Installation and deployment steps

  1. Run the installer

  2. Set up the deployment

  3. Define and activate the cameras

  4. Disable face recognition and license plate recognition (optional)

  5. Install BriefCam Embedded Client for Milestone XProtect plug-in

  6. Using an HTTPS host (optional)

Prerequisites

Before you install, please check the following list of prerequisites.

Server At least one dedicated server for XProtect Rapid REVIEW (it cannot be installed on the same server with the VMS).
Memory At least 64GB of RAM
Storage

  • At least 250GB of free space for the application

  • At least 250GB for the database (on SSD drives)

  • At least 500GB drive for data storage (video and metadata)

Refer to the APPENDIX: XProtect Rapid REVIEW hardware recommendations for recommended storage size.

GPUs

At least one supported GPU. For additional information, see the list of recommended GPUs which is available on the specification sheet that you can download from the Milestone Content Portal: Collections / Rapid REVIEW.

The GPU should not be used for any system task such as connecting a monitor to the GPU or running applications, such as Chrome, using the GPU.
CPU For each GPU, at least 4 cores at base (non-turbo) frequency of 2.5GHz and above.
Drivers

For the server with the GPU, make sure to download a supported version of the NVIDIA driver (470.94 or higher).

Make sure to restart the computer after installing the NVIDIA driver.
Network connectivity between BriefCam and the VMS Ensure a minimum of 1 Gbps of throughput is available. This is relevant for deployments with less than 300 cameras on site. For larger deployments, consult with your BriefCam Account Manager.
Operating System Windows 11, Windows 10 Pro version 1803 or higher, Windows Server 2022, Windows Server 2019 or Windows Server 2016 (you can check the Windows versions by running winver.exe.) For the Windows 10 'N' edition, you need to install 'Media Feature Pack' and 'Windows Media Player' via the Windows optional features menu. For more information, click here.
Windows Updates Make sure that the latest Windows updates are installed.
.NET Framework

If the computer is running Windows 10 or Windows Server 2016, download and install .NET Framework 4.7.2 Runtime or higher.

Make sure to restart the computer after installing .NET Framework.
Permissions Current logged in user has full local admin rights and full Registry Read/Write permissions.
Browsers

Mozilla Firefox version 69.* and above

Google Chrome version 77.* and above

Microsoft Edge version 80 and above

 
Ports See the Firewall Consideration and Ports Availability section below.

STEP 1 - Run the Installer

XProtect Rapid REVIEW will not work if the minimum requirements are not met. For additional information, see the APPENDIX: XProtect Rapid REVIEW hardware recommendations.

  1. Extract the XProtect Rapid REVIEW package (RapidREVIEW <version>.zip).

    2. The extracted folder includes the XProtect Rapid REVIEW installer, multiple BriefCam installer files and an installation and configuration guide. You do not need to run any of the BriefCam installers (except for the embedded client installer at a later stage).

    BriefCam uses port 80 for its application. If you want to use a different port, change it in the config.json file before running the installer. The config.json file is one of the files in the installation package.

  2. Right-click the MilestoneXProtectRapidReview2022R2Installer.exe file and select Run as administrator.

  3. Read and accept the License Agreement terms and click NEXT.

    When running on a laptop, you may also see a duplicated smaller screen on top of the regular installation screen. To continue, check the check box on the smaller screen and the NEXT button on the larger screen. This is a known issue

  4. The installer will check to see if your computer meets the minimum prerequisites..

    • If all the prerequisites are met, you’ll see a “Your system is fine” message.

    • If any of the prerequisites are not met, you will see a screen describing the warnings. Try resolving the warnings (for more information see the Prerequisites section) and then click RETRY or run the installer again. To resolve the warnings, you can also see the logs and run the standalone Check Prerequisites tool.

      If there are still errors and you click NEXT, the installation will continue. However, may not run properly on your computer since it does not meet the minimum requirements.

  5. Select whether you want to install, upgrade, or uninstall XProtect Rapid REVIEW.

    6. If you select INSTALL or UPGRADE, the following screen appears.

  6. Click NEXT.

    7. The following screen opens where you’ll enter the necessary credentials and settings.

  7. Fill in the following fields.

    8. Field Description
    BriefCam account settings
    BriefCam User

    The Windows user that runs the services. If this user does not yet exist, the installer will create it for you.

    This user must have local administrator permissions.

    Password

    The password of the user above (BriefCam User). Note that apostrophes and double quotes are not supported in the Password field.

    Use a password that is compliant with your organization’s password policy.

    A password may fail for a variety of reasons:

    • The password does not meet the password policy of the operating system and/or organization.

    • Domain accounts cannot be created using this dialog. Contact the relevant IT person if a new domain account is required.

    • The user is disabled, locked, or otherwise limited.
    PostgreSQL BriefCam User
    Database User

    The PostgreSQL user that accesses the application database.

    Note that the user name is case sensitive.
    Database Password The password of the user above (Database User). Note that apostrophes and double quotes are not supported in the Database Password field.
    License activation key
    Software activation key

    The license activation key provided by Milestone.

    The license will be activated if the computer is online. If it is not online, you can activate the license using the BriefCam License Activation tool, which you can access by clicking the following icon after the installation completes.

  8. Select the Advanced settings option. All the fields here are optional. If you want to already configure the connection to the Milestone VMS, fill in the Milestone VMS Address field. It is recommended to fill it in.

    9. The following table describes all the additional fields that are in the Advanced settings.

    Field Description
    Database admin settings
    Database Admin User The admin user for the PostgreSQL database. This cannot be the same as the Database User in the previous table.
    Database Admin Password

    The password of the user above (Database Admin User). A database admin password is automatically generated. Note that apostrophes and double quotes are not supported in the Database Admin Password field.
    Authentication Key
    Passphrase This passphrase will be used to generate an encryption key to secure connection strings and other sensitive data.
    Domain Name
    Domain Name

    If the BriefCam user you specified in the previous table is a domain user, enter the domain name and make sure that the domain user has full admin privileges on the server. If the user is a local user, enter a period (.)

    Note that the domain name is case sensitive.
    Paths
    Root path The path where you want to install BriefCam applications.
    Shared directory

    The path for the shared data folder. This folder will store longer blobs, database backups, rendered synopsis files, and more.

    It’s recommended to select the drive with the most available space.

    If you select an existing shared network folder, make sure that the user has permissions to the shared network folder.

    If you want to select a mapped drive, make sure to first map the drive before installing BriefCam.

    In the properties of the drive you select, make sure that you cleared the Allow files on this drive to have contents indexed in addition to file properties check box (as shown in the image below).
    Postgres data directory

    The path where you want to store PostgreSQL data. It is strongly recommended to set this path to an SSD drive.

    This field cannot contain special characters, such as space, ~, and %.
    Milestone
    Milestone SSO Provider Leave as-is. This is the endpoint of the Rapid REVIEW - Milestone integration service.
    Milestone VMS Address Enter the host or IP address of the Milestone VMS.

  9. Click NEXT and a summary screen will appear.

  10. Review the settings and save the settings for future use by clicking the COPY button.

  11. Click NEXT to complete the installation.

    12. The installation may take 10-25 minutes. Note that after the installation is complete, the services will be automatically restarted.

    If you did not fill in the VMS address after the installation completed, open the MilestoneSSOProvider.exe.config file and update the MilestoneAddress value to the VMS address.

    By default, this file is located in C:\Program Files\BriefCam\BriefCam Server.

Firewall Consideration and Ports Availability

Internal (Local) Ports

On each server, the following ports should be opened for internal communication:

  • On each server, all outbound ports should be opened, to allow communicating with other servers as needed.

  • On each server, the following inbound ports should be opened according to the installed services. The BriefCam application listens for incoming traffic from these ports. The installer will create the relevant Windows firewall rules for these ports.

