Securing your deployment

Because your XProtect VMS deployment is connected to the internet, you should ensure the security and stability of your installation.

Installing Windows updates

To ensure the continued stability and security of the installation, keep your installation up to date with the latest updates to your Windows Server version, as well as upgrades to your license and Milestone Care™ coverage. Install relevant Windows updates according to the security policy of your organization.

If you restrict online connectivity to your VPC, you can connect your XProtect Essential+ deployment to a Windows update service without exposing the VPC to the internet.

Changing the password for the Windows instance

After you deploy, Milestone recommends that you change the administrator's password for the Windows instance according to the security policy of your organization.

Removing unused ports

To protect your installation, Milestone recommends that you remove all unused ports from the security group that is related to your EC2 instance, For example, if your organization is not using HTTP port 8081, you can remove that port from the Inbound rules table.