Setting passwords for Media Gateway RTSP streaming (Basic) - Security Center 5.11

Security Center Hardening Guide 5.11

Product
Security Center
Content type
Guides > Administrator guides
Version
5.11
Language
English
Last updated
2023-03-13

To ensure restricted access to Media Gateway RTSP streams, administrators must set a strong password in the Media Gateway role for every authorized user account or enable RTSPS.

Before you begin

What you should know

To prevent unauthorized access to Real Time Streaming Protocol (RTSP) video streams, we highly recommend enforcing user authentication for RTSP streaming. User authentication is required by default. When enabled, access to RTSP streams is granted by specifying authorized user accounts in the Media Gateway role.
IMPORTANT: RTSP communication is not secure. To protect Security Center credentials from exposure, a separate RTSP password is required for each specified user account.

Password complexity requirements are enforced for RTSP passwords.

For enhanced security, Media Gateway offers RTSP streaming over TLS (RTSPS). With RTSPS, Security Center credentials are used to control access to video streams. RTSPS requires a player capable of decoding RTSP streams over TLS.

Procedure

  1. From the Config Tool home page, open the System task and click the Roles view.
  2. Select the Media Gateway role and click the Properties tab.
  3. If required, enable RTSP.
    RTSP streaming is enabled. By default, User authentication is switched ON.
  4. For unsecured RTSP streaming:
    1. Under the Accessible to list, click Add an item ().
    2. Select a Security Center user to grant RTSP access and click Add.
      The New password dialog box opens.

    3. Enter a password for RTSP streaming.
      This password is different from the user password for the account.
      Best Practice: Set a long, unique, and random password for each RTSP user.
    4. Click Apply.
  5. For RTSPS streaming:
    1. Enable Require TLS (RTSPS)
    2. Click Apply.
      Security Center user passwords are used for RTSPS streaming.