Component Port #
BI Face Recognition Service TCP 13004
Face Recognition Matching Service TCP 13002
Filtering Service TCP 13001
License Service TCP 1947
Lighthouse Service TCP 2553, TCP 2554, TCP 2555, TCP 2556, TCP 2557
LPR Matching Service TCP 13003
Milestone TCP 554, TCP 8080
MilestoneSSOProvider TCP 8030
Notification Service TCP 7080
PostgreSQL Redis TCP 5432
Redis TCP 6379
Storage TCP 139, TCP 445
Video Streaming Gateway Service TCP 5010
VSServer Service TCP 1112, TCP 1113
Web Services (BOA, ProWebApi, AdminWebApi) HTTP (80)

External Ports

The following ports should be opened to traffic coming from the end users’ browsers.

Component Port # Comment
Web Services HTTP (80)  
Video Streaming Gateway Service TCP 5010 Not needed when using a load balancer
Notification Service TCP 7080

Additionally recommended prerequisites

  • Set the default system language to English during the installation. If the language is a language other than English, the installation may end with an error. The system language can be set to any preferred language after the installation.

  • Disable antivirus scans from all BriefCam folders. For more information, see the Antivirus guidelines from BriefCam.

Installation Troubleshooting

If the installation failed:

  1. Investigate the log files (deploy.log and the MilestoneXProtectRapidReview2022R2Installer_<version>.log) to see which component of the installation has failed. The log files are in the folder where you extracted the installation files.

  2. Investigate the relevant component’s log file and fix the issue according to the error in the log.

  3. Uninstall Rapid REVIEW using the UNINSTALL option in the installer.

  4. Restart the computer.

  5. Reinstall Rapid REVIEW.

Activate licenses

This information assists you in activating an XProtect Rapid REVIEW license. You can complete activation in both online and offline modes.

It also assists you in modifying and re-activating an existing license for system expansion if, for example, you want to add additional device licenses.

All steps listed below should be performed on the server where you installed XProtect Rapid REVIEW.

Licensing warning

Be aware that licensing with BriefCam is sensitive. A product key can be activated only once. If you try to activate it again, it will fail with error code 831. Furthermore, if certain components are missing on your BriefCam installation, there is a chance that the license is activated on the BriefCam licensing server without being applied on your system. If this happens, you must open a support case with BriefCam requesting an extra activation for the license.

To prevent problems with license activation:

  • Make sure that the Sentinel LDK License Manager service is available in Windows Services.

  • Verify that you can access the URL http://localhost:1947 to get to the GEMALTO application site.

  • All IIS AppPools must be in place: AdminApiPool, AdminClientPool, BoaPool, ProWebApiPool, ProWebApiStoragePool, ProWebClientPool, VideProcessingGateway

  • All BriefCam components must be available in Control Panel – Programs: BriefCam PostgreSQL, BriefCam Web Services, BriefCam Server, BriefCam Milestone Plugin.

If any of the preconditions mentioned above are not accomplished, please open a case with Milestone Technical Support providing your license product key and tag ID.

Once the license is activated successfully, you can uninstall and re-install as many times as you wish. The license will remain on the server so you don't need to re-activate it. A request for an extra activation for the license will only be required in the case of a re-installation of the Windows OS or if the license is deleted by a disk formatting .

Online activation

Online activation requires an active Internet connection.

  1. From the desktop, do one of the following

    • Click the BriefCam License Activation application.

    • From the Start menu, type BriefCam License Activation and launch the application.

  2. Enter your product key and click Activate.

    3. When the activation is successful, the following dialog box will appear. Here you’ll find your Tag ID, which you’ll need when you open a support ticket.

  3. Click OK to close the dialog box and then click Close in the main application window to close the License Activation application.

Offline activation

Offline activation is useful in cases where internet connectivity is not available on the computer where you are installing BriefCam.

