1
Design and Implementation
of Milestone XProtect
key
formatted bullets
Agenda
• Introduction
• Product Differences
• Milestone VMS Design Considerations
Storage, bandwidth, performance
• 2014 Review of New features
• Overview of main Corporate features
• Milestone Best Practice
• Live Demo of common Setup and Configuration aspects of a
–XProtect Professional Product
3
Introduction
By the end of this seminar you should have the necessary
knowledge to:
•
Understand Milestone XProtect Architecture
•
Design a Milestone XProtect Solution
•
Install - configure Milestone XProtect Software
•
Troubleshoot a Milestone XProtect installation
5
key
formatted bullets
Design Considerations
Before designing a system
consider the following:
● FPS requirements ● Resolution
● Recording criteria ● Codec selection ● Scene Complexity
● Fixed / Variable Bitrate
Traffic monitoring Airports Sports Arenas Transportation High FPS Schools Small Shops Housing Estates Retail – POS Medium FPS Office Buildings Car Parks Warehouses Convenience Stores Low FPS
key formatted bullets
Codec Selection
• Server (Recordings)
• Bandwidth • Processing • Storage• Smart Client (Viewing)
• Bandwidth • Processing Group of Pictures (GOP) 1Full (Key or I) frame then a series of changes (P and B frames) Lower storage and
bandwidth requirements Higher CPU requirements Average Full HD Frame ~ 25KB
H.264
Every frame is a full image Higher storage and bandwidth requirements Lower CPU Requirements Full HD Frame ~ 90KBMJPEG
JPEG
H.264
7 key formatted bullets
Codec
JPG
H.264
GOP – Group
of pictures
Live
Bitrate and image
size from camera
9
Example Image Sizes
Resolution
H.264
MJPEG
D1/4CIF
5KB
30KB
HD 720p
15KB
80KB
HD 1080p
25KB
110KB
3MP
30KB
140KB
5MP
60KB
180KB
How to calculate
bandwidth
11
key
formatted bullets
How to Calculate Bandwidth
Average Image Size (
KB
)*Frame Rate*
8
/
1024
=MBIT/S
Important: Storage is measured
in Bytes and bandwidth is
measured in bits.
There are 8 bits in a Byte
Live optagelser - Hurtige Diske - Evt Raid 0
Arkiv – Evt Raid 5 Smart Klient
Kamera feed
Live
Playback
Example 1:
34 cameras, 1080p resolution, 20 FPS using h.264
How to Calculate Bandwidth - Example
13
Example 2
40 Analogue Cameras, 4CIF resolution, 25 FPS using h.264
60 Cameras, 1080p resolution, 15 FPS using h.264
40 Cameras * 5 * 25 * 8 bits=40.000 Kb/s /1024 =
39 MBIT/s
60 Cameras * 25 * 15 * 8 bits=180,000 Kb/s /1024=
175 MBIT/s
Total: 39 Mb/s + 175 Mb/s =
214 MBIT/S
15
● Live Database (Camera to Disk)
● Continuous random writes from cameras
● Generally - High performance SAS or (SSD) drives ● RAID 0, 1, 10 (SPEED) or JBOD
● Archive Database (Disk to Disk)
● RAID 5 or 6 (Redundancy) ● Min 20% Overhead
Best practice to keep the windows OS on seperate disk
Configuring your Disks
17
19
Storage Performance Calculation
Disk Load =
Camera Data Throughput
(MByte/s)+
SC
Read Load
(MByte/s) +
Archive Load
(MByte/s)
What to be aware of:
• Incoming camera load
• Smart Client playback load
• Archive Performance
• Live Viewing – (Buffer related)
Live optagelser - Hurtige Diske - Evt Raid 0
Arkiv – Evt Raid 5 Smart Klient
Kamera feed
Live
Playback
21
Storage Performance Calculation
20 cameras, HD – 720p resolution, 25 FPS using h.264
Incoming cameras 15 KB*25=375 KB /1024=0,366 MB/s * 20 = 7.32 MB/s
Smart Client playback Load 8 Cameras*15 KB*25 FPS /1024 = 2.92 MB/s
Archive Copy/Move process
23
Storage Space Calculation
20 cameras, HD – 720p resolution, 25 FPS using h.264
Constant recording 100 % 31 Days retention
Live
7.32mb * 60s * 60m * 24h = 1064620 MB /1024 = 1039 GB
per 24 hours
Min 20% overhead – ideally more in case archive goes offline
Archive
1039 GB * 31 = 32209 GB /1024 =
31 TB
QUIZ
25
Win a FREE Essential license
98 Cameras, 1080p resolution,
25 FPS using h.264
50 % Motion
30 Days retention
Total: ________
Mbit/s
??
