Firewall for HIK NVRs?

[mywiresarecrossed]

Should an NVR used a firewall or some kind of antivirus software as it's connected to the internet?

If needed, then how is the software downloaded onto the NVR if it's not connect to a laptop?

 

[Kyle]

Hi @mywiresarecrossed

You don't need to install any antivirus / firewall software on your NVR.

However, it's advisable to follow the Hikvision Network Hardening Guide which is attached to the first post here:

How-to: - IP camera hacking - how to prevent it

Hacking of IP cameras, networks, recorders etc. is a hot topic. Just a quick share of the guidance from Axis & HikVision - documents attached.

www.use-ip.co.uk

If I can find a more recent version I'll attach it here too

 

[Kyle]

There is also a more up-to-date network security guide on this page, but the whitepapers and IPC security guide are worth a read too:
Hikvision Cybersecurity Whitepapers

 

[wacko911]

It's in the guide but very important to never open the default ports used by the NVR on the router. Always customise them. E.g. instead of port 443 use 40443.

When an exploit comes out, script kiddies will scan IP blocks for known ports and check if the exploit works. They don't scan all ports on every IP and then test the exploit on each port because that would take 65535 time longer.

If it was a targeted attack then your going to get a full scan anyhow but chances of that are low.