About Central_Support

Question   Do you know about Embedded Login Firewall of Bosch IP cameras?   Answer   Embedded Login Firewall | Intelligent Device Access Protection   Introduction   As IP video devices have become more connected and exposed to global networks, so too has their exposure to the threat from cyber-attacks. Attacks can range from simple attempted log-in using a dictionary attack to more sophisticated attacks such as cross-site scripting. Since most cyber-attacks are based on unauthorized access and control of devices, our first line of defense is credential check and how log-in attempts are treated. There are many methods in which credential checks can be implemented, and these can vary from vendor to vendor. Many vendors simply increase the lock-out period with every wrong attempt, like e. g. a standard Linux system does. While this could provide a reasonable obstacle for an attacker it also has some drawbacks for clients with a wrong or incomplete configuration, and for installers working to set up a system. The disadvantage of this approach is that, for example, if the user has a typo in his password he may be locked out for a few minutes before he can try again. In case this happens to an installer, it means non-productive but valuable time and money for him and his customer. Some vendors even lock out a user completely after a certain number of wrong attempts. For an installer, this means he has to factory default a device, not only dismissing the passwords but also all previous configuration settings that need to be done again. We don’t want to lock out our own configuration tools and clients nor to place obstacles for our installers, so we implemented a more intelligent solution.   Embedded Login Firewall The Embedded Login Firewall of all Bosch IP cameras, introduced with firmware version 6.30, consists of a two-level system which makes use of two integrated functional modules.   The logging module The logging module observes clients’ log-in attempts and gathers information about these clients and their behavior: ► What server or service is targeted with the attempted log-in (RCP, HTTP, Terminal, Web service, iSCSI, FTP, SNMP)? ► Is at least one of the log-in credentials correct in the log-in attempt to any of these servers? ► Are there repeated log-in attempts and failures? The module logs and memorizes up to the last 32 attempted logins to include client IP addresses, client actions and last access time.   The firewall module The firewall module blocks access and data traffic from clients which are rated ‘suspicious’ by the logging module. ► TCP-Connections are blocked before they get connected. ► UDP Unicast and Broadcast packets are discarded before being processed by the application. By blocking access and data traffic on socket level already, the Embedded Login Firewall requires only insignificant computational power to handle unauthorized access and is thus less prone to denial-of-service (DoS) attacks.   The benefits The Embedded Login Firewall does not require any configuration. It automatically selects the appropriate level of protection to provide full transparency to positively acknowledged clients while blocking unauthorized log-in attempts. The 20 seconds period is derived from user tests and balanced against probability. On one side, it is short enough that a human user would not experience any blocking while he tries to log in. On the other side, it is long enough to make any attack, and the results of it, unattractive to an attacker. Running a password hacking sequence would extend towards months, if not years, given the password being reasonably strong. For Configuration Manager, a blocking due to misconfiguration of the password for device access would automatically disappear after 20 seconds once the password had been corrected. Same is valid for any other misconfigured client. While the Embedded Login Firewall provides reliable access protection in case of an attack, it is quickly „self-healing“ once a password misconfiguration has been corrected, allowing all the “good guys” to seamlessly continue their work.   The decision tree The intelligence in the Embedded Login Firewall is based on behavioral analysis. If there are 3 or fewer failed log-in attempts to a single server within 20 seconds, the system only observes. For a human user, this period is typically too short to enter 4 wrong attempts triggering the firewall. Hence, the typical user will have the chance to continuously try to get his password correct without being blocked. An automated system, like a configuration tool, e. g. Configuration Manager, or an attacking botnet, will try to get access to a device repeatedly and much faster. Depending on the number of connected or connecting clients the system choses between two modes: ► Blacklist mode If all recently active clients can be stored in the history (32 IP addresses), the Embedded Login Firewall uses the “Blacklist” mode: IP addresses which have been successfully logged in are put on an “authenticated” list and kept there for 15 minutes. During this period, an accidental wrong authentication is ignored. IP addresses which have never been successfully logged in and had more than 3 failed log-in attempts during the last 20 seconds are blocked. This ensures that allowed clients are not blocked also while a fast attack is running. ► Whitelist mode When the number of recently active clients exceeds the capacity of the history buffer, in other words, when the number of clients exceeds 32, the Embedded Login Firewall uses the “Whitelist” mode. Then, only IP addresses, which were registered with at least one successful login to any server on the device within the last 24 hours are allowed to access. Access from a maximum of 32 clients which have been considered “good guys” is possible in this mode. All other clients, most probably including all the “bad guys”, are blocked until the number of failed log-in attempts drops below the alarm threshold of 4 wrong attempts within 20 seconds, and another client expires from the list of 32.   Event logging and history Each login attempt is logged in the camera’s event logging, both successful and unsuccessful. The camera provides an internal history buffer for short-term lookups. When a longer history is required, external logging to a syslog server is advised. Refer to our tech note about Log Management.   Attack and Anomaly Detection The Embedded Login Firewall has the possibility to actively inform a monitoring system about anomalies in system access or an active attack.   RCP message registration A monitoring system that integrates our RCP+ protocol can register on the message CONF_LOGIN_LIMITER_MESSAGE to receive a trigger on a relevant change.   Refer to the RCP+ documentation that is published with every firmware release via our product catalog. Messages are sent: ► With every first successful login ► From the third failed login onwards, but only up to 10 messages to avoid denial-of-service (DoS) situations. Messages contain only entries for the recent events, like they are also stored in the event log, and not a whole list. Content of the message in a tagged list format includes status, server name, remote address and user name fields.   SNMP trap Whenever a RCP+ message is created, the camera checks if a SNMP trap shall be sent. The SNMP trap contains the same message structure. Refer to our tech note about SNMP setup and usage.   The win on security An Anomaly Detection system can analyze the status, repetition, burstiness and content of the messages or traps to protect the installation and help keep the system healthy. With an installation perfectly optimized, meaning camera access is under control and no camera is loaded with too many access attempts during regular system operation, an attack can be detected easily and very fast due to an immediate report of irregular access patterns, allowing a quick attack response.   Glossary TERM / ABBREVIATION EXPLANATION Client A software component or tool that connects to a server or service on a host system by using specific interfaces and protocols Credential In IT context, credentials mean secret data that are required to identify, authenticate and/or authorize a user. The data could be e.g. passwords, keys, tokens, or certificates. Cross-site scripting Cross-site scripting (XSS) is a type of computer security vulnerability typically found in web applications. XSS enables attackers to inject client-side scripts into web pages viewed by other users. Quoted from https://en.wikipedia.org/wiki/Cross-site_scripting Cyber-attack Any type of offensive maneuver employed by individuals or whole organizations that targets computer information systems, infrastructures, computer networks, and/or personal computer devices by various means of malicious acts usually originating from an anonymous source that either steals, alters, or destroys a specified target by hacking into a susceptible system. Quoted from https://en.wikipedia.org/wiki/Cyber-attack Dictionary attack In cryptanalysis and computer security, a dictionary attack is a technique for defeating a cipher or authentication mechanism by trying to determine its decryption key or passphrase by trying hundreds or sometimes millions of likely possibilities, such as words in a dictionary. Quoted from https://en.wikipedia.org/wiki/Dictionary_attack Firmware Software, that is persistently installed and provides all functionality of an embedded device. Human user A person that behaves, thinks, acts and reacts, using tools to achieve something within its physical environment. User A person or automated instance, typically assigned with a user name or other identification data, which uses credentials to gain access to a system. A client may process those credentials for authenticating a user with a server or host system. ... View more

Bosch Alarm Management supports Bosch IP cameras which are registered to Remote Portal by receiving different triggers to be used in Alarm Management'es Service Scenario. So events can be forwarded to Alarm Management Eventmonitor website, Central Monitoring Stations and Bosch Site Monitor App. In this article it is explained in a step-by-step guide how to activate the needed services in Remote Portal to be able to connect the cameras to Bosch Alarm Management.   Step-by-step guide   1. Prerequisites:   1.1 Create your Account in Bosch Remote Portal   Please visit the article How to create a company's account in Bosch Remote Portal? to create you account in Bosch Remote Portal.   1.2 Register your cameras to Bosch Remote Portal   Please visit the article How to add Bosch IP cameras to Bosch Remote Portal? to register your cameras to Bosch Remote Portal.   2. Prepare your cameras to work with Bosch Alarm Management   2.1 Update the cameras to the latest firmware   Please visit the article What are the configuration options for Bosch IP cameras in Remote Portal? > Chapter 2 Batch firmware update to upload the latest firmware to your cameras.   2.2 Configure the Alarm Management Initial Configuration (Cloud optimized camera settings)   Cameras which are registered to Remote Portal do not get the Alarm Management ‘Initial Configuration’ applied during commissioning these cameras to Alarm Management. Therefore we recommend you to perform 10 manual configuration steps - deviating from the camera’s factory default settings - to get correct operation over the given Internet connection.   2.2.1 Save the original camera configuration in Remote Portal   Before changing the camera’s settings, save your original camera configuration in Remote Portal: 1. In Remote Portal, click the related camera card and click Configuration Save / Load in the camera’s detail page.   2. Select Save configuration tab and enter a description (e.g. ‘Original Config’) and click Save.   2.2.2 Configure the optimized cameras settings for Alarm Management.   Note: The following steps can be either performed in Remote Portal for every camera, or in Bosch Configuration Manager - certain settings even for multiple cameras at one time. Please visit the article What are the configuration options for Bosch IP cameras in Remote Portal? > Chapter 4 Remote configuration with Bosch Configuration Manager   Please follow below configuration steps to configure the Cloud optimized camera settings:   Step 1: In Bosch Remote Portal, click the related camera card and click Device Page Open. Step 2: Time Server 1. Navigate to General > Date/Time and configure the Time server address as follows: Americas: dm161.cbs.boschsecurity.com:123 dm144.cbs.boschsecurity.com:123 Europe: dm35.cbs.boschsecurity.com:123 dm44.cbs.boschsecurity.com:123 Asia/Pacific: dm261.cbs.boschsecurity.com:123 VRM IP address (when recording on VRM based recorder, e.g. Divar IP) 2. Click Set. Step 3: Time Stamping 1. Navigate to Camera > Installer Menu > Display Stamping and select Time stamping Top 2. Click Set. Step 4: Camera settings 1. Navigate to Camera > Installer Menu, select Coding standard H.264 and use the Lens Wizard to adjust camera view, focus and zoom (depends on camera model). 2. Navigate to Camera > Installer Menu > Positioning > calibrate the camera and click Set. 3. Navigate to Camera > ALC and increase Day-to-night-switchover to 0. Step 5: Stream settings 1. Navigate to Camera > Encoder Profile > select Profile 7 and configure as follows: Profile Name: CBS Recording Bit rate optimization > select Low bit rate Maximum bitrate: 1000 kbps Encoding interval > move slider to 2 fps Click Expert Settings button GOP structure > select IP I-frame distance > move slider to 4 (0.50 I-frames/s) 2. Navigate to Camera > Encoder Profile > select Profile 8 and configure as follows: Profile Name: CBS Live Bit rate optimization > select Minimum bit rate Maximum bitrate: 250 kbps Encoding interval > move slider to 5 fps Click Expert Settings button GOP structure > select IP I-frame distance > move slider to 10 (0.50 I-frames/s) 3. Navigate to Camera > Encoder Streams and configure the Encoder Streams as follows: Stream 1 Property: select maximum resolution Non-recording profile > select 7: CBS Recording Stream 2 Property > select SD Non-recording profile > select 8: CBS Live Step 6: Audio settings 