Step up your cybersecurity today

Partnership and products that put your mind at ease.

Secure by design

Milestone XProtect® video management software products provide the highest security protection against external and internal security threats – without compromising on flexibility or usability.

Milestone XProtect

Key security features

Security through network separation

Tiered system architecture separates the camera network and the core server/client network so there is no direct routing between the two. This increases the system’s resilience and lowers the impact a potential attack might have on the system.

HTTPS – secure camera connection

Certificate-based HTTPS communication provides secure access for Management and Smart clients users, and bidirectional communication encryption between all the system’s components, which prevents eavesdropping and tampering.

Secure video storage

XProtect Corporate can encrypt and password-protect media data. This means that recorded data is protected even if someone accesses the data files on the storage system or network share. XProtect Corporate also supports a digital signature on the recorded media data that can be used to prove that the video hasn’t been altered during storage.

Strict server-side authentication and authorization

XProtect uses consistent server-side user authentication and authorization for all clients and integration interfaces. This applies to all users and system services accessing the system via the Milestone Integration Platform SDK or Milestone Open Network Bridge. Used together with strict user rights and roles, it provides full control of access to the system.

Built on Windows security infrastructure

XProtect supports Windows Active Directory (AD) with both native Windows NTLM and Kerberos authentication may be used, as well as OpenID Connect and OAuth2 for maximum security.

Secure remote user access

XProtect uses a dedicated mobile server as a system gateway to shield and protect the core VMS servers when users connect remotely. To prevent eavesdropping and tempering, the mobile server, mobile client, and web clients’ communication supports HTTPS. This provides secure authentication and bidirectional encryption which includes user credentials, configuration, and media data.

Protection of evidence material

To protect exported forensic material, XProtect uses encryption, digital signing, and password protection of the media databases. XProtect’s Smart Client player ensures that exported evidence is original and unaltered by verifying signatures, and even preventing re-export of evidence, as a way to control the media once it leaves the VMS.

XProtect System Security

Milestone XProtect VMS products are designed to provide the highest security protection against external and internal security threats. Tiered administrator and user rights, enforced on the server side, combined with the use of standard IT security procedures, make XProtect VMS the perfect choice for organizations.

You will be logged out in
5 minutes and 0 seconds
For your security, sessions automatically end after 15 minutes of inactivity unless you choose to stay logged in.