Total: ________
TB Storage
??
26
Win a FREE Essential license
98 Cameras, 1080p resolution, 25 FPS using
h.264
50 % Motion
30 Days retention
98 Cameras * 25 * 25 * 8 bits = 490.000 Kb/s
/1024 =
Total: ??
98 Cameras * 25KB *25FPS = 61250 KB / 1024 =
59,8 MB/S
59,8 * 60 (seconds) * 60 (minutes) * 12 (hours) for
50 % recording
=
2583360
MB / 1024 = 2522 GB / 1024 =
2,46 TB
27
Win a FREE Essential license
98 Cameras, 1080p resolution, 25 FPS using h.264
50 % Motion
30 Days retention
98 Cameras * 25 * 25 * 8 bits = 490.000 Kb/s /1024 =
Total: 478,5 Mbit/s
98 Cameras * 25KB *25FPS = 61250 KB / 1024 =
59,8
MB/S
59,8 * 60 (seconds) * 60 (minutes) * 12 (hours) for 50 %
recording
=
2583360
MB / 1024 = 2522 GB / 1024 =
2,46 TB
2,46 TB * 30 =
29
Archive retention time is not being met
Just because an archive
retention time of 30 days is set for a given camera does not
mean you will achieve this. It depends on the space
available and on the settings of the camera(s)
It’s important to know what the bitrate of the camera is. As we can see on the example here then the image size for a JPEG image is 103 KB thus this will take up a lot of space.
Archive retention time is not being met
How many GB do we need for
this one camera at 768*432
resolution and an intended
retention time of 20 days ?? + 50 % Motion based recording
A) 40 GB
B) 120 GB
C) 560 GB
D) 2 TB
31
Archive retention time is not being met
Storage calculation formula
Incoming camera image size 103 KB * 25 (FPS) =
2575 KB /1024 = 2,5 MB/s
So 2.5 MB is being commited to disk per sec
If recording 50% of the day it would result in:
2.5 MB/s
* 60s * 60m * 12h = 108000 MB /1024
=
105.4 GB
per 24 hours
Configuring settings
after install
40
2014 XProtect
Professional VMS
Products
Products and focus areas
● XProtect Enterprise 2014
● XProtect Professional 2014
● XProtect Express 2014
● XProtect Essential 2014
● XProtect Go 2014
● XProtect clients 2014
Easy to use
Easy
to upgrade
Easy to install
42
Key feature enhancements
• One common installer Improved simplicity for
users at all levels
Easy to install
• License Activation improvements
• Update Notifications in the Mgmt. App.
Enhanced simplicity when updating and upgrading VMS
Easy
to upgrade
• Maps in XProtect Essential & XProtect Express
• Automatic motion detection sensitivity adjustment • Camera search & Export storyboarding
Improved manageability and usability
Easy to use
Easy to install
● One common installer for all XProtect Professional VMS
Products, removing the risk of mismatch between installer and SLC
● One portfolio name covering:
● XProtect Enterprise
● XProtect Professional
● XProtect Express
● XProtect Essential
● XProtect Go
● Improved guidance in the Management Application to simplify the license activation process
44
Easy to upgrade
XProtect Professional 8.5 Upgrade Software License Code inSoftware Registraton Download SLC
Download XProtect Professional 2013
installer
Run the XProtect Professional 2013
installer
Import SLC during
install Complete install Start the Management Application Activate the license
XProtect Professional
2013
The release of XProtect Professional VMS products 2014
simplifies the processes when performing product updates
Previous process when upgrading to a new version of the same product*This can be done if the system is connected to the Internet and it has a valid Software Upgrade Plan (SUP)
XProtect Professional 2013
Download the XProtect Professional 2014
installer
Run the XProtect Professional 2014
installer Complete install
XProtect Professional 2014
Easy to use
● Automatic motion detection sensitivity
adjustment
● Adjusts the sensitivity level to optimize the
motion detection algorithm for the background noise level in the video stream
● Significantly enhances the accuracy of the motion detection analysis in environments with changing light conditions
46
Automatic adjustable VMD sensitivity
● Optional automatic sensitivity control of
recording server based motion detection
● Algorithm based on background noise in
the video stream
● Enhances detection accuracy
● Especially in environments with changing light conditions
● Eliminates the need for manual
adjustment
Motion Data for Smart Search
Easy to use
• Simple Map - exclusive to XProtect Essential and XProtect Express
