RE: Web cam through ISA2004SP2

  • From: "Steve Moffat" <steve@xxxxxxxxxx>
  • To: "ISA Mailing List" <isalist@xxxxxxxxxxxxx>
  • Date: Sat, 18 Feb 2006 10:13:37 -0400

2 suggestions,

1 buy new cameras.

There ain't no way without making your ISA into Swiss Cheese to get them
to work.

Only other suggestion is to get a cheapo router and put them in a DMZ.

I use Trendnet Steerable camera's when doing this for cllients, they can
be published on any port you like, and work using either ActiveX or
Java.

S 

-----Original Message-----
From: Glenn [mailto:glenn.johnston@xxxxxxxxxxx] 
Sent: Saturday, February 18, 2006 8:39 AM
To: ISA Mailing List
Subject: [isalist] Web cam through ISA2004SP2

http://www.ISAserver.org

Hi,

A client has had some vandalism problems,  in recent months and has had
4, $350 web cams fitted to the out side of the building, so he can watch
from his PC at home, and hopeful ring the polic & get them there while
the painting is still ocuring.

The cameras are not Rolls Royce units, but are not entry level ones
either, to me, they seem to be of reasonable quality, although this is
my first dealing with web cams such as these, that are intended for
remote monitoring. They connect to the internal LAN, via Cat5e, and get
assigned an IP from the DHCP server. I've set the cameras MAC in the
DHCP to assign a fixed IP for the each of the 4 cameras.

These work through a remote web browser on port 80 connecting to the IP,
an applet is downloaded from the camera, and then a random TCP port is
set by the camera between 20100 and 40100, for the the applet to receive
the image from the camera.

From the internal LAN pointing at the IP's of the cameras, they work
flawlessly.

After a lot of fiddling, the publishing of the port 80 stuff through the
ISA2004SP3 & IIS on an internal server is working fine, (by using /CAM1,
/CAM2 etc & URL redirection), the applet down loads, starts, and the
image viewer opens, but when the camera flicks to the random port it all
falls apart. From whats in the manual and the web interface to the
camera, there is no way to set it to a fixed port, or even a smaller
range.

To complicate maters, One of the cameras seems to have a different
firmware version, as once this one is viewed, you need to clear the
local PC browser cache, before you can view the other 3, and there does
not seem to be away to update the firmware. Pitty this was only found
after the electrician had installed the units.

We can obviousy open all the ports in the range but would like a more
secure approach.

They don't have inbound VPN or L2TP setup, and don't want to set this
up.

Has anyone worked with these sort of cameras or have any suggestions on
how to securly publish the random port through the ISA server / IIS.

He only has a single public IP, my first thought was a router, with port
forwarding & nat'ing, but this has issues getting at the cameras as the
router needs to forward port 80 to the server for the company web site,
and the cameras won't allow changing the port they listen on.


------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
isalist@xxxxxxxxxx To unsubscribe visit
http://www.webelists.com/cgi/lyris.pl?enter=isalist
Report abuse to listadmin@xxxxxxxxxxxxx


Other related posts: