2017 is the most nefarious year to date for cyber attacks, exploits, ransomware, botnets, and more. From small companies to big players like Equifax, SEC, and the entire network of IoT devices and more are being targeted with increased aggression.

With enough time and bad intentions, any system is susceptible to some means of exploit. For this purpose, we are urging all users to view and abide by our best practices for Cyber Security. Please contact our technical support team for a free system check and to ensure you have the latest firmware.

Dahua Official Announcement


How to Create a More Secure Security System

Cybersecurity is more than just a buzzword: it’s something that pertains to every device that is connected to the internet. IP video surveillance is not immune to cyber risks, but taking basic steps toward protecting and strengthening networks and networked appliances will make them less susceptible to attacks. Below are some tips and recommendations from Dahua on how to create a more secure security system.



Physical Security

Connect IP Cameras to the POE Ports on the Back of an NVR:

Cameras connected to the POE ports on the back of an NVR are isolated from the outside world and cannot be accessed directly.

Physically Lock Down the Device:

Ideally, you want to prevent any unauthorized physical access to your system. The best way to achieve this is to install the recorder in a lockbox, locking server rack, or in a room that is behind a lock and key.



 Maintenance

Update Firmware: 

Highly Recommended: Keep your NVR, DVR, and IP camera firmware up-to-date to ensure the system is current with the latest security patches and fixes. Please find out latest firmware at end of this page.

Check the Log:

If you suspect that someone has gained unauthorized access to your system, you can check the system log. The system log will show you which IP addresses were used to login to your system and what was accessed.



User & Password Policies

Change Passwords and Use Strong Passwords:

Highly Recommended: This should go without saying, but the number one reason a system gets “hacked” is due to weak or default passwords.Dahua recommends never using a default password and choosing a strong password whenever possible. A strong password is at least 8 characters and is made up of a combination of special characters, numbers, and upper and lower case letters.

Change Passwords Regularly:

Regularly change the credentials to your devices to help ensure that only authorized users are able to access the system.

Change ONVIF Password: 

On older IP Camera firmware, the ONVIF password does not change when you change the system’s credentials. You will need to either update the camera’s firmware to the latest revision or manually change the ONVIF password.

Limit Features of Guest Accounts:

If your system is set up for multiple users, ensure that each user only has rights to features and functions they need to use to perform their job.



Enable/Disable Services

Enable HTTPS/SSL: 

Set up an SSL certificate to enable HTTPS. This will encrypt all communication between your devices and recorder.

Enable IP Filter:

Enabling your IP filter will prevent everyone, except those with specified IP addresses, from accessing the system.

Disable UPNP:

UPNP will automatically try to forward ports in your router or modem. Normally this would be a good thing. However, if your system automatically forwards the ports, and you leave the credentials defaulted, you may end up with unwanted visitors. If you manually forwarded the HTTP and TCP ports in your router/modem this feature should be turned off regardless.

Disable P2P:

P2P is used to remotely access a system via a serial number. The possibility of someone hacking into your system using P2P is highly unlikely because the system’s user name, password, and serial number are also required

Disable SNMP:

Disable SNMP if you are not using it. If you are using SNMP, you should do so temporarily, for tracing and testing purposes only

Disable Multicast:

Multicast is used to share video streams between two recorders. Currently there are no known issues involving Multicast, but if you are not using this feature, you should disable it.



Networking

Isolate NVR and IP Camera Network

The network your NVR and IP camera resides on should not be the same network as your public computer network. This will prevent any visitors or unwanted guests from getting access to the same network the security system needs in order to function properly.

Change Default HTTP and TCP Ports:

Change default HTTP and TCP ports for Dahua systems. These are the two ports used to communicate and to view video feeds remotely. These ports can be changed to any set of numbers between 1025-65535. Avoiding the default ports reduces the risk of outsiders being able to guess which ports you are using.

Only Forward Ports You Need: 

Only forward the HTTP(S) and TCP/UDP ports that you need to use. Do not forward a huge range of numbers to the device. Do not DMZ the device's IP address. You do not need to forward any ports for individual cameras if they are all connected to a recorder on site; just the NVR is needed.



Client (PC, Tablet, Mobile)

Disable Auto-Login on SmartPSS:

If you are using SmartPSS to view your system and you are on a computer that is used by multiple people, make sure auto-login is disabled. This adds a layer of security to prevent users without the appropriate credentials from accessing the system.

Use a Different Username and Password for SmartPSS:

In the event that your social media, bank, email, etc. account is compromised, you would not want someone collecting those passwords and trying them out on your video surveillance system. Using a different username and password for your security system will make it more difficult for someone to guess their way into your system.



#1. Latest Smart PSS Download link (Support P2P Firmware Upgrade)



  https://drive.google.com/open?id=0B8SRB0dkJXvmbFJnbE9CNjF5SEU



#2. How to verify DVR/NVR model and download  firmware file ?

 To verify your model ,  you can simply check label from the back of DVR/NVR, or contact us with DVR/NVR P2P number. Our technician will help you out.

 

 All latest firmware file are located on our website , verify your model and download correct firmware. 

#3 ##### Notice

 More than 3 years old  Dahua NVR or DVR, only support local network Configtool firmware upgrade .please follow  Click Here, Config tool Firmware Upgrade Quick User Guideline 

Num Dahua Model Ameta Model Firmware Download link
HD CVI DVR / HD XVR 
1 HCVR7216A-S3 HCVR7216A-S3 General_HCVR7x16-S3_Eng_NP_V3.218.0000001.2.R.170808.bin
HCVR5232AN-S3 HCVR-CV52A32-S3, CV53A32A
2 HCVR5104HS-NT  HCVR5104H-S3 General_HCVR5x04-S3_Eng_NP_V3.218.0000001.2.R.170808.bin
3 HCVR7104H-4M HCVR-CV71A04-4M General_HCVR7x04-4K_Eng_NP_V3.218.0000001.2.R.170808.bin
HCVR7108H-4M HCVR-CV71A08-4M
4 HCVR7216AN-4M HCVR-CV72A16-4M General_HCVR7x08-4K_Eng_NP_V3.218.0000001.2.R.170808.bin
5 XVR5104H XVR-XV51A04H General_XVR5x04_Eng_NP_V3.218.0000001.2.R.170808.bin
6 XVR5108H XVR-XV51A08H General_XVR5x08_Eng_NP_V3.218.0000001.2.R.170808.bin
7 XVR5216A XVR-XV52A16A General_XVR5x16_Eng_NP_V3.218.0000001.2.R.170808.bin
XVR5832S XVR-XV58A32S General_XVR7x16_Eng_NP_V3.218.0000001.2.R.170808.bin
8 HCVR5216A-V2&S2 HCVR-CV5216A-V2&S2 General_HCVR5x16-S2_Eng_PN_V3.200.0004.11.R.20170417.bin
HCVR7208A-V2&S2 HCVR-CV7208A-V2&S2
9 HCVR5104H-V2&S2 HCVR-CV5104H-V2&S2 General_HCVR5x04-S2_Eng_PN_V3.200.0004.11.R.20170417.bin
10 HCVR5208A-V2&S2 HCVR-CV5208H-V2&S2 General_HCVR5x08-S2_Eng_PN_V3.200.0004.11.R.20170417.bin
HCVR5108H-V2&S2 HCVR-CV5108H-V2&S2
HCVR7104H-V2&S2 HCVR-CV7104A-V2&S2
HCVR7204A-V2&S2 HCVR-CV7204A-V2&S2
11 HCVR5104H HCVR-CV5104H General_HCVR5104H_Eng_N_V3.200.0001.30.R.20170929.bin
12 HCVR5108H HCVR5108H General_HCVR5108H_Eng_N_V3.200.0001.30.R.20170929.bin
13
HCVR5204A、HCVR5208A、HCVR5216A、HCVR5404L、HCVR5408L、HCVR5416L、HCVR5804S、HCVR5808S、HCVR5816S、HCVR7204A、HCVR7208A
General_HCVRxx04HG(P)-X_Eng_N_V3.200.0001.21.R.20170929.bin
14 HCVR5424L、HCVR5432L、HCVR5824S、HCVR5832S、HCVR7404L、HCVR7408L、HCVR7416L(V2.0)、HCVR7804S、HCVR7808S、HCVR7816S, CV5832S-S2 HCVR7xxx(V2.0)_Eng_PN_V3.210.0001.1.R.20170928.bin
15 HCVR7416L(V1.0) General_HCVR7xxx(V1.0)_Eng_PN_V3.210.0000.3.R.20150717.bin
NVR
1   NVR5xxx   NVR-NV5416 , NVR9532-P
General_NVR5xxx_Eng_PN_V2.616.0000.0.R.20170922.bin
NVR-NV5432,NV5232 ,NVR5216
NVR-NV5832, NV9932
2    NVR4XXX    NVR-NV4108H-P General_NVR4xxx_Eng_PN_V3.203.0000.0.R.20170612.bin
NVR-NV4416-16P, NV4216-16P
NVR-NV4432
NVR-NV4432-16P
3    NVR4xx-4K    NVR-NV4208-8P-4K General_NVR4XXX-4K_Eng_PN_V3.210.0005.0.R.20160614.bin
NVR-NV4416-16P-4K
NVR-NV4432-4K
NVR-NV4832-4K
4  NVR6xx-4K&S2  NVR-NV6064-4K-S2 ,  NVR6032-4K-S2,NVR608-64-4K General_NVR6XX-4KS2_Eng_V3.210.0003.0.R.160714.bin
NVR-NV6064-4K-S2 P2P General_NVR6XX-4KS2_Eng_P2P_V3.210.0000.0.R.20161018.bin
5 NVR1xxxx NVR1104,NVR1108,NVR1116 General_NVR1xxx_Eng_PN_V3.200.0000.0.R.20170331.bin
6 NVR3xxxx NVR9204,NVR9208, NVR9216,NVR9816 General_NVR3xxx_Eng_N_V2.616.0000.0.R.20170925.bin
7 NVR2x04/NVR2x08 NVR2104, NVR2108 General_NVR2x0x_Eng_N_V2.616.0000.0.R.20170925.bin
8 NVR2xxx-S2 NVR2xxx-S2 General_NVR2X-S2_Eng_PN_V3.203.0000.0.R.20170419.bin
9 NVR2x16 NVR2116 General_NVR2x16_Eng_N_V2.616.0000.0.R.20170925.bin
10 NVR7xxxx NVR7816,NVR7416 General_NVR7xxx_Eng_P_V3.200.0000.0.R.20160412.bin
11 NVR5xxx-4KS2 NVR5432-P16-4KS2 General_NVR5XXX-4K_Eng_V3.215.0000000.1.R.20170901.bin
12 NVR4xxx-4KS2 NVR4xxx-4KS2 General_NVR4XXX-4KS2_Eng_V3.215.0000000.0.R.170807.bin
Analog DVR/ Hybrid DVR/ SDI DVR
 1 DVR3204HF-S ASD_EYEONET_9008HBR, DVR9032D1
General_DVRxx04HF-X_Eng_PN_V3.200.0000.0.R.20170803.bin
 2