1. Navigate to Camera > Audio and select Audio On 2. Input volume > move slider between blue and red color in level control 3. Line Out > move slider to max value 4. Recording format > select AAC 48 kbps Step 7: Recording Settings 1. Navigate to Recording > Recording Scheduler > select one profile (recommended: last profile (grey)) Rename the selected profile to CBS Mark the CBS profile > Click Select All > then click Set. 2. Navigate to Recording > Recording Profiles > select CBS profile     a. In field Stream profile settings Stream 1 > select 7: CBS Recording Stream 2 > select 8: CBS Live     b. In field Settings for selected recordings   Step 8: VCA Settings 1. Navigate to Alarm > VCA 2. in VCA Configuration > select Profile #1 3. Analysis type > select Intelligent Video Analytics or Essential Video Analytics (depends on camera model) 4. For MOTION+ cameras: Aggregation time > configure 1 to 4 s > click Set. 5. Click Configuration button and configure your VCA tasks, such as Motion in field, Crossing line, Loitering, etc. Note: VCA configuration needs to be performed with Bosch Configuration Manager. Please visit the article What are the configuration options for Bosch IP cameras in Remote Portal? > Chapter 4 Remote configuration with Bosch Configuration Manager Step 9: Network settings 1. Navigate to Network > Network Access 2. Set DHCP to On Note: If DHCP needs to be off on customer request > configure correct Gateway and DNS server addresses. Please visit the article How to add a camera with DHCP disabled to Bosch Remote Portal? Step 10: Cloud Connectivity 1. Navigate to Connectivity > Cloud Services Set the Cloud-based services Operation to On (if not yet done) 2. Navigate to Service > System Overview Check Cloud connectivity > should be ‘Connected‘ Note: If Cloud State is different from ‘Connected‘: Please visit the article Troubleshooting Camera Connectivity & Bosch Remote Portal    2.2.3 Save the optimized camera settings in Remote Portal   After you have configured the initial configuration, save the optimized camera settings in Remote Portal. 1. In Remote Portal, click the related camera card and click Configuration Save / Load in the camera’s detail page.   2. Select Save configuration tab and enter a description (e.g. ‘Initial Config’) and click Save.   2.3 Organize your cameras in Bosch Remote Portal Please visit the article How to organize your devices in Groups in Bosch Remote Portal? to set up groups and organize your cameras in Bosch Remote Portal   3. Activate the needed Services in Bosch Remote Portal   To connect the cameras to Alarm Management, certain services need to be activated in Remote Portal. A license is required per camera to activate these services.   3.1 The following services provide the connection to Alarm Management:   The licenses are valid 1 year after activation and usually belong to one (1) device. Service License (CTN) Features Alarm Management CBS-ALMGT-CAM Activates the connection to Bosch Alarm Management and enables Security Operation Centers (SOC) or end-customers to self-manage alarms in the Bosch Alarm Management. Alarm Transmitter CBS-ALMGT-CAT Forward camera events with activated Alarm Management Service in the Bosch Alarm Management to 3rd party Alarm Automation Platforms. Alarm Notification CBS-ALMGT-NOTI1 Use Alarm Notification to receive VCA events via the Bosch Alarm Management on your mobile device with the Bosch Site Monitor App. Cloud Storage CBS-EBR-CAM Record, store and access video event clips in the Bosch Security Cloud. Alarm Monitoring CBS-MON-CMS Use Alarm Monitoring to connect cameras to services of certified Monitoring Centers in the Bosch Partner Network. Note: Alarm Monitoring and demo licenses are available through Cloud-based Services Product Manager or Tech Support.   3.2 Add licenses into Bosch Remote Portal   1. Order the required licenses by Bosch Order desk > You will get an e-mail with the related license codes included. 2. Logon Bosch Remote Portal as Administrator 3. Navigate to Service Licenses tab 4. Click the + icon  > click Add licenses 5. Paste the license information of the e-mail into the text box and click Save   6. Confirm the licenses and click OK   7. The new licenses appear in the Licenses tab.   3.3 Activate services in Bosch Remote Portal   1. Logon Bosch Remote Portal as Administrator 2. Navigate to Systems tab 3. Select the required camera 4. Under Services select any available service and click Add Service button 5. Enable   with Auto-Renew to automatically use next available license after expiration and click Save.  Note: The services need to be activated for every camera.   4. Add your cameras to Alarm Management   Add Remote Portal cameras with the activated related service to Alarm Management: 1. Open Alarm Management Configuration website (/config), log on as Integrator or Config Agent. 