Axis Perimeter Defender Perimeter Defender Bridge to Genetec 5.5 and 5.6

AXISPerimeterDefenderwithGenetecVMS

UserManual

AXISPerimeterDefenderwithGenetecVMS

TableofContents

AboutVMSintegration......................................3

Installationhost................................................3

Prerequisites...................................................3

Limitations.....................................................4

Licenses...................................................5

Installation................................................8

AXISPerimeterDefenderconguration..............................8

AboutMetadataBridgeconguration...............................8

Aboutfailoveroptions...........................................8

Specialnotes...................................................9

Howtologin...................................................9

SecurityDesk..............................................18

AboutmetadatainSecurityDesk...................................18

AboutbookmarksinSecurityDesk..................................19

AboutcustomeventsinSecurityDesk...............................20

2

AXISPerimeterDefenderwithGenetecVMS

AboutVMSintegration

AboutVMSintegration

TheIntegrationPackallowsseamlessintegrationbetweenAXISPerimeterDefenderandGenetecSecurityCenter.Alarmstriggered
byAXISPerimeterDefenderareautomaticallyconvertedtoSecurityCenterCustomEvents,whichinturncantriggerawide
setofactionsandleveragethefullpoweroftheSecurityCentersystem.Simultaneously,thelivemetadatageneratedby
AXISPerimeterDefenderissenttoSecurityCenterforlivedisplayandrecording.Therefore,themetadataisalsoavailablewhen
playingtherecordedvideosequencesinplaybackmode.

Installationhost

TointegrateAXISPerimeterDefenderandSecurityCenteryouneedtwosoftwaremodulesrunningontheGenetecSecurity
Centerserver.YoucanalsouseanotherserverconnectedbyLANtoboththeAxiscamerasrunningAXISPerimeterDefenderand
theGenetecSecurityCenterserver.

•AXISPerimeterDefenderrunsasaWindows
cameras.TheSecurityCenterserverthensavesthemetadata,makingitavailableforlivestreamandplayback.

•TheMetadataBridgeCongurationToolisagraphicalinterfacewhereyoucanconguretheMetadataBridgeandenter
thecredentialsandnetworkaddressesoftheAXISPerimeterDefenderservers,ifthereareany.

®

servicefeedingtheSecurityCenterserverwiththemetadatafromthe

Prerequisites

Globalprerequisites

TosuccessfullyintegrateAXISPerimeterDefenderwithGenetecSecurityCenter,thefollowingrequirementsmustbemet:

•Aworking,correctlylicensed,andconguredGenetecSecurityCenterserver(atleast5.4SR4CU5or5.5SR5CU3).

•OneorseveralAxiscamerasrunningAXISPerimeterDefender.TheAxiscamerasmustbeconnectedtoandcongured
withinSecurityCenter.

Note

EvenifAXISPerimeterDefenderisnotcalibratedyoucanstillconguretheAXISPerimeterDefenderGenetecSecurity
CenterIntegrationPack.NotethatAXISPerimeterDefendermustbeconguredbeforeanyalarmsormetadatacanbe
senttotheSecurityCenter.

•AtleastoneSDKconnectionlicensemustbeavailablewithintheSecurityCenter.SeeLicensesonpage5.

•YoumustbeabletoinstalltheGenetecSDKcorrespondingtoyourSecurityCenterversiononthehostwhereyouplanto
installtheAXISPerimeterDefenderGenetecSecurityCenterIntegrationPack.SeeInstallationhostonpage3.

Softwareprerequisites

Theintegrationpackhasthefollowingprerequisites:

•Microsoft.net4.5.1mustbeavailableonthePCwheretheintegrationpackisinstalled.Ifitisnotavailable,itwillbe
automaticallyinstalledbytheintegrationpackinstaller.

•GenetecSecurityCenter5.4SR4CU5or5.5SR5CU3oralaterversion

•AXISPerimeterDefender1.2.1oralaterversion

•TheGenetecSecurityCenterSDKRedistributablecorrespondingtotheinstalledSecurityCenterversionmustbeinstalled
ontheserverwheretheAXISPerimeterDefenderGenetecSecurityCenterIntegrationPackisinstalled.Toobtainthe
SecurityCenterRedistributableSDK,contactyourGenetecrepresentative.

