Milestone Systems
Milestone Husky M50 Advanced
Administrator's Manual
Milestone Husky M50 Advanced
Administrator's Manual
www.milestonesys.com Contents
Contents
COPYRIGHT, TRADEMARKS AND DISCLAIMER ......................... 10
BEFORE YOU START .................................................................... 11
INTRODUCTION TO THE HELP ................................................................ .............. 11
NAVIGATE THE BUILT-IN HELP SYSTEM ................................................................ 11
ABOUT VIRUS SCANNING ................................................................................... 12
ABOUT ACTIVE DIRECTORY ............................................................................... 13
MILESTONE HUSKY ASSISTANT .................................................. 14
ABOUT THE ALL-IN-ONE SETUP OPTION .............................................................. 14
ABOUT THE RECORDING SERVER OR FAILOVER RECORDING SERVER OPTION ......... 14
SET UP YOUR SYSTEM THROUGH THE MILESTONE HUSKY ASSISTANT ................... 14
SYSTEM OVERVIEW ...................................................................... 16
PRODUCT OVERVIEW ......................................................................................... 16
A DISTRIBUTED SYSTEM SETUP .......................................................................... 17
SYSTEM COMPONENTS ...................................................................................... 17
Management server............................................................................................................ 17
Failover management server ............................................................................................ 18
Recording server ................................................................................................................ 18
Failover recording server .................................................................................................. 18
Event server ........................................................................................................................ 19
Log server ........................................................................................................................... 19
SQL server .......................................................................................................................... 19
Active Directory .................................................................................................................. 19
Virtual servers .................................................................................................................... 20
Milestone Husky M50 Advanced
Administrator's Manual
www.milestonesys.com Contents
Clients ................................................................................................................................. 20
ABOUT LICENSES .............................................................................................. 23
ABOUT LOCAL IP ADDRESS RANGES .................................................................. 24
ABOUT IPV6 AND IPV4 ...................................................................................... 24
About using the system with IPv6 .................................................................................... 24
About writing IPv6 addresses ........................................................................................... 25
CONFIGURE THE SYSTEM IN THE MANAGEMENT CLIENT ....................................... 26
Change Software License Code ....................................................................................... 28
INSTALL CLIENTS .............................................................................................. 28
Install XProtect Smart Client silently ............................................................................... 28
Install Milestone Mobile server ......................................................................................... 29
DOWNLOAD MANAGER/DOWNLOAD WEB PAGE .................................................... 29
Download Manager's default configuration .................................................................... 31
Download Manager's standard installers (user) ............................................................. 32
Add/publish Download Manager installer components ................................................. 32
Hide/remove Download Manager installer components ................................................ 33
Device pack installer - must be downloaded .................................................................. 34
FIRST TIME USE ............................................................................. 35
BEST PRACTICES .............................................................................................. 35
Protect recording databases from corruption ................................................................ 35
About daylight saving time ............................................................................................... 36
About time servers ............................................................................................................. 36
MANAGEMENT CLIENT OVERVIEW ...................................................................... 37
About login authorization .................................................................................................. 37
Management Client window overview.............................................................................. 37
Panes overview .................................................................................................................. 39
Menu overview .................................................................................................................... 40
MANAGEMENT CLIENT ELEMENTS ............................................. 43
Milestone Husky M50 Advanced
Administrator's Manual
www.milestonesys.com Contents
BASICS ............................................................................................................ 43
License information ........................................................................................................... 43
Site information .................................................................................................................. 47
SERVERS AND HARDWARE ................................................................................. 48
Recording servers .............................................................................................................. 48
Hardware and remote servers ........................................................................................... 66
Remove a recording server ............................................................................................... 75
Delete all hardware on a recording server ...................................................................... 75
DEVICES .......................................................................................................... 75
Working with device groups ............................................................................................. 76
Working with devices......................................................................................................... 78
CLIENT .......................................................................................................... 123
About clients ..................................................................................................................... 123
View groups ...................................................................................................................... 123
Smart Client profiles ........................................................................................................ 124
Management Client profiles ............................................................................................ 128
Matrix ................................................................................................................................. 131
RULES AND EVENTS ........................................................................................ 133
About rules and events ................................................................................................... 133
About actions and stop actions ...................................................................................... 134
Events overview ............................................................................................................... 142
Rules .................................................................................................................................. 149
Time profiles ..................................................................................................................... 157
Notification profiles.......................................................................................................... 161
User-defined events ......................................................................................................... 165
Analytics events ............................................................................................................... 167
Generic events .................................................................................................................. 170
SECURITY ...................................................................................................... 177
Roles .................................................................................................................................. 177
Milestone Husky M50 Advanced
Administrator's Manual
www.milestonesys.com Contents
Basic users ....................................................................................................................... 210
SYSTEM DASHBOARD ...................................................................................... 210
About system dashboard ................................................................................................ 210
About system monitor ..................................................................................................... 211
About evidence lock ........................................................................................................ 212
About current tasks ......................................................................................................... 213