● Single-layer interactive map providing graphical overview of the entire installation
● Easily navigate and locate video recordings after the incident has taken place ● Visual assistance to identify different cameras and camera views
Features Simple map
XProtect Essential & XProtect Express 2014 Advanced map XProtect Professional and higher
Preview live image Go directly to camera via map
48
Turning video into evidence
• Find evidence faster • Optimized search
possibilities in the Sequence Explorer
New Smart Search
• Ensures availability of recordings • Extends retention time • Overview of locked evidence
Evidence Lock (Corporate)
• Piece video from multiple cameras together • Present in cohesive flow • Reduced size Storyboarding
Managing
Cases
Document and
Present
50
New Features Live Demo
Smart Search
Story Boarding for export
Camera Search
Customer Requirement
16 locations with 25 cameras at each site
Ability to centrally recieve alarms and centrally
view Live from all sites
52
Federated
Interconnect
Master Slave
Milestone Federated Architecture™
Main monitoring site
XProtect Corporate
Federated site 2
Federated site 3 Federated site 4 Federated site 1
Central Management
Each site can run independently with access rights being delegated from the parent site
One base license covers all sites Central alarm management Central Smart wall viewing Full functunality at each site
54
Milestone Interconnect
Central surveillance site
XProtect® Corporate Any size Any number Remote management Remote surveillance XProtect®NVR XProtect® Essential
XProtect® Express XProtect
® Professional
XProtect® Enterprise
Advanced rule creation, Live viewing, Alarm management, Retrieval of recordings, Time based access rights, System status and
monitoring, Bookmarking, Remote
Management of interconnected systems, Central control of camera settings, Ability to record locally / centrally or at both locations.
These features all work centrally regardless if the remote site’s XProtect VMS offers the functions or not.
Management Client
Site information System information Access credentials Interconnected systems56
Licensing
Remote site Central site Interconnected camerasNormal XProtect Corporate Base License (XPCOBT)
Licensed independently and via normal XProtect base licenses + camera licenses
One Milestone Interconnect Device License (XPCOMIDL) per enabled interconnected camera
Possibility to interconnect a subset of cameras in the remote system
Master slave
Enterprise – Unlimited servers – unlimited cameras
per server
Professional – Unlimited servers – 64 cameras max
per server
58
Master Slave Configuration
Master
Slave
Smart Client
Mobil / Web Client
Blå linie = Kamera traffic Rød linie = Authentikering
Master Slave Configuration
This feature cannot be enabled in 30day trial mode – you must add the initial license to all Servers
In a WorkGroup - Create an identical Windows User on each server involved
Decide on the Master Server then add the Slave Servers to the Master Server under Master/Slave entry in the MGMT Application
Ensure that you have enabled external access for each and every Slave Server to be added, as the flow of traffic for the Smart Client Live feeds go direct from the Image Server of each server to the Smart Client.
60
Quick review of
key Corporate features
High Availability
Edge Storage
62 • Failover transparant for operators • Recordings automatically synchronized
High Availability
Cold standby• Optimized for cost efficient failover • Operates with failover groups
• Failover policy per device
Hot standby
• Optimized for high availability • One-to-one pair configuration • Failover policy per device
Recording
Servers FailoverRecording Servers Management Server
Recording
Servers Hot standbyFailover Recording Servers Management Server Configuration Configuration Operator Operator
64
Matrix
Typical mistakes
1.Remember under managment application you enter the IP
of the Client and
not
the server
2.Remeber to ensure any firwall is not blocking the entered
port ”Default 12345”
3.Ensure to enter the username, password and port into the
smart client settings for the matrix
66
Matrix
1) XProtect Smart Client user selects to send a camera to a Matrix recipient
2) Information sent to Management Server
Port: device dependent and configurable
-typically port 80 for AD user and 443 for basic user.