•SDKconnectionlicense

3

AXISPerimeterDefenderwithGenetecVMS

AboutVMSintegration

Limitations

Important

ThecurrentversionofSecurityCenterisabletoprocessalimitednumberofmetadataframespersecondandper
archiver(anindicativelimitis50frames/secondperarchiver,independentlyfromthenumberofconnectedcameras).
AXISPerimeterDefendersendsmetadataframesat0.1frames/secondforcameraswithnohumanactivity(noactorsmoving
intheeldofview)andat8frames/secondforcameraswithhumanactivity.Thismeansthat,dependingonthenumberof
AXISPerimeterDefendercamerasconnectedtothearchiverandtherelativeactivityintheireldofview,theSecurityCenter
limitcanbereachedornot.Ifreached,theAlarm&MetadataBridgeautomaticallylowersthemetadatafrequencywhen
sendingmetadatatoSecurityCenter,andthismightresultinjoltingmetadatarenderingintheSecurityDesk.

4

AXISPerimeterDefenderwithGenetecVMS

Licenses

Licenses

TheAXISPerimeterDefenderAlarm&MetadataBridgeconsistsoftwoapplications:

•Abackgroundwindowsservicerunningaroundtheclock,calledAXISPerimeterDefenderAlarm&MetadataBridge

•Agraphicalinterfaceusedtoconguretheservice,calledMetadataBridgeCongurationTool

Whilerunning,bothapplicationsneedavalidSDKconnectionlicensefromSecurityCentertobeabletoconnecttoit.TheSDK
licenseiscalled“GSC-1SDK-Axis-PerimeterDefend”.Tondthelicense,gotoCongTool>About>Certicates.

Thisscreenshotshowsasystemthathasteninstalledlicenses.

Installationscenario

AtypicalsystemconsistsofaSecurityCenterserverconnectedtoanumberofcameras.Ifoneormoreofthesecamerasarerunning
AXISPerimeterDefender,youmustinstallAXISPerimeterDefenderAlarm&MetadataBridgeonthatserver.

Inthisinstallationscenario,twooftheSecurityCenterserversareconnectedtooneormorecamerasthatrunAXISPerimeterDefender.
EachserverneedsoneinstanceoftheAXISPerimeterDefenderAlarm&MetadataBridge.Theserverconnectedtocamerasthatdo
notrunAXISPerimeterDefenderdoesnotneedAXISPerimeterDefenderAlarm&MetadataBridge.

5

AXISPerimeterDefenderwithGenetecVMS

Licenses

Inthisinstallationscenario,atotalamountofelevencamerasaresplitacrossthreesecuritycenterservers.

1

Securitycenterserver

2

Securitycenterserver

3

Securitycenterserver

4

Videostream

5

Metadatastream

6

Securitycentercustomeventsandmetadataoverlay

TheAXISPerimeterDefenderAlarm&MetadataBridgecanbeinstalleddirectlyontheGenetecserveroronaseparateserver.

HowmanylicensesdoIneed?

Theamountoflicensesdependsontheinstallationscenario.Therearetwooptions:

•WerecommendtoinstallatleasttwoSDKconnectionlicensesoneveryGenetecSecurityCenterservertowhich
theAXISPerimeterDefenderAlarm&MetadataBridgeconnects.Intheinstallationscenario,youwouldthenneedto
installtwolicensesontheSecurityCenterserver1andtwootherlicensesontheSecurityCenterserver2,i.e.atotal
offourlicenses.Thethirdserverdoesnotneedanylicense,asthereisnoAXISPerimeterDefenderAlarm&Metadata
Bridgeconnectingtoit.

6

AXISPerimeterDefenderwithGenetecVMS

Licenses

•Amorecost-effectiveapproachistoinstallonlyonelicenseoneverySecurityCenterservertowhichthe
AXISPerimeterDefenderAlarm&MetadataBridgeconnects.Theconstraintofthisapproachisthatyoumustmanually
stoptheAXISPerimeterDefenderAlarm&MetadataBridgeservicebeforeopeningtheMetadataBridgeConguration
Tool.Thelicensethatisusedbytheserviceisreleasedwhentheserviceisstoppedandcantemporarilybeusedbythe
MetadataBridgeCongurationTool.Thismeansyoumustremembertorestarttheserviceagainonceyou’venishedwith
thecongurationandyou’veclosedtheMetadataBridgeCongurationTool.