To perform offline activation:

  1. From the desktop, do one of the following:

    • Click the BriefCam License Activation application.

    • From the Start menu, type BriefCam License Activation and launch the application.

    • Click the Offline tab to access offline activation.

  2. Click 1. Collect Information to generate a C2V (client to vendor) file, select or approve the destination in which it is to be stored, and click Save.

  3. Send the C2V file to the Support team by logging into Milestone Support to open a ticket and attaching the C2V file. The product key number you received from Milestone needs to be mentioned in the ticket. This will help the support team generate the relevant V2C file (vendor to client), which is required to activate the product offline.

After receiving the V2C, there are two ways to activate the product offline:

You can activate via the BriefCam License Activation application or you can use the Gemalto application.

Activate via the BriefCam License Activation application

  1. Open the BriefCam License Activation application.

  2. Click the Offline tab.

  3. Click 3. Apply license.

  4. Select the V2C file provided by the support team, and click Open.

  5. When you see a message that the product was activated successfully, click OK and close the License Activation application. BriefCam will now be activated.

Activate via the Gemalto application.

  1. Open a web browser.

  2. Open http://localhost:1947/_int_/checkin.html.

  3. Select the Update/Attach option.

  4. Click Choose File.

  5. Select the V2C file provided by the support team.

  6. Click Apply File.

System expansion (adding additional device licenses)

To make any modifications to the license, such as adding cameras to the license, you need to:

  1. Activate the license.

  2. Place an order and mention the system Tag ID and the Key ID, which can be found in the Gemalto application:

    1. Open your browser.

    2. Go to the Sentinel Admin Control Center

    3. Copy the Key ID.

    The Milestone team will then generate the relevant V2C with the requested modification(s).

  3. Activate the V2C on the server:

    1. Open a web browser.

    2. Go to the Sentinel Admin Control Centerl.

    3. Select the Update/Attach option.

    4. Click Choose File.

    5. Select the V2C file provided by the Milestone support team.

    6. Click Apply File.

STEP 2 – Set up the deployment

  1. In a browser, enter the hostname of the computer where XProtect Rapid REVIEW was installed followed by slash (/) and the word admin, that is: http://[computer name]/admin. The BriefCam Administrator Console will open.

  2. Log into the administrator console. The user name is Administrator and the default password is changeit.

  3. Change the default password.

You’ll now set up the deployment from the Deployment section.

  1. From the Deployment section, click Hosts.

  2. Next to the host name, click on the settings icon .

  3. From the Templates menu, select All In One.

  1. Clear the Alert Processing Server, BI Face Recognition Service, and BI Rule Engine Service check boxes (these options will not be needed).

  2. Click Apply.

  3. From the Deployment section, click GPUs and then select GPU OX5.

  4. Click on the edit icon ().

  5. If face recognition will be used, select the Face Recognition check box.

  6. In the Mode column, select On Demand.

  1. Verify that the number of workers under Workers is set to 4.

  2. From the Deployment section, click Services.

  3. Select the check box at the top left of the table.

  4. Click the start button.

STEP 3 – Define and activate the cameras

  1. Open the Settings section and click Camera Management (as shown in the image below).

  1. Click Add directory. The Add Directory dialog box opens.

  1. From the Video Integration field, select Milestone Integration.

  1. In the Directory Name field, enter a display name for the user directory.

  2. In the Address field, enter the IP address of the Milestone VMS server.

  3. In the User Name and Password fields, enter an administrator user name and password of the VMS server. With an admin user you can make sure that all the cameras can be accessed.

  4. Click Add to add the directory.

  5. Click the zoom () icon to the right of the new directory and select the Add / Edit Cameras option.

  6. For all of the cameras, select the check box in the camera’s Activated column and click the Activate button (located in the bottom right corner), as shown in the image below.

  1. The Camera Activation pane shown below will appear. If you are sure you want to activate the cameras, click Yes. Note that Camera activation is irreversible. It cannot be reset unless a special approved request is opened with BriefCam support.

