IP video surveillance on a managed network: footage that proves

Before talking about the number of cameras, define the purpose. Each one calls for a different design:

• Deter Visible devices at points of passage. A few are enough, if they are in the right place.
• Identify Face-height framing at entrances, with adequate resolution. A wide shot of an entire warehouse never recognises anyone, however many megapixels it has.
• Monitor operations Loading bays, dispatch, tills: angles that show the action, not just the space.
• Keep evidence Above all, enough days of recording and export in a usable format.

The most common waste: filling the building with wide-angle cameras and realising, on the day they are needed, that nobody is recognisable. Two cameras pointed at the doors do more than ten filming empty corridors.

Every IP camera is a computer connected to the company network. When the design ignores that, the problems last for years.

• Cable and power: cameras use the same structured cabling as the rest of the company and are powered over the cable itself (PoE). The switch must have power to spare; without it, random restarts appear that are hard to diagnose.
• Dedicated VLAN: cameras isolated from workstations and servers. Video generates heavy, constant traffic, and these devices have historically been among the least updated. On an unsegmented network, a compromised camera opens a path to everything else.

Recorders and cameras are favourite targets for those hunting easy victims on the internet. Four rules remove almost all the risk:

1. Change every factory password: cameras included, not just the recorder.
2. Keep the recorder off the internet: remote access only via VPN or the manufacturer's platform with strong authentication. Port forwarding, never.
3. Update firmware: almost nobody does, and that is where the fixes for known vulnerabilities are.
4. Individual accounts: everyone with their own access, no shared credentials, and a log of who viewed footage.

Filming people in a business context is processing personal data. Without replacing legal advice, there are minimums every company must meet:

• A visible notice Before each filmed area.
• A retention period Set and respected; keeping footage forever is not allowed.
• Prohibited areas Rest areas, changing rooms and places with an expectation of privacy are excluded.
• Controlled access to recordings With a log of who saw what.
• An entry in the record of processing activities Within the data protection documentation.

When workstations fall within the field of view, the case should be validated legally: the purpose can never be to monitor employee performance.

We design and install IP video surveillance as part of the network infrastructure: its own VLAN, correctly sized PoE, secure remote access and managed firewalls protecting the perimeter. Afterwards, the system stays under management on the same contract, with firmware and access kept under review.

More than 10 workstations · support contract · remote, on-site and telephone support. Call +351 211 459 950 * or write to sales@dataroad.pt.

*Call to a Portuguese landline.