Protocol: HTTP for AD user and HTTPS for basic
user
3) Management Server sends request to Matrix recipient on specified IP address and port (XProtect Smart Client 2)
Port: configurable – default is 12345 Protocol: TCP
4) Streams are sent to XProtect Smart Client from Recording Server on request
68
Reduce bandwidth to
Smart Client
CPU on Client PC
Core I7-2600 = benchmark 8869 CPU 70% utilisation H.264 VGA SVGA 720p 1080p 3mp 5mp 5 FPS 245 164 100 52 27 21 7 FPS NA NA NA NA NA NA 10 FPS 110 90 54 30 14 11 12 FPS NA NA NA NA NA 10 15 FPS 73 45 28 19 10 NA 20 FPS NA NA NA NA 7 NA 30 FPS 44 33 18 10 NA NA MJPEG VGA SVGA 720p 1080p 3mp 5mp 5 FPS 360 265 164 64 48 22 10 FPS 192 130 88 31 22 NA 15 FPS 128 95 52 21 16 NA 20 FPS 94 88 40 12 10 NA
70
key
formatted bullets
How to reduce Bandwidth to Smart Client
• Dual streaming (If camera supports it)
• Use of Transcoding (Be aware of consequences on
server resources)
• Update on motion only
• Use more intelligent incident awareness methods –
I.e Alarms / Matrix
key
formatted bullets
How to reduce Bandwidth to Smart Client
Transcoding – Image Quality setting
Full: The default setting, providing the full quality of the original video
(No transcoding)
Super high (for megapixel): Re-encoding to an output width of 640
pixels (VGA) and a JPEG quality level of 25%.
High: Re-encoding to an output width of 320 pixels (QVGA) and a JPEG
quality level of 25%.
Medium: Re-encoding to an output width of 200 pixels and a JPEG
quality level of 25%.
Low: Re-encoding to an output width of 160 pixels and a JPEG quality
72
Live Demo of Smart Client
Viewing options
Enable Live FPS in Smart
Client
74
Enable Live FPS in Smart Client
Live optagelser - Hurtige Diske - Evt Raid 0
Arkiv – Evt Raid 5 Smart Klient Kamera feed Live Playback Arkiv
http://download.milestonesys.com/
ForceFramerateStatus.zip
High CPU on Recording server
Many modern cameras have very advanced VMD built in. This can be used instead of the Milestone motion detection.
1. Log into the camera’s web interface directly and configure the motion detection events.
2. Enable the motion event in XProtect
3. In the Recording properties for cameras configured to send motion detection data – you can set the recording to be conditional and/or event based you can then cause the detection of motion onboard the camera to begin writing records to disk,
4. This will greatly reduce the processing to be
completed by the Server and can allow for more cameras to be configured per server
76
Events won’t appear in Smart Client
1) XProtect Smart Client requests alarm list from Event server
Port: configurable – default is 22331 Protocol: TCP
2) Alarm list retrieved from SQL server and returned to XProtect Smart Client
Port: 1433 Protocol: TCP
3) Alarm handled and state and details updated by the user
4) New state and details stored on SQL server
Port: 1433 Protocol: TCP
78
Mobile – Data flow
1) Live stream(s) retrieved from cameras
Port: device dependent and configurable
-typically port 80
2) Streams are sent to Milestone Mobile server for transcoding or as direct
stream
Port: configurable - default port 7563
Protocol: configurable, TCP/IP, UDP Multicast
– default TCP/IP
3) Streams are sent to Mobile Client or Web clients
Port: device dependent and configurable
-typically port 8081 for HTTP and 8082 for HTTPS
80
Mobile server – New
features and scalability
XProtect Web Client & Milestone Mobile
● Keyword based camera and view search
● GPS position potential in Video Push (Via Meta
Data)
82
Keyword based camera and view search
● All-new way of working with views and cameras ● Instant keyword based search function for
• Individual devices (cameras and other devices) • Views (based on name or content)
● Benefits
• Makes it easier for users to find cameras and views
• Complement to the hierarchical view structure defined in the Smart Client
1
2
3
1
Mobile Server
• Transcoding
• Methods to reduce server
resources
• Settings on mobile
• Load Balancing for large scale
use
• 2014 differences – Client side
decoding
84
Mobile Server – load balancing
Load balancing (Debian or other similar 3rd party method)
User logs into the web or mobile client using the url - IP of the
load balancer not individual IP of a mobile server
Mobile server – New
features Live Demo
86
88
90
External access for Mobile
and Web Client
External Access for Mobile and Web Client
1. Find your external IP this can for example be found on the
following page:
www.whatismyip.com
2. Find your local servers IP i.e. 192.168.1.10
3. Go to your routers web interface and find Port forwarding
4. Configure a rule: Forward port 8081to local servers internal IP
– Save and restart services
92
Milestone Retail Solutions
Xprotect Transact
96
98
100
102
XProtect Upgrades
● XProtect:
● GO
● Essential
● Express
● Professional
● Enterprise
● Expert
● Corporate
When upgrading start by taking a backup.