STEP 4 – Disable face recognition and license plate recognition (optional)

If you want to disable face recognition and/or license plate recognition:

  1. In the BriefCam Administrator Console, open the Settings section and click Environment Settings

  2. Set the clientEnableFaceRecognition environment setting to false. This removes the Face Recognition functionality from the UI.

  3. Set the MetaData.EnableFaceRecognition environment setting to false. This disables the Face Recognition engine.

  4. Set the EnableLPR environment setting to false. This removers the License Plate Recognition functionality from the UI.

STEP 5 – Install BriefCam Embedded Client for Milestone XProtect plug-in

On each XProtect Rapid REVIEW client computer, install BriefCam’s embedded client for Milestone XProtect plugin.

  1. Click the BriefCam Embedded Client for Milestone XProtect plug-in file to download it and then run it. You’ll find the plugin in the XProtect Rapid REVIEW zip file.

  2. The installation checks for prerequisites, such as Microsoft .NET Framework 4.7.2 Full and Microsoft Visual C++ 2015 2017 2019 Redistributable Package (x64).

  3. If anything is missing, you will be prompted to install the missing prerequisites and click Install.

  4. In the Welcome screen, click Get Started.

  5. Read the license, accept the License Agreement terms, and click Next.

  1. Select the installation destination path and click Next.
    Note that the installation path must be the same directory where Milestone XProtect Smart Client is installed. (This may vary slightly between client computers and between Milestone versions.)

  1. Enter the BriefCam Web Application URL (which is the hostname or IP address of the BriefCam computer followed by /synopsis and verify that the provided URL is correct by clicking the Verify URL button (as shown below).

  1. In the BriefCam Open API (BOA) Server Address field, enter the hostname or IP address of the BriefCam computer followed by /BOA.

  1. Click Next.

  1. Click Install and then click Finish.

  1. In the BriefCam Administrator Console, restart the services by selecting all of the services, clicking the stop button () and then the start button (), as shown in the image below.

  1. Restart IIS on the Rapid REVIEW server by opening the Windows services and right-click the World Wide Web Publishing Service. Then click Restart.

Note: An admin user is automatically created by the SSO when logging into the Milestone client using the Basic authentication or Windows authentication method.

If you want to log into the Milestone client using the Windows authentication (current user) option, add the BriefCam user that you used to install BriefCam services to the Administrators group in Milestone XProtect Management Client.

When you have completed the steps, a BriefCam tab will appear in the Milestone XProtect Smart Client.

In BriefCam, for security reasons, users are automatically logged out if no activity is detected for 20 minutes. Therefore, a user may be automatically logged off the BriefCam functionality while the Milestone VMS is still running.

STEP 6 – Using an HTTPS host (optional)

To work with SSL and BriefCam, using a load balancer is required.

This section describes the steps to take to use the NGINX load balancer as an https host for BriefCam services.

Recommendations

BriefCam recommends using NGINX.

It is recommended to install the load balancer on a separate computer.

If you are working in a virtualized environment, the load balancer must be on a separate computer.

If you are working in a non-virtualized (physical servers) environment, you can have the load balancer on the same computer as the Web Services (although it is not recommended). However, if you install the load balancer on the same computer as the Web Services, IIS must be on a different port than port 80, since port 80 is for NGINX.

Prerequisites

  • Make sure that port 80 is not in use by another application.

  • If IIS is installed, make sure to stop it or change its default port.

Steps

  1. Download NGINX 1.19.x load balancer or later from this link: https://nginx.org/en/download.html.

  2. Extract the NGINX zip files to drive C:\. It is important to have the NGINX extracted so that the path is: C:\NGINX.

  3. Create or use an already created self-signed certificate separated into two files: .crt and .key:

    For information about how to create a certificate, see one of these links:

    To use an already created certificate from the current folder, place both the certificate’s .crt and .key files in the following path: C:\NGINX\certificates\.

