Axis Communications P5522 Security

AXIS P5522 PTZ Dome Network Camera

System Options

Security

User access control is enabled by default and can be conﬁgured under System Options > Security > Users. An administrator can

set up other users by giving them user names and passwords. It is also possible to allow anonymous viewer login, which means

that anybody may access the Live View page.

The user list displays authorized users and user groups (access levels):

Viewer - Access to the Live View page

Operator - Access to the Live View page and to all settings except System Options

Administrator - Unrestricted access to all settings; can add, modify and remove other users.

Under HTTP/RTSPPasswordSettings,select the type of password to allow. You may need to allow unencrypted passwords if there

are viewing clients that do not support encryption, or if you upgraded the ﬁrmware and existing clients support encryption but need

to log in again and be conﬁguredtousethisfunctionality.

Under User Settings, select the enable anonymous viewer login option to allow anonymous usersaccesstotheLiveViewpage.

Select the option to enable anonymous PTZ control login to allow anonymous users access to the PTZ controls.

Deselect the option Enable Basic Setup to hide the Basic Setup menu. Basic Setup provides quick access to setting s that should be

made before using the Axis product.

IP address ﬁltering is enabled on the System Options > Security > IP Address Filter page. Once enabled, the listed IP address are

allowed or denied access to the Axis product. Select Allow or Deny from the list and click Apply to enable IP address ﬁltering.

The administrator can add up to 256 IP address entries to the list (a single entry can contain multiple IP addresses). The users from

these IP addresses need to be speciﬁed in the user list with the appropriate access rights. See System Options > Security > Users.

The Axis product supports encrypted browsing using HTTPS. This is conﬁgured on the System Options > Security > HTTPSpage.

Aself-signed certiﬁcate can be used until a Certiﬁcate Authority-issued certiﬁcate has been obtained. Click Create self-signed

certiﬁcate to install a self-signed certiﬁcate. Although self-signed certiﬁcates are free and offer some protection, true security is only

implemented after the installation of a signed certiﬁcate issued by a Certiﬁcate Authority.

To obtain asignedcertiﬁcate from an issuing Certiﬁcate Authority, click Create Certiﬁcate Request. When the signed certiﬁcate

is returned, click Install signed certiﬁcate to import the certiﬁcate. The properties of any certiﬁcate request currently resident in

the product or installed can be viewed by clicking Properties.

To enable HTTPS in the Axis product, the HTTPS Connection Policy must be set for each user group.

For more information, see the online help .

IEEE 802.1X is a standard for port-based Network Admission Control providing secure authentication of wired and wireless network

devices. IEEE 802.1X is based on EAP (Extensible Authentication Protocol).