XML or SQL(studio managment tool)
Simply upgrade over the top without needing
to uninstall first. The configuration is kept.
Enterprise -> Expert is possible at a license
level and for free if you have a SUP. But it
requires a fresh install.
Since Corporate 2013 then it’s not necessary
to remove any components pre upgrade.
XProtect Upgrades – View Groups backup
The Smart Client view groups are not part of the normal backup taken from the Management Application.
Hence these need to be backed up separately.
This is done by copying the contents of the following location:
C:\ProgramData\Milestone\Milestone Surveillance\SmartClientViewGroups To restore place this folder in the same location on the server.
C:\Documents and Settings\All Users\Application Data\Milestone -(W2003)
104
Adding new recording server on Expert
and Corporate
While maintaining the settings of
Adding new recording server
● To ensure that a replacement Recording Server can connect properly with your XProtect® Corporate Management Server—and match its existing
configuration in the SQL database—follow these steps: ● Obtain the unique identifier for the old/existing instance:
● In the Management Client's Site Navigation pane select Recording Servers. In the Overview pane select the old recording server. Select its Record or Streams tab. ● Hold the CTRL key down and go to the Info tab
● A Globally Unique IDentifier (GUID) number will appear
● On the new/replacement server:
● Navigate to c:\Programdata\Milestone\XProtect Corporate Recording Server\ ● Stop the Recording Server service
● Find and make a backup copy of the file RecorderConfig.xml
● Open the file in a text editor, such as for example Windows® Notepad ● The file will starts with:
<?xml version="1.0" encoding="utf-8"?> <recorderconfig>
<recorder>
<id>250ae727-78d6-430e-813f-5afd7ec5579c</id> <displayname>support-v2.milestone.dk</displayname>
Paste the old GUID into the string that starts with <id>
Example:
106
PTZ
• Set encoding on cameras to MJPEG instead of a compressed format like MPEG4 or H.264
• *Video in h.264 is sent in chunks called GOP's. A new GOP is streamed every second, however the Smart Client requires the GOP to be downloaded
(in the buffer) to be played. This in itself introduces a delay.
108
Live Demo of Alarms and
Maps
Inteligent method of gaining situational
awareness
Live Demo of LPR
What to be aware of when configuring
Setting up White/Black/VIP lists
Country codes
CPU impacts
110
Real world configuration
scenarios
112
Orphaned video footage
Video footage that is copied via a windows copy to another
location than it’s original recorded location will no longer
be accessible from the Smart Client. Reason being it’s no
longer indexed.
Using the Player then you can point to the path of
the footage and then open up the cameras to view
them.
Real world scenarios
• Archiving to a NAS
• External access for the smart client
• Master Slave setup - flow of traffic
• Mobile Push
• External access for Smart Client
• External access for Web and mobile client
• How to reduce bandwidth
• Use the cameras own motion detection not Milestones
• Activating an output
114
Archiving to Network Attached Storage NAS
Network archiving is available from XProtect Express upwards.
Following installation, Milestone services will run under the ‘Local System’ account and this account does not have read or write access to a NAS as it is local to the machine not the NAS
Change user account settings to be able to archive to NAS 1.Click Start, type services.msc <RETURN>.
2.Locate the Milestone XProtect Recording Server service, double-click it and click the Log On tab.
3.Choose This Account, provide the user name/password for the local or network user account with full read and write permissions to the desired NAS and
click OK.
