Thoughts on securing cameras and mac on home network

jplanaux

I am a new user of SecuritySpy and really like it. I am in the process of upgrading my network at the same time. I had a flat network topology and have created a segmented network now for IOT devices, etc. I have a dedicated MacMini running SecuritySpy and cameras on a separate subnet behind a router (Ubiquiti Edge Router X).

I am using port forwarding to see the mac mini from outside of the home.

I have firewall rules to block camera connections to anything outside of their subnet.

Does anyone want to share thoughts how best to secure my computer and cameras?

BrianM

make sure to setup HTTPS for SecuritySpy and disable http (based on everything else you've done, I'd be surprised if you haven't)

Other then that, it sounds like you've done everything else you should. The main thing is not allowing direct internet access to the camera's

Ben

Agreed - you want to use HTTPS for access from outside the network.

It is useful to allow the cameras access to the Internet so that they can give them a time server keep their clocks accurate. But if you can allow them access to just one time server in your firewall rules, and nothing else, this may be a good solution. Though if you're not using the cameras' time stamp features this isn't an issue for you.

As Brian says, you definitely don't want to allow access from the Internet directly to the cameras. Some cameras will use UPnP to automatically allow access to them from the Internet - if this is the case for your camera this should certainly be turned off (either find the UPnP option in the cameras' settings and turn it off, or use your router's firewall to block these connections).