About configuration reports ........................................................................................... 213
SERVER LOGS ................................................................................................ 214
About logs ......................................................................................................................... 214
Search logs ....................................................................................................................... 215
Export logs ........................................................................................................................ 215
Change log language ....................................................................................................... 216
System log (properties) ................................................................................................... 216
Audit log (properties) ....................................................................................................... 217
Rule log (properties) ........................................................................................................ 218
ALARMS ......................................................................................................... 219
About alarm configuration .............................................................................................. 219
About alarms .................................................................................................................... 220
Alarm Definitions .............................................................................................................. 221
Alarm Data Settings ......................................................................................................... 223
Sound Settings ................................................................................................................. 224
About setting up alarms using Enterprise slaves ........................................................ 224
OPTIONS DIALOG BOX ..................................................................................... 225
General tab (options) ....................................................................................................... 226
Server Logs tab (options) ................................................................................................ 228
Mail Server tab (options) ................................................................................................. 229
AVI Generation tab (options) .......................................................................................... 230
Network tab (options) ...................................................................................................... 231
Bookmark tab (options) ................................................................................................... 231
Evidence Lock tab (options) ........................................................................................... 232
Milestone Husky M50 Advanced
Administrator's Manual
www.milestonesys.com Contents
User Settings tab (options) ............................................................................................. 232
Access Control Settings tab (options) ........................................................................... 232
Analytics Events tab (options) ........................................................................................ 233
Event Server tab (options) .............................................................................................. 234
Generic Events tab (options) .......................................................................................... 234
FEATURE CONFIGURATION ....................................................... 237
FAILOVER RECORDING SERVERS (REGULAR AND HOT STANDBY) ......................... 237
About failover recording servers .................................................................................... 237
About failover steps ......................................................................................................... 238
About failover recording server functionality ............................................................... 239
Install a failover recording server ................................................................................... 240
Set up and enable failover recording servers ............................................................... 241
Assign failover recording servers .................................................................................. 241
Group failover recording servers ................................................................................... 242
Read failover recording server status icons ................................................................. 242
Failover recording server properties ............................................................................. 243
Failover group properties ................................................................................................ 243
About failover recording server services ...................................................................... 244
View status messages ..................................................................................................... 244
Change the management server address ...................................................................... 244
View version information ................................................................................................ 244
FAILOVER MANAGEMENT SERVERS ................................................................... 245
About multiple management servers (clustering) ........................................................ 245
Prerequisites for clustering ............................................................................................ 245
Install in a cluster ............................................................................................................. 245
Upgrade in a cluster ......................................................................................................... 247
REMOTE CONNECT SERVICES ........................................................................... 248
About remote connect services ...................................................................................... 248
Install STS environment for One-click camera connection ......................................... 248
Add/edit STSs ................................................................................................................... 249
Milestone Husky M50 Advanced
Administrator's Manual
www.milestonesys.com Contents
Register new Axis One-click camera ............................................................................. 249
Axis One-Click Camera connection properties ............................................................. 250
MILESTONE FEDERATED ARCHITECTURE .......................................................... 250
About selecting Milestone Interconnect or Milestone Federated Architecture ......... 250
About Milestone Federated Architecture ....................................................................... 251
Set up your system to run federated sites .................................................................... 254
Add site to hierarchy........................................................................................................ 255
Accept inclusion in the hierarchy ................................................................................... 256
Refresh site hierarchy...................................................................................................... 256
Connect to another site in hierarchy .............................................................................. 256
Detach a site from the hierarchy .................................................................................... 257
Federated site properties ................................................................................................ 257
MILESTONE INTERCONNECT ............................................................................. 258
About selecting Milestone Interconnect or Milestone Federated Architecture ......... 258
About Milestone Interconnect ......................................................................................... 259
About possible Milestone Interconnect setups ............................................................ 260
Milestone Interconnect and licensing ............................................................................ 261
Add a remote site to your central Milestone Interconnect site_not updated yet ...... 261
Update remote site hardware .......................................................................................... 262
Establish remote desktop connection to remote system ............................................ 262
Enable playback directly from remote site camera ...................................................... 263
Retrieve remote recordings from remote site camera ................................................. 263
XPROTECT SMART WALL ................................................................................ 263
About XProtect Smart Wall ............................................................................................. 263
Configure Smart Walls ..................................................................................................... 264
Manage roles with Smart Walls ...................................................................................... 266
About using rules with Smart Wall presets ................................................................... 266
Smart Wall properties ...................................................................................................... 266
Monitor properties ............................................................................................................ 268
XPROTECT ACCESS CONTROL MODULE ........................................................... 270
Milestone Husky M50 Advanced
Administrator's Manual
www.milestonesys.com Contents
About access control integration ................................................................................... 270
Configure an integrated access control system ........................................................... 271
Wizard for access control system integration .............................................................. 271
Access control properties ............................................................................................... 273
