Archive for category: Commercial Security

By David Strickland, COO of Kenton Brothers

Large organizations—schools, universities, hospitals, and government facilities depend on surveillance to protect people, property, and critical operations. With hundreds or thousands of cameras running 24/7, the sheer volume of video data is enormous. To cope, many institutions turn to offsite third-party storage providers or cloud-based VMS platforms like Genetec, Milestone, or cloud-native solutions such as Verkada.

On the surface, it sounds simple: stream footage to the cloud, save space, and access video from anywhere. But the truth is, unless the system is engineered properly, organizations risk skipped frames, corrupted recordings, compliance failures, and even catastrophic evidence loss.

This guide breaks down the pitfalls and the critical technical considerations, from camera settings to network design to compliance, that must be addressed to keep surveillance video reliable and secure.

1) Camera Settings: The Hidden Multiplier on Your Network

The first choke point in your pipeline is the camera itself. The way cameras are configured has a massive impact on both the network and storage infrastructure.

Frames Per Second (FPS):
10–15 FPS is often sufficient for general monitoring. 30 FPS (or higher) may be required for forensic or evidentiary use but triples the bandwidth demand.

Resolution:
Standard 1080p produces a manageable data rate. 4K and above exponentially increase throughput, often 4–6x more per stream.

Compression (H.264 vs H.265):
H.265 significantly reduces bandwidth but requires more processing power at both the camera and server level.

Infrared/Night Vision:
Cameras that switch to IR mode at night often generate more noise and higher bitrates, increasing data load during nighttime recording, exactly when fewer IT staff are on hand to notice bottlenecks.

Forensic Capture Mode:
When enabled, forensic capture retains maximum detail for investigative playback. The tradeoff: higher bitrates, larger file sizes, and more stress on the uplink pipeline.

Analytics-Enabled Cameras:
Features like motion detection, license plate recognition, or facial analytics also increase data intensity because raw video plus metadata must be transmitted and stored.

Bottom line: Camera configuration is not just an image quality choice—it dictates the size of your network pipe and storage footprint.

2) The Network Pipeline: Purpose-Built for Video

With camera settings increasing demand, your network must be designed to handle peak throughput—not just average load.

• Dedicated Video Network: Surveillance traffic must never share space with operations or academic IT networks. Either create a true physical air gap or, at minimum, a VLAN gap with strict firewall policies.
• Uplink Sizing: Bandwidth must account for worst-case scenarios , like all forensic-mode cameras streaming simultaneously during an event.
• Latency & Packet Loss: Dropped packets = lost evidence. Enterprise switches and routers should prioritize video with QoS and enforce jitter control.

3) Continuous Network Health Monitoring

Video networks must be proactively managed. A reactive “call when something breaks” model is not enough.

• 24/7 Monitoring Tools: SNMP, NetFlow, or specialized VMS health dashboards should track bandwidth, packet loss, jitter, and CPU loads.
• Automated Alerts: Threshold-based notifications should trigger when bitrates spike (e.g., IR cameras at night) or when uplink saturation nears 80%.
• Redundant Circuits: Fiber cuts and ISP outages should not compromise your video evidence. Always design for failover and redundancy.
• Specialized Services: Platforms like AI Argus and Viakoo are built specifically for video assurance.
  • AI Argus uses artificial intelligence to monitor not just network performance but also camera behavior, recording integrity, and retention compliance. It catches anomalies such as IR-mode bitrate spikes or forensic capture loads before they become problems.
  • Viakoo provides end-to-end monitoring and automated compliance reporting, ensuring every camera is recording properly and retention policies are met. It offers system health dashboards and root cause analysis tailored to large enterprise environments.

These tools move monitoring beyond IT basics, they guarantee your video evidence remains reliable and legally defensible.

4) Virtual Servers and Cloud Security

When footage moves offsite, the virtual environment storing and managing it must be hardened.

• High Availability Clusters: Redundant hypervisors and automated failover keep VMS services online.
• Encryption: All video must be protected in transit (TLS 1.2+) and at rest (AES-256).
• Patch Cycles: Hypervisors, OS layers, and VMS software must follow a regular, documented update schedule.
• Segmentation: Video servers must not touch production or academic workloads. Segregation is your firewall against cascading breaches.

5) Compliance and Retention

Schools and universities face legal frameworks like FERPA, HIPAA, CJIS, and state laws—all of which dictate how surveillance data must be retained and protected.

• Retention Audits: Your storage provider must prove compliance with clear, auditable retention logs.
• Immutable Storage: For legal or evidentiary needs, write-once/read-many storage ensures footage cannot be altered or deleted.
• Chain of Custody: Documentation from camera to cloud must be verifiable for footage to be admissible in court.

6) Point-to-Point: Hardening the Entire Path

To trust your video evidence, each step of the pipeline must be engineered for reliability:

1. Camera Settings – FPS, resolution, compression, IR modes, forensic capture tuned appropriately.
2. Edge Switches – Managed with QoS to prioritize video, isolated VLANs.
3. Core Network – Redundant switches/routers with firewall separation from IT systems.
4. Uplink – Redundant circuits sized for peak video demand.
5. Ingress to Third-Party Provider – Secured through private VPNs or direct fiber; never open internet.
6. Virtual Server Layer – Redundant, encrypted, patched, segmented from other workloads.
7. Cloud Storage – Multi-site replication, integrity checks, immutable retention options.
8. Monitoring – Continuous health monitoring via AI Argus, Viakoo, and real-time IT dashboards.
9. Audit Reporting – Quarterly or annual compliance checks to validate nothing is slipping through the cracks.

Why This Matters

The camera settings you choose directly influence the survival of your evidence. A 30 FPS forensic camera in infrared mode can generate 10x the data of a 10 FPS daytime camera,  crushing an undersized network or poorly configured cloud pipeline.

Without continuous monitoring, you may never know your system is failing until the moment you need that footage and it’s gone.

Enterprise video surveillance is no longer just “plug in cameras and hit record.” It’s a carefully engineered ecosystem that spans camera configuration, network infrastructure, cloud storage, compliance frameworks, and continuous monitoring.

Whether you’re using Genetec, Milestone, or cloud-native systems like Verkada, you must design with the camera-to-cloud lifecycle in mind: size your pipeline for worst-case demand, monitor continuously with tools like AI Argus and Viakoo, enforce network segmentation, and validate compliance regularly.

At Kenton Brothers Systems for Security, we specialize in building surveillance infrastructures that hold up under real-world pressure—because protecting people, property, and possessions depends on more than cameras. It depends on trusting that your video will be there when you need it most. If you need help making sure that is the case, give us a call.