The camera estate
Around 150 IP cameras on six recorders, on their own isolated network, with one retention period and one set of permissions.
- Role
- Head of IT Infrastructure
- Period
- 2025 —
- Company
- Minta Gépgyártó Kft.
1. What I walked into
Cameras from three suppliers on four different recorders, plugged into the company network. Factory passwords, no updates, ever, and nobody knew exactly who could see the footage.
- retention differed from recorder to recorder
- a dead camera could go unnoticed for weeks
2. What I changed or built
The cameras moved to their own isolated network and onto matching recorders. Every camera has an owner, a place on the drawing and a line in the monitoring.
- unique passwords and regular firmware updates
- role-based, logged access to the footage
- 30-day retention, in line with the policy
3. The numbers
Around 150 cameras on six recorders, on one isolated VLAN. A dead camera raises an alert within minutes, and only those whose role allows it can see the footage.
4. The tools, and why these
PoE switches so each camera gets power and data over one cable; a VLAN of their own so a compromised camera is no way into the company network.
5. What it meant for the business
The camera system became a security tool instead of a security risk. After an incident the footage is where it should be — and so is the record of who watched it.
- Stack
- IP kamera
- NVR
- VLAN
- PoE