XPROTECT LPR ............................................................................................. 277
LPR system overview ...................................................................................................... 277
About preparing cameras for LPR .................................................................................. 280
LPR installation ................................................................................................................ 293
LPR configuration ............................................................................................................ 294
LPR maintenance ............................................................................................................. 313
MULTI-DOMAIN WITH ONE-WAY TRUST .............................................................. 316
Setup with one-way trust ................................................................................................. 316
SNMP ........................................................................................................... 317
About SNMP support ....................................................................................................... 317
Install SNMP service ........................................................................................................ 317
Configure SNMP service ................................................................................................. 317
XPROTECT ENTERPRISE SERVERS ................................................................... 318
About XProtect Enterprise servers ................................................................................ 318
Add XProtect Enterprise servers .................................................................................... 318
Define roles with access to XProtect Enterprise servers ............................................ 319
Edit XProtect Enterprise servers .................................................................................... 319
SYSTEM MAINTENANCE ............................................................. 320
PORTS USED BY THE SYSTEM ........................................................................... 320
BACKING UP AND RESTORING SYSTEM CONFIGURATION ..................................... 323
About backing up and restoring your system configuration ...................................... 323
Back up log server database .......................................................................................... 323
Manual backup and restore of system configuration ................................................... 323
Scheduled backup and restore ....................................................................................... 325
Milestone Husky M50 Advanced
Administrator's Manual
www.milestonesys.com Contents
MOVING THE MANAGEMENT SERVER ................................................................. 328
About moving the management server.......................................................................... 328
About unavailable management servers ....................................................................... 329
Move the system configuration ...................................................................................... 329
MANAGING THE SQL SERVER .......................................................................... 329
About updating the SQL server address ....................................................................... 329
Update the log server's SQL address ............................................................................ 330
Update the management server or event server SQL server address ....................... 330
REPLACE HARDWARE ...................................................................................... 331
REPLACE A RECORDING SERVER ................................................................ ...... 334
VIDEO DEVICE DRIVERS ................................................................................... 335
About video device drivers ............................................................................................. 335
About removing video device drivers ............................................................................ 335
SERVICES ...................................................................................................... 335
About the Management Server service and Recording Server service ...................... 335
Restart Data Collector Server service ............................................................................ 336
View status messages ..................................................................................................... 336
Read server service icons - management, recording and failover ............................. 337
Change recording server settings .................................................................................. 338
Recording server properties ........................................................................................... 338
REGISTERED SERVICES ................................................................................... 339
About the service channel .............................................................................................. 339
Add and edit registered services .................................................................................... 339
Manage network configuration ....................................................................................... 340
Registered services properties ....................................................................................... 340
INDEX ............................................................................................ 342
Milestone Husky M50 Advanced
Administrator's Manual
www.milestonesys.com
10
Copyright, trademarks and
disclaimer
Copyright, trademarks and disclaimer
Copyright 2015 Milestone Systems A/S.
Trademarks
XProtect is a registered trademark of Milestone Systems A/S.
Microsoft and Windows are registered trademarks of Microsoft Corporation. App Store is a service
mark of Apple Inc. Android is a trademark of Google Inc.
All other trademarks mentioned in this document are trademarks of their respective owners.
Disclaimer
This text is intended for general information purposes only, and due care has been taken in its
preparation.
Any risk arising from the use of this information rests with the recipient, and nothing herein should be
construed as constituting any kind of warranty.
Milestone Systems A/S reserve the right to make adjustments without prior notification.
All names of people and organizations used in the examples in this text are fictitious. Any resemblance
to any actual organization or person, living or dead, is purely coincidental and unintended.
This product may make use of third party software for which specific terms and conditions may apply.
When that is the case, you can find more information in the file
3rd_party_software_terms_and_conditions.txt located in your Milestone system installation folder.
Milestone Husky M50 Advanced
Administrator's Manual
www.milestonesys.com
11
Before you start
Before you start
Introduction to the help
The help is divided into sections that each serves a targeted purpose. The sections are structured in a
logical flow:
System overview (on page 16)
Provides an introduction to your video surveillance system, system components, and concepts. This is
useful if you are new to the system. The system overview also provides a comparison chart that lists
the most significant differences between the products.
Installation
Provides installation preconditions and step by step procedures that help you install and upgrade your
system.
First time use (on page 35)
Provides an overview of the Management Client and information about best practices to follow to have
your system running smoothly. This overview is useful if you are new to the system.
Management Client elements (on page 43)
Provides a thorough walk through of each of the nodes in the Site Navigation pane of the
Management Client. This section contains conceptual and procedural information about the basic
elements of your system.
Feature configuration (on page 237)
Provides self-contained, detailed information about the additional features and add-on products that
your system supports.
System maintenance (on page 320)
Provides an overview of the ports used in the system and step-by-step procedures for, for example,
backing up your system and monitoring system performance. This section is useful after installation
and configuration in order to maintain, expand and optimize your system.
Navigate the built-in help system
Press F1 to access a related help topic or select Help > Contents from the Management Client
toolbar to launch the complete help.
You can navigate between the help window's three tabs: Contents, Index, and Search or use the
links inside the help topics.
Milestone Husky M50 Advanced
Administrator's Manual
www.milestonesys.com
12
Before you start
Tab
Description
Contents
Navigate the help system based on a tree structure.
Index
Select the first letter of the term you are interested in and scroll until
you find it. Click a help topic title in the search results list to open
the required topic.
Search
Search for help topics that contain particular terms of interest. For
example, search for the term zoom and receive a list in the search
result of all help topics that contains the term zoom. Click a help
topic title in the search results list to open the required topic.
Product
TCP ports
XProtect Advanced VMS
80, 8080, 7563, 25, 21, 9993
Milestone Mobile
8081
To print a help topic, navigate to the required topic and click the browser's Print button.
About virus scanning
As is the case with any other database software, if an antivirus program is installed on a computer
running XProtect software, it is important that you exclude specific file types and locations, as well as
certain network traffic. Without implementing these exceptions, virus scanning uses a considerable
amount of system resources. On top of that, the scanning process can temporarily lock files which
likely results in a disruption in the recording process or even corruption of databases.
When you need to perform virus scanning, do not scan Recording Server directories containing
recording databases (by default C:\mediadatabase\, as well as all folders under that location). Avoid
also to perform virus scanning on archive storage directories.
