow an attacker to gain control elevated privileges to execute code on ADM to install malware. This update fixes this underlying vulnerability. ASUSTOR strongly urges all users of Surveillance Center for ADM to install the latest version as soon as possible to protect themselves and to minimize the risk of malware infection. ASUSTOR also recommends taking additional security measures to guard against the potential harms of malware in accordance with previously announced protective measures.

ASUSTOR strongly recommends taking the following actions to ensure your data is secure:

• Change your password.
• Use a strong password.
• Change default HTTP and HTTPS ports. Default ports are 8000 and 8001 respectively.
• Turn off Terminal/SSH and SFTP services and other services you do not use.
• Make regular backups and ensure backups are up to date.
• Turn on and update snapshots if available.
• Enable the AbuseIPDB risk detection greylist.

Q: Using Firefox to connect Surveillance Center with HTTPS in Windows

2023-02-10

---

#Security

If you are using Firefox and choose to use a HTTPS connection, please follow the steps below to manually add a security exception in order to successfully connect using HTTPS.

Note: The maximum security protocol supported by Surveillance Center is TLS 1.1. To use Surveillance Center, please adjust your settings to match. TLS settings are found in ADM Settings under General.

1. Open the Firefox menu and click on [Settings].

   

2. Select [Privacy & Security] [Certificates] [View Certificates...].

   

3. The Certificate Manager window will now open. Select the [Servers] tab and click on [Add Exception…].

   

4. In the "Location" field, enter [https://127.0.0.1:7683] and then click on [Get Certificate]. After you are finished, click on [Confirm Security Exception].

   

Q: How Do I Connect an IP Camera to Surveillance Center with ONVIF?

2023-09-13

---

#Security

ONVIF Profile S and Profile T certification allows Surveillance Center to further expand compatibility for IP cameras through the ONVIF protocol. That means system integrators and home users can take advantage of boosted interoperability and a more flexible installation with standard features like device search, live viewing and recording, PTZ functionality control, in-camera motion detection and digital input, or camera video settings.

To connect an IP camera through ONVIF, please make sure the device is compliant with ONVIF Profile S or Profile T.

A list of ONVIF compliant devices can be found by clicking the link below:

ONVIF-Compliant Products

• Click Add under Camera in Settings.

• Select the option to search for ONVIF compliant cameras on your local network.

• Select a camera.

• Input the camera’s administrator username and password.
• Click Test to see if the settings are working properly.
• If a snapshot or green checkmark is appears, then it should be working properly.

If the device cannot be discovered, please go back to previous step and select the option to enter the camera information manually.

Select ONVIF as the brand and Generic as the model.

Input the following information for the rest of the fields:

• IP/Host: Camera's IP or host.
• Port: Camera's HTTP port. Usually port 80.
• Username/Password: Camera's administrator username and password.
• Click Test to see if the settings are working properly.
• If a snapshot or green checkmark is appears, then it should be working properly.

Differences between ONVIF and RTSP.

• : Supported
• : Not supported

Q: How Do I Connect an IP Camera to Surveillance Center with RTSP?

2025-01-20

---

#Security

To connect an IP camera with RTSP, the correct RTSP path of a camera must be found first. This information is often found from camera vendors. If the vendor does not provide this information, information for most cameras can be found at the Camera Connection Database.

• Click Add under Camera in Settings.

• Select the option to enter the camera information manually.

For the brand, select User-Defined and for the model, select RTP over RTSP (TCP) or RTSP and RTP over HTTP.

Input the following information for the rest of the fields:

• IP/Host: Camera's IP or host.
• Port: Camera's HTTP port. Usually port 80.
• RTSP Path: The RTSP address looks like this: rtsp://ip_address/channel1. Replace the channel with the channel of the camera in use.
• RTSP Port: The RTSP port is normally port 554. If you have selected RTSP and RTP over HTTP for the model, this field will not appear.
• Username/Password: Camera's administrator username and password.
• Click Test to see if the settings are working properly.
• If a green check mark is there, then it means it’s working properly.

You can also select Multiple RTP over RTSP (TCP) if the camera support to use multiple RTSP path.

Take TP-Link Tapo C200 as an example:

• Model: Select RTP over RTSP (TCP).
• IP/Host: TP-Link Tapo C200 IP or host.
• Port: TP-Link Tapo C200 HTTP port: 554.
• RTSP Path: The RTSP address for TP-Link Tapo C200: rtsp://ip_address/stream1. Enter "/stream1" here.
• RTSP Port: The RTSP port is normally port 554.
• Username/Password: Camera's administrator username and password.
• Click Test to see if the settings are working properly.
• If a green check mark is there, then it means TP-Link Tapo C200 is working properly.

Note: Tapo Care works best with one of the NVR or microSD card recordings, not both. At this point, the NVR recording will be disabled if Tapo Care and microSD card recording both work. To restart recording on the NVR, remove the microSD card from the camera. Please refer to TP-Link FAQ for more information.

Differences between ONVIF and RTSP.

• : Supported
• : Not supported

Q: How do I set up user privileges in Surveillance Center?

2017-11-24

---

#Security

The steps outlined below will show you how to configure user privileges in Surveillance Center.

Configuring User Privileges

1. Log in to ADM using the “admin” account and open Surveillance Center.

2. Select [Settings] -> [Privilege] to enter the privilege settings page.

3. System administrators possess the right to log into Surveillance Center. If you wish to grant

other users the access rights to access Surveillance Center, please go to [Access Control]-

> [App Privileges] to configure this.

4. Surveillance Center access rights are categorized into the “Manager” and “Viewer” roles. Users

who possess “Manager” privileges are able to access and use all functions while “Viewers” are only

able to use the Live View and Playback functions. Additionally, you can also create customized

roles to assign to users.

5. Other than the “admin” account, all other users will be set to “Viewer” by default.

Creating New Roles

Surveillance Center provides role based access control, allowing administrators to create roles for users according to their responsibilities, administrative tasks that they are able to execute, and the camera feed playback and administrative functions available to them. These roles can then be assigned to users based on their responsibilities and administrative tasks that they are able to execute, significantly increasing management convenience and flexibility.

You can configure roles with customized privileges for the live view, camera control, audio and playback of each camera using the settings below

1. Click “Edit Role” to enter the Role List page.

2. Click “+” to add a new role to the role list.

Q: Why can't my NAS enter disk hibernation after installing Surveillance Center?

2017-07-19

---

#Security

If your NAS is having problems entering disk hibernation, please check to see if disk hibernation has been properly configured. From the ADM desktop select Settings>Hardware>Energy Control>Disk Hibernation. Disk hibernation for internal and external disks can be configured to occur after a specific idle time period or can be disabled.

Furthermore, if the following services are running, they may prevent your hard disks from going into hibernation.

1. Apps: If you have installed Apps from App Central such as XBMC, Plex, UPnP Server, iTunes Server,

Dropbox, Owncloud, or Surveillance Center. These Apps might scan or sync files/content in the

background all the time or regularly, preventing disk hibernation.

2. Download Center: If Download Center is continually downloading files from internet, it will continue to

access hard disks.

3. Windows Services: If your NAS has been joined to Active Directory (AD) or the  Local Master browser

has been enabled.

4. Client PCs/Macs with mapped share folders from the NAS.

5. Utilities: ASUSTOR Control Center, Backup Plan, Download Assistant. These PC utilities may keep

checking for the existence of your NAS preventing it from entering into hibernation.

If you wish to know which process keep accessing your disks, please kindly refer the graphic below and use the diagnostic tool to check.