Axis Communications AXIS 241SA user manual Https, Stream, IP address filtering must be enabled

46AXIS 241QA/AXIS 241SA - System options

Note that users from IP addresses that will be allowed must also be registered with the appropriate access rights (User, Operator or Administrator). This is done from Setup > System Options > Security > Users.

Referrals - to prevent unauthorized sources from including the video stream from the AXIS 241QA/AXIS 241SA into external Web pages, check the Referrals box and enter the IP address or Host name of the computer that hosts the Web pages with the included video stream. Multiple IP addresses/host names can be defined and are separated by semicolons(;)

Notes:	• If the referrals feature is enabled and you wish to also allow normal access to the Live View
	page, the product's own IP address or host name must be added to the list of allowed
	referrers.
	• Restricting referrers has no effect on an MPEG-4 video stream. To restrict an MPEG-4
	stream, IP address filtering must be enabled.
	• Restricting referrers is of greatest value when not using IP address filtering. If IP address
	filtering is used, then the allowed referrers are automatically restricted to those allowed IP
	addresses.

HTTPS

For greater security, the AXIS 241QA/AXIS 241SA can be configured to use HTTPS (Hypertext Transfer Protocol over SSL (Secure Socket Layer)). That is, all communication that would otherwise go via HTTP will instead go via an encrypted HTTPS connection.

To use HTTPS for communication with the AXIS 241QA/AXIS 241SA, a certificate must be created using one of these methods:

•A self-signed certificate can be created in the video server, but this does not guar- antee the same level of security as an official certificate.

•An official certificate issued by a CA (Certificate Authority). A CA issues and manages security credentials and public keys for message encryption.

To create a self-signed certificate:

1.Click either Create self-signed certificate or Create Certificate Request and enter the required information in the provided fields

2.Click OK.

3.The Create self-signed certificate... option generates and installs a certificate which is displayed under Installed Certificate.

The Create Certificate Request option generates a PEM formatted request which you copy and send to a CA for signing. When the signed certificate is returned, click Install signed certificate... to install the certificate in the AXIS 241QA/AXIS 241SA.

4.Set the HTTPS Connection Policy for the administrator, Operator and Viewer to enable HTTPS connection (set to HTTP by default)