Create the following additional exclusions:
File types: .blk, .idx, .pic
C:\Program Files\Milestone or C:\Program Files (x86)\Milestone and all subdirectories.
Exclude network scanning on the following TCP ports:
or
Exclude network scanning of the following processes:
Milestone Husky M50 Advanced
Administrator's Manual
www.milestonesys.com
13
Before you start
Product
Processes
XProtect Advanced VMS
VideoOS.Recording.Service.exe, VideoOS.Server.Service.exe,
VideoOS.Administration.exe
Milestone Mobile
VideoOS.MobileServer.Service.exe
Organizations may have strict guidelines regarding virus scanning, however it is important you exclude
the above locations and files from virus scanning.
About Active Directory
If you want to add users to your system through the Active Directory service, a server with Active
Directory installed, and acting as domain controller, must be available on your network.
For easy user and group management, Milestone recommends that you have Microsoft Active
Directory® in place before you install your system. If you add the management server to the Active
Directory after installing, you must reinstall the management server, and replace the users with new
Windows users defined in the Active Directory.
Basic users are not supported in Milestone Federated Architecture systems, so if you plan that, you
must add users through the Active Directory service.
If you do not install Active Directory, follow the steps in Installation for workgroups when you install.
The Milestone Husky Assistant runs when you log in to your Milestone Husky M50 Advanced machine
for the first time. Milestone Husky Assistant helps you set up your Milestone Husky M50 Advanced as
a standalone system or if it should operate as a recording server or failover recording server.
Milestone Husky M50 Advanced
Administrator's Manual
www.milestonesys.com
14
Milestone Husky Assistant
Milestone Husky Assistant
The Milestone Husky Assistant runs when you log in to your Milestone Husky M50 Advanced machine
for the first time. Milestone Husky Assistant helps you set up your Milestone Husky M50 Advanced as
a standalone system or if it should operate as a recording server or failover recording server.
About the All-in-one setup option
The All-in-One setup option allows you to set up a full Milestone Husky M50 Advanced with all
components required to run this Milestone Husky as a standalone system.
About the recording server or failover recording server option
The Recording server or Failover recording server option allows you to set up your Milestone
Husky M50 Advanced as a recording server or a failover recording server and to connect this to an
existing Management server running on a different machine.
You should only select this option if you already have an existing Milestone Husky Advanced or
XProtect Corporate installation running.
Set up your system through the Milestone Husky Assistant
1. On the first page of the Milestone Husky Assistant, you can choose the language in which
Milestone Husky Assistant should appear. The Milestone Husky Assistant uses the Windows
system's language, so if your Windows uses English, the Milestone Husky Assistant also
chooses English per default. Click Next regardless of whether you have made any selections.
2. If the system should be part of a domain, you can open the Computer Name/Domain
Changes link to make sure that you have set up the computer name and domain/workgroup
correctly. If you change anything related to your workgroup or domain settings, you must
restart your computer. The Milestone Husky Assistant resumes the setup once the computer
has restarted.
You can skip this step if your workgroup/domain settings are ready.
3. Select the All-in-One setup option or the Recording server or recording server option,
depending on how your system should be set up.
4. Choose which RAID configuration you want to use on your system:
o Optimize for best performance (RAID10)
o Optimize for maximum storage (RAID5)
o Manual/Existing configuration
Milestone Husky M50 Advanced
Administrator's Manual
www.milestonesys.com
15
Milestone Husky Assistant
The RAID10 and RAID5 options configure the RAID system based on Milestone's
recommended settings. If you choose the Manual/Existing configuration, any manual
changes you make to the RAID configuration may result in unexpected system performance.
Milestone does not recommend that you choose other settings than RAID5 or RAID10.
Click Next when you have made your selection.
5. The Summary page appears. On this page, click either Setup to confirm your choices or
Previous to go back to previous pages of the Milestone Husky Assistant and go through the
corresponding steps again to make your choices.
6. If you clicked Setup on the previous page, the Milestone Husky Assistant finalizes and
optimizes the setup of Milestone Husky Advanced for first time use and for best performance.
Once the setup has completed, click Finish to begin using the Milestone Husky Advanced
system.
Milestone Husky M50 Advanced
Administrator's Manual
www.milestonesys.com
16
System overview
System overview
Product overview
This system is a fully distributed solution, designed for large multi-site and multiple server installations
requiring 24/7 surveillance, with support for devices from different vendors. The solution offers
centralized management of all devices, servers, and users, and empowers an extremely flexible rule
system driven by schedules and events.
Your system consists of the following main elements:
The management server - the center of your installation, consists of multiple servers.
One or more recording servers.
One or more XProtect Management Clients.
XProtect Download Manager.
One or more XProtect® Smart Clients.
One or more XProtect Web Clients and/or Milestone Mobile clients if needed.
Your system also includes fully integrated Matrix functionality for distributed viewing of video from any
camera on your surveillance system to any computer with XProtect Smart Client installed.
You can install your system on virtualized servers or on multiple physical servers in a distributed
setup.
The system also offers the possibility of including the standalone XProtect® Smart Client – Player
when you export video evidence from the XProtect Smart Client. XProtect Smart Client – Player allows
recipients of video evidence (such as police officers, internal or external investigators and more) to
browse and play back the exported recordings without having to install any software on their
computers.