  1. If you are working with SSL, download the nginx.conf file from: https://bcftpuser:BCreleases01!@bcftp.briefcam.com/nginx/nginx.conf and save it to c:\nginx\conf (replacing the existing file).

  2. If you do not want to work with SSL, download the port80_nginx.conf file from: https://bcftpuser:BCreleases01!@bcftp.briefcam.com/nginx/port80/nginx.conf and save it to c:\nginx\conf.

  3. In the nginx.conf file’s http section, modify the server name where the components are running (web services, notification services, and Video Streaming Gateway Services).

  4. If you have multiple nodes of a service, add a semicolon (;) after the first node and add a second row with the name of the second node. In the example below, there are two Web Services nodes.

  5. In the nginx.conf file’s BriefCam System using SSL certificate section you set up HTTPS as follows:

    1. In the server_name node, replace www.example.com with the address of the load balancer.

    2. Comment the alias node by adding an ampersand (#) at the beginning of the row.

    3. In the ssl_certificate row, enter the full path to the .crt file including the file name.

    4. In the ssl_certificate_key row, enter the full path to the .key file including the file name.

  6. If your SSL certificate is protected by a password, you need to configure NGINX to read a list of passwords that are stored in a separate file. If the private key is not in this file, NGINX will not start. You do this as follows:

    1. Create a new text file named ssl_passwords.txt and save it to a separate folder than where the SSL certificate is located.

    2. Set the file to be readable only to the user running NGINX.

    3. Enter the certificate password into the first line of the ssl_passwords.txt file.

    4. In the nginx config file, add the following line above the existing certificate lines: ssl_password_file /var/lib/nginx/ssl_passwords.txt;

    5. Distribute this file separately from the configuration file.

    For additional security measurements for SSL private keys, see the NGINX documentation.

  7. Download the latest release of the NSSM zip files from this link: https://nssm.cc/download and place them on the load balancer computer.

  8. Extract the NSSM zip file to a folder, for example: C:\NSSM\.

  9. Open CMD as administrator, navigate to the new NSSM\win32 folder and run the following commands:

    • nssm install NGINX “C:\nginx\nginx.exe”

    • nssm set NGINX AppDirectory C:\nginx

    • nssm set NGINX DisplayName “NGINX Web Server”

    • nssm set NGINX Description “NGINX Web Server”

    • nssm set NGINX Start SERVICE_AUTO_START

In the examples below, replace the string www.example.com with the address of the load balancer.
For example: Load balancer = LB01.briefcam.com.

  1. On any host that is running the application (browser), make sure the domains (or host name) can be resolved by the DNS. If no DNS is available, you can edit the hosts file and add the IP address of the load balancer using the following syntax:

    • 10.x.x.x www.example.com

    For example: 10.0.0.143 www.example.com

  2. Restart the load balancer computer, open services.msc and try to start the newly created NGINX Web Server service.

    • If the service does not start, there may be an issue with its path. To try and solve this issue, run NSSM install on the same folder as described under step 8 and define the service via the NSSM GUI (making sure to specify the parameters properly).

  3. Edit both web config .js files on the BriefCam server (located at C:\Program Files\BriefCam\WebServices\ProWebClient\webConfig.js and C:\Program Files\BriefCam\WebServices\ProWebAdminClient\web.config.js) using the syntax below. This syntax refers to the load balancer address. The endpoints in both files must point to the load balancer.

    • //www.example.com/ProWebApi/

    • //www.example.com/AdminApi/

  4. In the BriefCam Administrator Console, set the environment settings with the following values:

    • DB.LocalStorageAddress: “//www.example.com/ProWebApiStorage"

    • BaseVideoUrl: “https://www.example.com/vsg”. If you are not using SSL, use “http” instead of “https”.

    • ClientNotificationEndPoint: “//www.example.com/signalr" (without port 7080)

    5. VideoProcessingGatewayUrl in https is not supported.

    VideoProcessingGateWayUrl will use http and not https because it is communicating between two internal processes (real-time engine and Video Processing gateway web service). This is on purpose to save resources.