DVR0404HF-U-E(V2.0),DVR0804HF-U-E(V2.0),DVR1604HF-S-E(V2.0),DVR0404HF-A-E(V2.0),DVR0804HF-A-E(V2.0),DVR1604HF-U-E(V2.0)

DVR9032HBR, DVR9032HBH,DVR9016HBR, DVR9016HBH,DVR9608, DVR9008HBH

General_DVRxx04HF-X-E(V2.0)_Eng_PN_V3.200.0003.4.R.20170816.bin

( No support IP Channel)

GeneralDVRxx04HFXE(V2.0)EngPNV3.200.0003.1.R.20141127.bin

(*Support IP channel, Require serial port configuration, and device reboot )

Some Dahua DVR more than 3 years old, Like (9032HBR,9008HBH, DVR9608)  , if configtool can’t upgrade firmware, please contact our support team to get another upgrade solution (For example: serial port upgrade )

 3 DVR5104H, DVR5208A DVR9504H, DVR9508A General_DVR5x04_Eng_PN_V3.200.0001.28.R.20170929.bin
 4 DVR5108H DVR9508H General_DVR5x08_Eng_PN_V3.200.0001.28.R.20170929.bin
 5 DVR5216A, DVR5116H DVR9516HS, DVR5116H General_DVR5x16_Eng_PN_V3.200.0001.28.R.20170929.bin
6  DVR3104H  DVR3104H General_DVR0404LF-AS_3104H_Eng_N_V2.608.0000.7.R.20170312.bin
7 DVR1604HD-L, DVR0404HD-A, DVR0804HD-L SDI9404, SDI9408, SDI9416 General_DVRxx04HD-X(V2.0)_Eng_N_V2.616.0001.13.R.20170909.bin
8 DVR2104H-H , DVR5104H-V2 DVR2104H-H , DVR5104H-V2 General_DVR21xx_Eng_PN_V3.200.0001.28.R.20170929.bin
9 DVR7816S-U DVR7816S-U General_DVR7xxx_Eng_PN_V3.210.0001.0.R.20170928.bin