Your system can handle an unlimited number of cameras, servers, and users and across multiple sites
if required. Your system can handle IPv4 as well as IPv6.
Milestone Husky M50 Advanced
Administrator's Manual
www.milestonesys.com
17
System overview
A distributed system setup
Example of a system setup. The number of cameras, recording servers, and connected clients, can be as high as you require.
Legend:
1. One or more installations of the Management Client
2. Event server
3. Microsoft cluster
4. Management server
5. Failover management server
6. SQL server
7. Failover recording server
8. Recording server(s)
9. One or more installations of XProtect Smart Client
10. IP video cameras
11. Video server
12. Analog cameras
13. PTZ IP camera
14. Camera network
15. Server network
System components
Management server
The management server stores the configuration of the surveillance system in a relational database,
either on the management server computer itself or on a separate SQL Server on the network. It also
handles user authentication, user rights, the rule system and more. To improve system performance,
Milestone Husky M50 Advanced
Administrator's Manual
www.milestonesys.com
18
System overview
you can run several management servers as a Milestone Federated Architecture™. The management
server runs as a service, and is typically installed on a dedicated server.
Users connect to the management server for initial authentication, then transparently to the recording
servers for access to for video recordings, etc.
Failover management server
Failover support on the management server is achieved by installing the management server in a
Microsoft Windows Cluster. The cluster will then ensure that another server take over the
management server function should the first server fail.
Recording server
The recording server is responsible for communicating with the network cameras and video encoders,
recording the retrieved audio and video as well as providing client access to both live and recorded
audio and video. The recording server is also responsible for communicating with other Milestone
products connected via the Milestone Interconnect technology.
Device Drivers
Communication with the network cameras and video encoders are done through a device
driver developed specifically for individual devices or a series of similar devices from the same
manufacture.
The device drivers are by default installed when the recording server is installed, but can later
be updated by downloading and installing a newer version of the device pack.
Media Database
The retrieved audio and video data is stored in the tailor-made high performance media
database optimized for recording and storing audio and video data.
The media database supports various unique features like; multistage archiving, video
grooming, encryption and adding a digital signature to the recordings.
Failover recording server
The failover recording server is responsible for taking over the recording task should a recording
server fail.
The failover recording server can operate in two modes:
Standard failover – for monitoring multiple recording servers
Hot-standby – for monitoring a single recording server
The difference between the standard and hot-standby failover modes is that in the standard failover
mode the failover recording server does not know which server to take over from, so it cannot start
until a recording server fails. In the hot-standby mode, the failover time is significantly shorter, as the
failover recording server already knows which recording server it should take over from and can
preload the configuration and start up completely - except for the last step of connecting to the
cameras.
Milestone Husky M50 Advanced
Administrator's Manual
www.milestonesys.com
19
System overview
Event server
The event server handles various tasks related to events, alarms, maps and 3rd party integrations via
the MIP Software Development Kit (SDK).
Events:
All system events are consolidated in the event server so there are one place and interface for
partners to make integrations that utilize system events.
Furthermore, the event server offers 3rd party access to sending events to the system via the
Generic events or Analytics events interface.
Alarms:
The event server hosts the alarm feature, alarm logic, alarm state as well as handling the
alarm database. The alarm database is stored in the same SQL server the management
server uses.
Maps:
The event server also hosts the maps that are configured and used in XProtect Smart Client.
MIP SDK:
Finally third-party-developed plug-ins can be installed on the event server and utilize access to
system events.
Log server
The log server is responsible for storing all log messages for the entire system. The log server uses
the same SQL server as the management server and is typically installed on the same server as the
management server, but can be installed on a separate server if needed to increase performance of
the management and log servers.
SQL server
The management server, event server and log server uses an SQL server to store, for example, the
configuration, alarms, events and log messaged.
The system installer includes Microsoft SQL Server 2008 R2 Express that can be used freely for
systems up to 300 cameras.
For larger systems over 300 cameras it is recommended to use the SQL Server 2008 R2 Standard or
Enterprise edition on a dedicated server as these editions can handle larger databases and offer
backup functionality.
Active Directory
Active Directory is a distributed directory service implemented by Microsoft for Windows
domain networks. It is included in most Windows Server operating systems. It identifies resources on
a network in order for users or applications to access them.
Milestone Husky M50 Advanced
Administrator's Manual
www.milestonesys.com
20
System overview
With the Active Directory installed, you can add Windows users from Active Directory, but you also
have the option of adding basic users without Active Directory. Note that there are certain system
limitations related to basic users.
Virtual servers
You can run all system components on virtualized Windows® servers, such as VMware® and Microsoft®
Hyper-V®.
Virtualization is often preferred to better utilize hardware resources. Normally, virtual servers running
on the hardware host server do not load the virtual server to a great extent, and often not at the same
time. However, recording servers record all cameras and video streams. This puts high load on CPU,
memory, network, and storage system. So, when run on a virtual server, the normal gain of
virtualization disappears to a large extent, since - in many cases - it uses all available resources.
If run in a virtual environment, it is important that the hardware host has the same amount of physical
memory as allocated for the virtual servers and that the virtual server running the recording server is
allocated enough CPU and memory - which it is not by default. Typically, the recording server needs
2-4 GB depending on configuration. Another bottleneck is network adapter allocation and hard disk
performance. Consider allocating a physical network adapter on the host server of the virtual server
running the recording server. This makes it easier to ensure that the network adapter is not overloaded
with traffic to other virtual servers. If the network adapter is used for several virtual servers, the
network traffic might result in the recording server not retrieving and recording the configured amount
of images.