  5. You now need to update certain parameters, so that the embedded client will reach BriefCam using an HTTPS protocol. In order to do this:

    a. Open the BriefCam.MilestoneEmbeddedViewer.dll.config file, which is located at: C:\Program Files\Milestone\XProtect Smart Client\MIPPlugins\BriefCam.

    b. Change the URLs (highlighted below) to include HTTPS:

    <appSettings>
    <!--Client site address-->
    <add key="serverAddress" value="https://SMB29/Synopsis/" />
    <!--Boa site address-->
    <add key="boaServerAddress" value="https://SMB29/BOA" />
    <!--add key="boaVersion" value="1.0" /-->
    <!--add key="keepAliveIntervalMS" value="60000" /-->
    <!--add key="httpTimeout" value="5000" /-->
    <!--add key="pageLoadTimeoutMS" value="1000" /-->
    <!--add key="BrowserLogLocation" value="c:\DotNetBrowserLog.txt" /-->
    </appSettings>

  6. Browse to the application and make sure that it works with https requests.

    For example:

Generic configurations

For any other type of load balancer, you need to configure the following redirect rules based on the URL:

  1. Notification Service

    Search for: /signalr

    Redirect to: notification-server:7080

  2. Video Streaming Gateway

    Search for: /vsg

    Use rewrite rule to remove /vsg from the url

    Redirect to: videostreaming-server:5010

  3. Web Services>

    Search for: /

    Redirect to: briefcam-webserver

Logging

To handle the log rotation:

  1. Download the log rotation text from here: Log rotation script and create a bat file:

    1. Copy the text from the link to a .txt file and name it LogRotation.

    2. Change the file extension from .txt to .bat.

  2. Save the script (.bat file) to C:\NGINX.

  3. Create an OS user (such as bcuser), a user on the OS level, or create a Windows user account. The user does not need admin rights.

  4. Edit the C:\NGINX folder’s security options and assign full control to the user that you created in step 3.

  5. Click Start (Windows key) and type secpol.msc to open the Local Security Policy utility.

  6. Go to Security settings > Local Policies > User Rights Assignment.

  7. Right-click Log on as a batch job and add the user.

  8. Add a daily scheduled task to run the C:\NGINX\LogRotation.bat file. Make sure to select Run whether user is logged on or not. By default, the last 10 days will be retained (retention period in days). If you want a different number of days, when running the batch file, enter the required number of days as a command line argument. For example, for 20 days, use: C:\NGINX\LogRotation.bat 20.

Network security considerations

  • The network segment hosting the BriefCam servers / virtual computers should be separated from other networks by a firewall and access should be granted only via ports configured in NGINX. For additional information, see the Using an HTTPS Host.

  • Administrative access to the servers, such as RDP, should be allowed either over VPN or from administration bastion hosts. A bastion host is a server that allows access to a private network from a public network, such as the internet. Bastion hosts are vulnerable to potential attacks and should be kept as secure as possible.

  • If DPI / WAF/ URL protection are required – they should be implemented on the firewall when pointing to the operational BriefCam NGINX host.

Upgrade Steps

To upgrade XProtect Rapid REVIEW select the UPGRADE option on the installer screen as shown below.

Note that using this installer to upgrade XProtect Rapid REVIEW, you can only upgrade from version 6.1 or above:

  1. Stop all BriefCam services and close all open applications before starting the upgrade process.

  2. Select the UPGRADE option on the installer screen.

  3. If you are upgrading, the tab name will not show Rapid REVIEW. To change the tab name, open the BriefCam.MilestoneEmbeddedViewer.dll.config file, which is located at: C:\Program Files\Milestone\XProtect Smart Client\MIPPlugins\BriefCam.

  4. Add the following text under the <appSettings> node:
    <add key="InstallationType" value="SMB" />

  5. Save the file.

  6. Log into XProtect Smart Client.