Security cameras protect your business, but they can also be one of its weakest spots online. The fix is simple and doesn’t cost much: give your cameras their own separate network.
At a glance
- The problem: cameras are small computers that often run old software and default passwords
- The risk: a hacked camera can be used to spy, to attack others, or to reach your other computers
- The fix: a separate network (a VLAN) for cameras, with no way into your office network
- Bonus: better video performance and fewer slowdowns for everyone else
Why cameras are a target
A network camera is a small computer with an operating system, a web page for settings and a network connection. Many are installed once and never updated. Some still use the password they shipped with.
That’s exactly how the Mirai botnet grew in 2016. It took over hundreds of thousands of cameras and other devices by trying common default passwords, then used them to knock major websites offline. The cameras’ owners usually had no idea.
What a separate camera network does
A VLAN (virtual LAN) splits one physical network into separate ones. Your cameras and recorder live on their own network, and your computers, phones and payment systems live on another. Then you set simple rules:
- Cameras can talk to the recorder (NVR), and nothing else.
- Cameras can’t reach your office computers, file storage or point-of-sale system.
- Cameras can’t reach the internet directly. The recorder handles any remote viewing.
- Only the people who should see the video can reach the recorder.
If a camera is ever hacked, the damage stays inside that small network.
Five more habits that keep cameras safe
- Change every default password before a camera goes into service, and use a unique one.
- Keep firmware updated on cameras and the recorder. Check for updates a few times a year.
- Don’t open ports on your router to view cameras from outside. Use the maker’s secure app or a VPN instead.
- Record locally on a recorder you control, so video isn’t lost if the internet goes down.
- Retire unsupported cameras. If the maker no longer releases updates, it’s time to replace them.
The performance bonus
Cameras send video around the clock. On their own network, with a PoE switch powering them, that steady traffic stays away from your staff’s computers and video calls. Everyone gets a smoother network.
Our take
Most modern business network gear, including the Ubiquiti UniFi equipment we install, makes a separate camera network a few minutes of setup. If your cameras share a network with your office computers today, it’s one of the most worthwhile fixes you can make this year.
Need a hand with this at home or at work? HD Technologies sets up, secures and supports Wi-Fi, computers, cameras and networks for homes and small businesses. Email us at [email protected].
Sources: Cloudflare: What is the Mirai botnet?.
Comments
Join the HDT community to add comments
Enter your name and email and we’ll send you a sign-in link. No password needed. You’ll also get an email when we publish a new post, and you can unsubscribe anytime.