Clients
About the Management Client
Feature-rich administration client for configuration and day-to-day management of the system.
Available in several languages.
Typically installed on the surveillance system administrator's workstation or similar.
For a detailed overview of the Management Client, see Management Client overview (on page 37).
Milestone Husky M50 Advanced
Administrator's Manual
www.milestonesys.com
21
System overview
About XProtect Smart Client
Designed for Milestone XProtect® IP video management software, the XProtect Smart Client is an
easy-to-use client application that provides intuitive control over security installations. Manage security
installations with XProtect Smart Client which gives users access to live and recorded video, instant
control of cameras and connected security devices, and an overview of recordings. Available in
multiple local languages, XProtect Smart Client has an adaptable user interface that can be optimized
for individual operators’ tasks and adjusted according to specific skills and authority levels.
The interface allows you to tailor your viewing experience to specific working environments by
selecting a light or dark theme, depending on room lighting or brightness of the video. It also features
work-optimized tabs and an integrated video timeline for easy surveillance operation. Using the MIP
SDK, users can integrate various types of security and business systems and video analytics
applications, which you manage through XProtect Smart Client.
XProtect Smart Client must be installed on users' computers. Surveillance system administrators
manage clients' access to the surveillance system through the Management Application. Recordings
viewed by clients are provided by your XProtect system's Image Server service. The service runs in
the background on the surveillance system server. Separate hardware is not required.
To download XProtect Smart Client, you must connect to the surveillance system server which
presents you with a welcome page that lists available clients and language versions. System
administrators can use XProtect Download Manager to control what clients and language versions
should be available to users on the welcome page of the XProtect Download Manager.
About Milestone Mobile client
Milestone Mobile client is a mobile surveillance solution closely integrated with the rest of your
XProtect system. It runs on your Android tablet or smartphone, your Apple® tablet, smartphone or
portable music player or your Windows Phone 8 tablet or smartphone and gives you access to
cameras, views and other functionality set up in the management clients.
Milestone Husky M50 Advanced
Administrator's Manual
www.milestonesys.com
22
System overview
Use the Milestone Mobile client to view and play back live and recorded video from one or multiple
cameras, control pan-tilt-zoom (PTZ) cameras, trigger output and events and use the Video push
functionality to send video from your device to your XProtect system.
If you want to use Milestone Mobile client with your system, you must add a Mobile server to establish
the connection between the Milestone Mobile client and your system. Once the Mobile server is set
up, download the Milestone Mobile client for free from Google Play, App Store or Windows Phone
Store to start using Milestone Mobile.
You need one hardware device license per device that should be able to push video to your XProtect
system.
Milestone Husky M50 Advanced
Administrator's Manual
www.milestonesys.com
23
System overview
About XProtect Web Client
XProtect Web Client is a web-based client application for viewing, playing back and sharing video. It
provides instant access to the most commonly used surveillance functions, such as viewing live video,
play back recorded video, print and export evidence. Access to features depends on individual user
rights which are set up in the management client.
To enable access to the XProtect Web Client, you must install a Mobile server to establish the
connection between the XProtect Web Client and your system. The XProtect Web Client itself does
not require any installation itself and works with most Internet browsers. Once you have set up the
Mobile server, you can monitor your XProtect system anywhere from any computer or tablet with
Internet access (provided you know the right external/Internet address, user name and password).
About licenses
When you purchase the system, you also purchase a certain number of licenses for the number of
hardware devices, for example video encoders or cameras, that you want to run on the system. One
hardware device license enables you to run as many camera, speaker, microphone, input, output and
metadata devices that the hardware device consists of. It also enables you to run the hardware device
multiple times on one site or multiple times on multiple sites.
You need a camera license for each enabled interconnected camera in a Milestone Interconnect
setup.
If you purchase XProtect Access Control Module, you need a license for each door you want to
configure for access control.
At first, when you have installed the various system components, configured the system, and added
recording servers and cameras through the Management Client, the surveillance system runs on
temporary licenses which need to be activated before a certain period ends. This is known as the
grace period. You also need to activate licenses if you later add more cameras to the system.
When the new surveillance system is working, Milestone recommends that you activate your licenses
before you make the final adjustments. If you do not activate your licenses before the grace period
expires, all recording servers and cameras without activated licenses stop sending data to the
surveillance system.
Milestone Husky M50 Advanced
Administrator's Manual
www.milestonesys.com
24
System overview
About local IP address ranges
When a client, such as XProtect Smart Client, connects to a surveillance system, an amount of initial
data communication, including the exchange of contact addresses goes on in the background. This
happens automatically, and is transparent to users.
Clients may connect from the local network as well as from the Internet, and in each case the
surveillance system should be able to provide suitable addresses so the clients can get access to live
and recorded video from the recording servers:
When clients connect locally, the surveillance system should reply with local addresses and
port numbers.
When clients connect from the Internet, the surveillance system should reply with the recording
servers' public addresses, that is the address of the firewall or NAT (Network Address
Translation) router, and often also a different port number (which is then forwarded to
recording servers).
The surveillance system must therefore be able to determine whether a client belongs on a local IP
range or on the Internet. For this purpose, you can define a list of IP ranges which the surveillance
system should recognize as coming from a local network.
