Editor Introduction
Port forwarding is a networking technique that allows incoming traffic on a specific port number to be redirected to a particular device or application on a local network. Open ports on the network expose an IP video system to the internet. This makes it a potential target for malicious cyberattacks. In the physical security industry, the elimination of port forwarding is seen as a basic and manageable precaution to shore up cybersecurity. We asked this week’s Expert Panel Roundtable:
What are the risks of port forwarding, and how can manufacturers and/or integrators mitigate those risks?
Port forwarding is a common technique used in the security industry, to allow external devices or clients to communicate with internal equipment on private networks including equipment such as IP cameras, NVRs, intrusion and access control systems, HVAC, fire, and the list is growing! However, opening ports to the internet provides an inherent attack vector for would-be hackers. If not properly configured, port-forwarding can expose customers to significant risk to not only the exposed application but to their entire networks. VPNs are an alternative, but may add significant administration overhead to IT teams, and can be frustrating and cumbersome for users. Cloud-enabled security software and devices are a great alternative. Cloud applications allow for inbound connections to on-premise security equipment, without any need for port-forwarding. Communications are commonly encrypted to protect sensitive data in transit. Cloud offerings can reduce IT administration workload while also significantly reducing exposure to network attacks.
Editor Summary
Increasingly, physical security manufacturers, integrators, and end users are faced with resolving cybersecurity issues such as the threat of port forwarding. As our Expert Panelists have described, there are a variety of solutions and strategies that can keep open ports from being a cybersecurity risk. Driving awareness of the problem can guide industry professionals to the best strategies to address it.
Read full article on securityinformed.com