Howtobuylicenses

ThelicensescanbepurchasedfromGenetec.WerecommendthatyoucontactyourGenetecsalesrepresentative,mentioningthat
youwanttopurchaseSDKlicensesnamed“GSC-1SDK-Axis-PerimeterDefend”.

7

AXISPerimeterDefenderwithGenetecVMS

Installation

Installation

Theinstallationsetuple“AXISPerimeterDefenderSecurityCenterIntegrationPackX.Y.Z.W.exe”installsbothAXISPerimeterDefender
MetadataBridgeandtheMetadataBridgeCongurationTool.Theinstallerautomaticallytakescareofallthenecessarylesand
settingsonthedestinationmachine.Toexecutetheinstaller,double-clicktheleandgothroughtheinstallationscreens.The
defaultvaluesofeacheldsuitthemajorityofthestandardinstallations.

AXISPerimeterDefenderconguration

TheAlarm&MetadataBridgecanautomaticallyretrieveandcongureallAxisdevicesrunningAXISPerimeterDefenderbyscanning
thelistofAxisdevicesconnectedtotheSecurityCenter.Moreover,theAlarm&MetadataBridgeautomaticallyassociatesevery
AXISPerimeterDefenderalarmormetadatastreamtothecorrespondingGenetecVideoSource(i.e.theAxisdevicethatruns
AXISPerimeterDefender).Therefore,nomanualcongurationstepsareneededforAXISPerimeterDefender.

AboutMetadataBridgeconguration

TheMetadataBridgecanautomaticallyretrieveandcongurealltheAxiscamerasrunningAXISPerimeterDefenderbyscanning
thelistofcamerasconnectedtotheSecurityCenter.TheMetadataBridgeautomaticallyassociateseveryAXISPerimeterDefender
alarmormetadatastreamtothecorrespondingGenetecVideoSource,i.e.theAxiscamerawhereAXISPerimeterDefenderruns.
Therefore,nomanualcongurationstepsarerequiredforAXISPerimeterDefender.

AXISPerimeterDefendergeneratesmetadatainformationthathelpsthesecurityoperatorunderstandwhatishappeningintheeld
ofviewofthecamera.ThesemetadatacanbesenttoSecurityCenterfordisplayandrecordingthroughtheMetadataBridge.

ThebridgeautomaticallysubscribestothemetadatageneratedbytheAxiscamerarunningAXISPerimeterDefender.Ifthese
camerasareconnectedtoSecurityCenter,thebridgethensendsthemetadatatoSecurityCenterthatdisplaysthemontopofthe
correspondingvideostreamsandarchivesthemalongsidethevideofootagestobeabletooverlaythemagainwhenplayingback
thevideosequence.

Metadatadoesnotrequireanyspecialconguration,theMetadataBridgeautomaticallymanagesthenecessaryconguration
automatically.

Aboutfailoveroptions

WhenaSecurityCentersystemisconguredwithoneormorefailoverserversfortheDirectoryrole,alltheloggedapplications
(includingtheAlarm&MetadataBridge)automaticallyandtransparentlyredirectstothefailoverserverfortheDirectoryrolein
casethemainserverfails.However,theredirectioncantaketime,especiallyinlargesystemswherethefailoverservermusthandle
manysimultaneousloginrequests.Duringredirection,theAlarm&MetadataBridgeisdisconnectedfromSecurityCenterand
thusnotoperational.

Tospeeduptheredirection,youcanprovidetheAlarm&MetadataBridgewiththecredentialsofoneofthefailoverserversfor
theDirectoryrole.WhenevertheAlarm&MetadataBridgeisdisconnectedfromSecurityCenter,orhasproblemsloggingintothe
mainserver,itwillautomaticallyswitchtothefailoverserverfortheDirectoryroleandlogintoit.Thisoperationisusuallyquicker
thantheautomaticredirectionthatSecurityCenterprovides.

Whenthemainservercomesbackonline,anddependingonhowthefailoverpolicyiscongured,thefailoverserverforthe
Directoryrolemayautomaticallygoofine.Inthiscase,asecondredirectionfromthefailovertothemainserveroccurs,with
thesamemodalityastherstswitch.

YoucanenterthecredentialsofthefailoverserverfortheDirectoryroleintheFailovertaboftheloginwindowintheBridge
CongurationTool:

8