Loading...
Loading...
Selection criteria and verification checklist
First-time configuration and hardening
VLAN isolation and firewall rules
Updates, monitoring, and auditing
Before purchasing any security camera, verify these critical criteria to ensure you're not buying a device that could compromise your privacy.
Check Government Lists
Verify the camera is not on the FCC Covered Equipment List (fcc.gov/supplychain/coveredlist) or the Commerce Entity List (bis.doc.gov). Products from Hikvision, Dahua, and other banned manufacturers pose significant security risks.
When evaluating cameras, look for these security features to ensure your system can be properly hardened.
After installation, complete these configuration steps to secure your camera.
Placing cameras on an isolated network segment prevents compromised cameras from accessing your other devices or leaking data.
Internet
│
▼
[Router/Firewall]
│
├─── Main Network (192.168.1.0/24)
│ └── Office computers, family devices
│
├─── IoT/Camera Network (192.168.2.0/24) ← ISOLATED
│ └── Cameras, sensors, smart devices
│
└─── Guest Network (192.168.3.0/24) ← ISOLATED
└── Visitors, contractorsContainment
If a camera is compromised, attackers can't access your main network
Visibility
Easier to monitor camera traffic for suspicious activity
Control
Block camera internet access entirely to prevent data exfiltration
# Example firewall rules for camera VLAN (192.168.2.0/24) # Allow NVR to access cameras for recording ALLOW from 192.168.1.50 (NVR) to 192.168.2.0/24 ports 80,443,554 # Allow viewing from main network (optional) ALLOW from 192.168.1.0/24 to 192.168.2.0/24 port 554 (RTSP) # Block ALL internet access from cameras DENY from 192.168.2.0/24 to 0.0.0.0/0 # Block cameras from accessing main network DENY from 192.168.2.0/24 to 192.168.1.0/24
These rules prevent cameras from phoning home to Chinese servers while still allowing local recording and viewing.
For farm and ranch environments, cameras need to withstand harsh weather, temperature extremes, and potential tampering.
| Specification | Minimum | Recommended |
|---|---|---|
| Ingress Protection | IP66 | IP67 |
| Impact Rating | IK08 | IK10 |
| Operating Temp | -20°C to 50°C | -40°C to 60°C |
| Corrosion Resistance | Standard | NEMA 4X |
| Use Case | Resolution | IR Range |
|---|---|---|
| General Monitoring | 2MP (1080p) | 30m |
| Detail Capture | 4MP+ | 30m |
| License Plates | 2MP+ | 50m+ |
| Night Vision | Any | 50m+ adaptive |
A Network Video Recorder (NVR) or NAS-based recording system stores your footage locally, keeping it out of the cloud.
Runs on Synology NAS devices. Excellent security, regular updates, full local control. Works with ONVIF cameras.
$300-800 (NAS) + drives
Powerful software NVR for Windows PCs. One-time license, full local control. Requires dedicated PC.
$70 license + hardware
Professional VMS from Axis. Best with Axis cameras. Enterprise features with local control.
$300+ per camera license
Security is not a one-time setup. Regular maintenance keeps your camera system secure against new vulnerabilities.
Get PDF versions of these checklists to use during installation and for ongoing maintenance schedules.