About IPv6 and IPv4
Your system supports IPv6 as well as IPv4. So does XProtect Smart Client.
IPv6 is the latest version of the Internet Protocol (IP). The Internet protocol determines the format and
use of IP addresses. IPv6 coexists with the still much more widely used IP version IPv4. IPv6 was
developed in order to solve the address exhaustion of IPv4. IPv6 addresses are 128 bit long, whereas
IPv4 addresses are only 32 bit long. IPv6 offers more than ten billion billion billion times as many
addresses as IPv4.
More and more organizations are implementing IPv6 on their networks. For example, all US federal
agency infrastructures are required to be IPv6 compliant. Examples and illustrations in this manual
reflect use of IPv4 because this is still the most widely used IP version. IPv6 works equally well with
the system.
About using the system with IPv6
The following conditions apply when using the system with IPv6:
Servers
Servers can often use IPv4 as well as IPv6. However, if just one server in your system (for example, a
management server, recording server or failover recording server) requires a particular IP version, all
other servers in your system must communicate using the same IP version.
Example: All of the servers in your system except one can use IPv4 as well as IPv6. The
exception is a server which is only capable of using IPv6. This means that all servers must
communicate with each other using IPv6.
Milestone Husky M50 Advanced
Administrator's Manual
www.milestonesys.com
25
System overview
Devices
You can use devices (cameras, inputs, outputs, microphones, speakers) with a different IP version
than that being used for server communication provided your network equipment and the recording
servers also support the devices' IP version. See also the illustration below.
Clients
If your system uses IPv6, users should connect with the XProtect Smart Client. The XProtect Smart
Client supports IPv6 as well as IPv4.
If one or more servers in your system can only use IPv6, XProtect Smart Client users must use IPv6
for their communication with those servers. In this context, it is important to remember that XProtect
Smart Clients technically connect to a management server for initial authentication, and then to the
required recording servers for access to recordings.
However, the XProtect Smart Client users do not have to be on an IPv6 network themselves, provided
your network equipment supports communication between different IP versions, and they have
installed the IPv6 protocol on their computers. See also illustration. To install IPv6 on a client
computer, open a command prompt, type Ipv6 install, and press ENTER.
Example illustration
Example: Since one server in the system can only use IPv6, all communication with
that server must use IPv6. However, that server also determines the IP version for
communication between all other servers in the system.
No Matrix Monitor compatibility
If using IPv6, you cannot use the Matrix Monitor application with your system. Matrix functionality in
XProtect Smart Client is not affected.
About writing IPv6 addresses
An IPv6 address is usually written as eight blocks of four hexadecimal digits, with each block
separated by a colon.
Example: 2001:0B80:0000:0000:0000:0F80:3FA8:18AB
You may shorten addresses by eliminating leading zeros in a block. Also note that some of the fourdigit blocks may consist of zeros only. If any number of such 0000 blocks are consecutive, you may
shorten addresses by replacing the 0000 blocks with two colons as long as there is only one such
double colon in the address.
Milestone Husky M50 Advanced
Administrator's Manual
www.milestonesys.com
26
System overview
Example:
2001:0B80:0000:0000:0000:0F80:3FA8:18AB can be shortened to
2001:B80:0000:0000:0000:F80:3FA8:18AB if removing the leading zeros, or to
2001:0B80::0F80:3FA8:18AB if removing the 0000 blocks, or even to
2001:B80::F80:3FA8:18AB if removing the leading zeros as well as the 0000 blocks.
Using IPv6 Addresses in URLs
IPv6 addresses contain colons. Colons, however, are also used in other types of network addressing
syntax. For example, IPv4 uses a colon to separate IP address and port number when both are used
in a URL. IPv6 has inherited this principle. Therefore, to avoid confusion, square brackets are put
around IPv6 addresses when they are used in URLs.
Example of a URL with an IPv6 address:
http://[2001:0B80:0000:0000:0000:0F80:3FA8:18AB], which may of course be shortened to,
for example, http://[2001:B80::F80:3FA8:18AB]
Example of a URL with an IPv6 address and a port number:
http://[2001:0B80:0000:0000:0000:0F80:3FA8:18AB]:1234, which may of course be shortened
to, for example, http://[2001:B80::F80:3FA8:18AB]:1234
For more information about IPv6, see, for example, www.iana.org http://www.iana.org/numbers/. IANA,
the Internet Assigned Numbers Authority, is the organization responsible for the global coordination of
IP addressing.
Configure the system in the Management Client
Here are the tasks typically involved in setting up the system.
Even if information is presented as a checklist, a completed checklist does not in itself guarantee that
the system matches the exact requirements of your organization. To make the system match the
needs of your organization, Milestone recommends that you monitor and adjust the system
continuously.
For example, it is a good idea to test and adjust the motion detection sensitivity settings of individual
cameras under different physical conditions (day/night, windy calm weather, and so on) once the
system is running. The setup of rules, which determines most of the actions performed by the system
(including when to record video), is another example of configuration which to a large extent depends
on your organization's needs.
Milestone Husky M50 Advanced
Administrator's Manual
www.milestonesys.com
27
System overview
You have finished the initial installation of your system.
See Install the system.
Change the trial SLC to a permanent SLC (if required).
See Change Software License Code (on page 28).
Log in to the Management Client.
Authorize use of your system's recording servers.
See Authorize a recording server (on page 48).