4.Right-click the Milestone XProtect Recording Server service and select Restart. 5.For the Milestone Image Server service, repeat steps 3-5.
116
External access for Smart
Client
External Access for Smart Client
1. Find your external IP this can for example be found on the
following page:
www.whatismyip.com
2. Insert your Internet port seen below. I.e. The same as the
image server (Local port)
3. Find your local servers IP i.e. 192.168.1.10
4. Go to your routers web interface and find Port forwarding
5. Configure a rule called: Forward image server port to local
servers internal IP – Save and restart services
118
External Access setup Live
Demo
Configuring Events
Outputs
Inputs
Generic Events
Manual events
120
Activate an Output
Outputs can be used for many purposes like turning on a light
or opening a gate.
• Initially create an output for your device then create a manual event with a relevant name.
• Once this is done go to output control on event and tie the two together.
• Final step is to drag the manual event to a view in the smart client from where you can activate it.
Events Live Demo
Outputs
Inputs
Generic Events
Manual events
122
AntiVirus and Firewall
Ports to be Allowed
Image Server Service Event Server Service Mobile Server Service Matrix
Notification Server – Customer Dashboard Screen Recorder Camera images 80 Telnet 22331 Telnet 1234 Telnet 1237 Telnet 8081 Telnet 12345 Telnet 6050 Telnet 52211 Telnet 554 Telnet
124
Services to be Excluded
• With some Antivirus we have seen the services and applications scanned even with the directories excluded so it is good practice to exclude these
All XProtect services and applications in the following directories
C:\Program Files (x86)\Milestone\Milestone Surveillance C:\Program Files (x86)\Milestone\XProtect Event Server
C:\Program Files (x86)\Milestone\DevicePack\devices\proxysrv C:\Program Files (x86)\Milestone\XProtect Smart Client
C:\Program Files (x86)\Milestone\Milestone Screen Recorder C:\Program Files\Milestone\Milestone Mobile Server
Directories to be excluded
XProtect Services and Applications to be excluded Exclude the locations
C:\Program Files (x86)\Milestone C:\ProgramData\Milestone
C:\ProgramData\VideoDeviceDrivers
126
Network
• Dual Network Cards
• Segregate the camera and client networks
• Reduce the risk of bottlenecks
128
Install Prerequisites
Installation Prerequisites
• Ideally don’t deliver a server direct to site!
• Install the latest Windows patches including .NET 4.5
• Format the Live and Archive drives to 64Kb block size
• Register the license in
MyMilestone
• Download the latest installer from Milestone
• Download the latest Device Pack from Milestone
• Check the firmware on the camera is supported
130
Installation Prerequisites
• Software:
http://www.milestonesys.com/Support/Technical-Support/Self-Help/downloads/
• Device Packs:
http://www.milestonesys.com/Support/Software-Upgrades/Download-device-packs/
• Check the firmware on the cameras is supported
http://www.milestonesys.com/Support/Technical-Support/supportedhardware/
132
Milestone Husky Series Configurations
Base Configuration s Milestone Husky M10 Arcus Milestone
Husky M30 Husky M50Milestone Husky M50-HMilestone
Form Factor Fan-lessdesktop Workstation 2U Rack mount
Cameras 8 10 / 20 10 / 20 / 40 / 80 32 Analog / IP RAM Memory 4 GB 4 / 8 / 16 GB 16GB 16GB
VMS, Video &
O/S Storage 1TB 32GB mSATA2TB to 4 TB
32GB mSATA 4TB to 24TB RAID option 32GB mSATA 16TB CPU Viewing Clients
134
136
138
140
Getting help from Milestone
• F1 Provides easy access to the manual as it directs to the correct
page depending on the feature that is highlighted.
• Manuals and Guides
• Knowledge Base articles online
• Support Forum
• Distribution
Before Contacting Support
●If you suspect a software issue, please obtain the following information before submitting a case:
● XProtect Software License Code (SLC) ● Software Version and lettered release ● Screenshots if applicable
● The output from SurvCollector (log collection tool)
• Run from C:\Program Files (x86)\Milestone\Milestone Surveillance\Diagnostics • Run the info collector for Corporate and Expert
142
Contacting Presales
• Server estimations
•
http://www.milestonesys.com/Support/Presales-Support/Request-for-Server-Specifications/
144