Step up your cybersecurity today
Partnership and products that put your mind at ease.
Secure by design
Milestone XProtect® video management software products provide the highest security protection against external and internal security threats – without compromising on flexibility or usability.
Milestone XProtect
Key security features
Security through network separation
Tiered system architecture separates the camera network and the core server/client network so there is no direct routing between the two. This increases the system’s resilience and lowers the impact a potential attack might have on the system.
HTTPS – secure camera connection
Certificate-based HTTPS communication provides secure access for Management and Smart clients users, and bidirectional communication encryption between all the system’s components, which prevents eavesdropping and tampering.
Secure video storage
XProtect Corporate can encrypt and password-protect media data. This means that recorded data is protected even if someone accesses the data files on the storage system or network share. XProtect Corporate also supports a digital signature on the recorded media data that can be used to prove that the video hasn’t been altered during storage.
Strict server-side authentication and authorization
XProtect uses consistent server-side user authentication and authorization for all clients and integration interfaces. This applies to all users and system services accessing the system via the Milestone Integration Platform SDK or Milestone Open Network Bridge. Used together with strict user rights and roles, it provides full control of access to the system.
Built on Windows security infrastructure
XProtect supports Windows Active Directory (AD) with both native Windows NTLM and Kerberos authentication may be used, as well as OpenID Connect and OAuth2 for maximum security.
Secure remote user access
XProtect uses a dedicated mobile server as a system gateway to shield and protect the core VMS servers when users connect remotely. To prevent eavesdropping and tempering, the mobile server, mobile client, and web clients’ communication supports HTTPS. This provides secure authentication and bidirectional encryption which includes user credentials, configuration, and media data.
Protection of evidence material
To protect exported forensic material, XProtect uses encryption, digital signing, and password protection of the media databases. XProtect’s Smart Client player ensures that exported evidence is original and unaltered by verifying signatures, and even preventing re-export of evidence, as a way to control the media once it leaves the VMS.
XProtect System Security
Milestone XProtect VMS products are designed to provide the highest security protection against external and internal security threats. Tiered administrator and user rights, enforced on the server side, combined with the use of standard IT security procedures, make XProtect VMS the perfect choice for organizations.
Cybersecurity guides and manuals
Get the most out of your XProtect system with these cybersecurity assets.