Verify that each recording server's storage settings meet your needs.
See About storage and archiving (on page 51).
Verify that each recording server's archiving settings meets your needs.
See Archive settings properties (on page 60).
Detect the hardware (cameras or video encoders) to add to each recording server.
See Add hardware (on page 66).
Configure each recording server's individual cameras.
See About camera devices (on page 79).
Enable storage and archiving for individual cameras or a group of cameras. This is done
from the individual cameras or from the device group.
See Attach a device or group of devices to a storage (on page 54).
Enable and configure devices.
See Working with devices (on page 78).
The behavior of the system is to a large extent determined by rules, such as when cameras
should record, when PTZ (pan-tilt-zoom) cameras should patrol, when notifications should
be sent.
Create rules.
See About rules and events (on page 133).
Add roles to the system.
See About roles (on page 177).
Add users and/or groups of users to each of the roles.
See Assign/remove users and groups to/from roles (on page 181).
Activate licenses.
See Activate licenses online (on page 45) or Activate licenses offline (on page 46).
Milestone Husky M50 Advanced
Administrator's Manual
www.milestonesys.com
28
System overview
Change Software License Code
If you run your installation on a trial Software License Code (SLC) during the first period, you can
change it into a permanent SLC without any un- or reinstallation actions.
Important: This must be done locally on the management server. You cannot do this from the
Management Client.
1. On the management server, go to the notification area of the taskbar.
2. Right-click the Management Server icon and select Change License.
3. Click Import License.
4. Next, select the software license file saved for this purpose. When done, the selected software
license file location is added just below the Import License button.
5. Click OK and you are now ready to register SLC. See Register Software License Code.
Install clients
Install XProtect Smart Client silently
You can deploy XProtect Smart Client or your surveillance software to users’ computers using tools
such as Microsoft Systems Management Server (SMS). Such tools let you build up databases of
hardware and software on local networks. The databases can then, among other things, be used for
distributing and installing software applications, such as XProtect Smart Client, over local networks.
1. Locate the Smart Client installation program (.exe) file - MilestoneXProtectSmartClient.exe or
MilestoneXProtectSmartClient_x64.exe for 32-bit and 64-bit versions respectively. You find
the file in a subfolder under the folder httpdocs. The httpdocs folder is located under the
folder in which your Milestone surveillance software is installed.
The path is typically:
C:\Program Files\Milestone\XProtect Management Server\IIS\httpdocs\XProtect Smart
Client Installer\[version number] [bit-version]\All Languages\en-US
For example:
C:\Program Files\Milestone\XProtect Management Server\IIS\httpdocs\XProtect Smart
Client Installer\2014 (32-bit)\All Languages\en-US
2. Run a silent installation using one of the following two options:
a Run with default parameter settings:
Milestone Husky M50 Advanced
Administrator's Manual
www.milestonesys.com
29
System overview
To run a silent installation using the default values for all parameters, start a command prompt
(cmd.exe) in the directory where the installation program is located and perform following
command:
>MilestoneXProtectSmartClient.exe -–quiet
This performs a quiet installation of the XProtect Smart Client using default values for
parameters such as target directory and so on. To change the default settings, see below.
b Customize default parameters using an xml argument file as input:
To customize the default installation settings, provide an xml file with modified values as input.
To generate the xml file with default values, open a command prompt in the directory where
the installation program is located and perform the following command:
>MilestoneXProtectSmartClient.exe --generateargsfile=[path]
Open the generated Arguments.xml file, using for example Windows Notepad, and perform
any changes needed. Then, to run silent installation using these modified values, perform the
following command in the same directory.
Install Milestone Mobile server
>MilestoneXProtectSmartClient.exe --arguments=args.xml --quiet
All XProtect system components, including the Milestone Mobile server, are available for separate
download and installation from the management server's download web page (controlled by XProtect
Download Manager):
1. On the management server, go to the Management server's download web page from
Windows' Start menu, select Programs, Milestone, Administrative Installation Page.
2. Select the Milestone Mobile server installer. Save the installer somewhere appropriate and run
it from here or run it directly from the web page.
3. Follow the instructions on the screen to install.
Once you have installed the Milestone Mobile server, you can use Milestone Mobile client and
XProtect Web Client with your system. To reduce the overall use of system resources on the computer
running the management server, install the Milestone Mobile server on a separate computer.
For more information about XProtect Download Manager, see Download Manager/download web
page (on page 29).
Download Manager/download web page
The management server has a built-in web page. This web page enables administrators and end
users to download and install required XProtect system components from any location, locally or
remotely.
Milestone Husky M50 Advanced
Administrator's Manual
www.milestonesys.com
30
System overview
The web page is capable of displaying two sets of content, both in a language version that by default
matches the language of the system installation:
One web page is targeted at administrators, enabling them to download and install key
system components. Most often the web page is automatically loaded at the end of the
management server installation and the default content is displayed. On the management
server, you can access the web page from Windows' Start menu, select Programs >
Milestone > Administrative Installation Page. Otherwise you can enter the URL:
http://[management server address]:[port]/installation/admin/
[management server address] is the IP address or host name of the management server, and
[port] is the port number which you have configured IIS to use on the management server. If
not accessing the web page on the management server itself, log in with an account which has
administrator rights on the management server.
One web page is targeted at end users, providing them access to client applications with
default configuration. On the management server, you can access the web page from
Loading...