2. Enter the related Account - or create a new Account for the customer. 3. Enter the related Site - or create new Site.   4. Click '+' button to add the camera to this Site. 5. Select Remote Portal Devices tab. 6. Authenticate with your Remote Portal user and password (Admin or Technician user required). 7. Click Login to Remote Portal button.   8. Select the cameras to add and click Add button.   9. The cameras are connected to Alarm Management and ready for use in the related Service Scenarios. So events can be forwarded to Alarm Management Event monitor website, Central Monitoring Stations and Bosch Site Monitor App.   Notes: To get the connection from Remote Portal to Alarm Management, working, the cameras need to be in the same region as the Alarm Management instance. If the camera does not appear in above list, verify if the related service is activated for this camera in Remote Portal.   Nice to know: For a better understanding of using the Bosch Remote Portal, we encourage you to join our online Training from Bosch Building Technologies Academy! ... View more

Question   How can you configure a Counter Report in Bosch Remote Portal?   Answer   Camera Counter Reports are available on Bosch IP cameras capable of Essential Video Analytics or Intelligent Video Analytics, which are connected directly to the Remote Portal. Camera Counter Reports poll counters from one or more cameras and store their values for up to 2 years in the cloud. Note: The counts are fetched from the cameras every 15 minutes; thereby the counters are reset to 0 in the cameras every 15 minutes. The stored data can be visualized in Remote Portal, exported as CSV data for further processing, or polled from Remote Portal through API for further processing. The license CBS-CTRRPT-CAM is needed to subscribe the Camera Counter Report. The Camera Counter Report includes up to 12 counters (from 1 to 12 cameras).   Note: Register the cameras to Remote Portal and organize them according to the following articles: How to add Bosch IP cameras to Bosch Remote Portal? How to organize your devices in Groups in Bosch Remote Portal?   1. Configure the Camera Counter Report in Bosch Remote Portal   1. Logon Bosch Remote Portal as Administrator 2. Subscribe Camera Counter Report service     a. In Services tab click on the Camera Counter Report card > Camera Counter Reports page opens    b. Click the + icon  > click New Report c. Enter the Report Name > click Save.   3. Enable Auto-renew     a. Click on the related Camera Counter Report card > Camera Counter Report details page opens     b. Toggle Auto-renew from OFF to ON to automatically apply the next Camera Counter Report license from the license pool after the current license expired.   4. Add the Camera to Counter Report service     a. Click the + icon  > click Add Camera     b. Select the related camera and counters > click Save.   Note: The counters need to be configured in VCA Configuration of the related cameras upfront. 5. Add Customer to Counter Report service     a. Click on the Camera Counter Report service card > Camera Counter Report details page opens     b. Click the + icon  > click Add Customer     c. Select the related user > click Save.   6. Now the Customer can access the Counter Report.   2. Display the Camera Counter Report in Bosch Remote Portal   1. Logon Bosch Remote Portal as Customer 2. Navigate to Reports tab   3. Click the related Counter Report card > display counters in current day, last day, last week and last 30 days view.   4. Click Export icon to export the report to .csv Note: this .csv is generated for the last maximum 30 days, depending on the option chosen before export   3. Counter Report API   Follow the attached instruction to access the Counter Report API via 3rd party application. The API allows to get the counter data per hour (accumulated in Remote Portal) or per 15 minutes (raw data from the cameras) Note: Permission as Customer is needed to get the data. ... View more

