How to Integrate client software with Milestone using Protocol Integration method over TCP way securely?

MIP
, , , ,
1

Currently In TCP way, Milestone Professional is connect by cleints using HTTP Connection and TCP connection.

like,

HTTP connection is used for,

#[configuration](javascript:void(0); “configuration”) - SystemInfo.xml (How to enable HTTPS in Milestone Professional ?

TCP connection is used for,

#[authentication](javascript:void(0); “authentication”)

#[#Requests](javascript:void(0); “#Requests”) and Responses (Cameras and Microphones)

Image server is running on port 80, Recording Server on port 1237

  • How to enable secure channel between XProtect Professional VMS server and clients?
  • How to stream video over secure channel?
2

The XProtect Professional VMS authenticates AD users with NTLM to hide username/password.

To protect your basic user login, you should use XProtect Professional plus that will use SSL for login.

3

@Anders B. Christensen (Milestone Systems)​ Can’t we configure SSL for XProtect Professional Sever?

  1. Image server service to run on secure port 443 (default 80). To get System info, 3rd party application can make HTTP GET request http://xprotectserver.company.com:port/systeminfo.xml. I am referring to MIP SDK documenation Home > Protocol Integration > Protocols > ImageServer > ImageServer - Getting Configuration (SystemInfo.XML). So that, XProtect Professional Sever and 3rd party application communication is secure. 3rd party application also make TCP/IP request for live images as mentioned in MIP SDK documenation Home > Protocol Integration > Protocols > ImageServer > ImageServer - Requests and Responses
  2. Recording server service to run secure port (default 1237). I am referring to MIP SDK documenation Home > Protocol Integration > Protocol > Central Protocol. Where**,** 3rd party application will make TCP/IP session to get alarms.

All this communication between 3rd party application and XProtect Professional Sever I want it be secure.

Please help.

4

Sorry, but you cannot configure XProtect Professional to use SSL on port 80 (or 443) or port 1237.

You could make a local service that bridges between these services in uncrypted manor, and expose them as an external encrypted service. Just like the Mobile Server is doing.