By Ryan Howarth
General Manager – Technical Support
The recent security threat that has come via virus/malware has brought the needs of security and securing systems to the forefront. Below is some guidance that can be followed to ensure your Symmetry system is kept safe and secure.
The Ransomware attack was based off a vulnerability found in the Windows Server Message Block (SMB) 1.0. Symmetry only uses SMB for file sharing for backup locations and NVR if the video files are saved on a separate file Server. If you do not have this defined, you can remove this Service from Windows or update it to a newer version.
MS patch updates – AMAG provides a monthly list of tested patch updates. We recommend that these patches are regularly applied to your system. Visit our Partner Site to see if you are up to date.
AntiVirus – Ensure that Antivirus is installed and updated with the required exclusions for where Symmetry is installed to remove the need for re-scanning:
Program File\Security Management System (from V7 > Application Server / Client / NVR)
ProgramData\Security Management System (from version 8> Application Server / Client / NVR)
Program Files\Microsoft SQL Server\MSSQL\Data (Microsoft KB309422 Database)
Windows\System32\msmq (Microsoft KB829259 clients\Application Server)
ProgramData\Symmetry (from version 8> for NVR’s)
Port listing – Please refer to the Software Installation Manual Appendix E, as this will provide the port listing that Symmetry requires depending on what has been setup and configured.
Symmetry files/patches – Ensure you only load Symmetry files from either the Partner website or supplied via our AMAG team. All software supplied by AMAG is code-signed, so please check the validity, and review any Microsoft security messages that are displayed as part of the installation process.
Database Backups – Ensure at a minimum that a daily Symmetry database backup occurs and that these backups are stored off the network. In an event of a required full-rebuild of your system, you will have a backup of your database if the database computer becomes unusable.
Upgrading – As older versions of Symmetry and Microsoft products reach the end of their Support and Maintenance lifecycle, it is increasingly important to upgrade Symmetry and the underlying OS to ensure the health and security of your system. As part of your maintenance program, upgrades should be planned for on a regular basis.
For more information about Symmetry Server maintenance best practices, a more detailed guide has been compiled by the Support Team and is freely available on the AMAG support site.