Question   What are the configuration options for Bosch IP cameras in Remote Portal?   Answer   See below the available options, services and liceses in Bosch Remote Portal   1. Options in camera details page   The following configuration options for Bosch IP cameras are provided on the camera details page in Remote Portal: Upgrade firmware Click Update to apply the latest firmware to the camera Note below the batch firmware update, which allows to update all cameras of a group or even all cameras of the entire account. Open device page (camera website) Access to device page is limited to one hour to avoid unlimited live video streaming. Edit camera password The camera passwords can be changed remotely if the installer needs access to the camera in the local network, etc. Save and load a camera configuration The camera configuration can be saved in Remote Portal and loaded back later e.g. after changes made. Enable Privacy Mode To enable the Privacy Mode restricts Administrators and Technicians from accessing the camera through Remote Portal and through its services. Privacy Mode can be activated by Administrator, Technician or Customers. Alarm Management service still allows access to the camera through Cloud VMS, even if the Privacy Mode is enabled in Remote Portal. Privacy mode can be disabled by a Customer only. Verify device states: Health Connectivity Activated Services   2. Batch firmware update In Remote Portal's List View   the firmware can be updated for more than one camera. Update icon shows available firmware     1. Select firmware update: for all groups of the company for a single group for single or multiple devices 2. Then click the Update button, the firmware gets updated, the indicator shows the progress.     Note: Before the update starts, Remote Portal shows all devices which are going to be updated, resp. the reason why some devices cannot be updated.   3. Services & Licenses in Bosch Remote Portal   3.1 The following services are activated by default for video devices with no license needed: Service Features Notes Remote Connect Remote Connect service enables connection between device, cloud and client software without network configuration on-site. Remote Connect is for free and gets automatically activated for Bosch IP cameras. Remote Connect allows the Customer to display cameras on Remote Portal Viewer Remote Connect allows the Administrator and Technician to remotely configure Bosch IP cameras with Configuration Manager. A Technician needs to be allowed to access the device or group. Please visit the article How to create a company's account in Bosch Remote Portal? A Customer needs to be added to Remote Connect service of every device which he wants to access through Remote Portal (see below). Remote Connect Lite Remote Connect Lite service enables connection between Divar network/hybrid, cloud and client software. Remote Connect Lite provides a fix domain name to access the Divar network/hybrid from remote. Divar network/hybrid require local network configuration as detailed in the Divar's Operation Manual. The user name and password need to be entered on the Divar’s local user interface (not on the Web Client). Remote Alert Remote Alert service is automatically activated when adding a device to Remote Portal. Add subscribers to Remote Alert service to get the e-mail notifications (see below).     3.1.1 Add a customer to Remote Connect Service   To add a Customer to Remote Connect service, please perform the following steps as Administrator: 1. Click on the Remote Connect service card > service details page opens 2. Click the + icon  > click Add Customer 3. Select the related user > Click Save. 4. Now the Customer can access the device. Note: Repeat these steps for all devices the customer wants to access.   3.1.2 Add subscribers to Remote Alert service   To add a subscriber to Remote Alert service, please perform the following steps as Administrator: 1. Click on the Remote Alert service card > service details page opens 2. Click the + icon   > click Add Subscriber 3. Select the related user and the related alert criteria   4. Click Save. 5. Now the subscribers get notifications by e-mail.   3.2 The following services need a license to become activated:   The licenses are valid 1 year after activation and usually belong to one (1) device. Service CTN Features Comment Camera Counter Report CBS-CTRRPT-CAM Retrieves and stores camera VCA counter values at regular intervals and provides viewing and export via the Remote Portal. Camera Counter Report includes up to 12 counters (from 1 to 12 cameras). For configuring a Camera Counter Report, please visit the article How can you configure a Counter Report in Bosch Remote Portal? Installed Apps - Provides an option for Azena (S&ST) cloud connection and access to the list of installed apps. The service requires INTEOX camera VideoView+ for cameras CBS-MOBILE CBS-MOBILE-3Y CBS-MOBILE-5Y Use VideoView+ for cameras to view your cameras from remote, to replay and perform forensic search and to receive VCA events via Alarm Management on your mobile device with the Video Security Client / Video Security App. To benefit from features provided from the Alarm Management back-end (e.g. push alarm notifications) access to Alarm Management is required. *) Alarm Management CBS-ALMGT-CAM Activates the connection to Alarm Management and enables Security Operation Centers (SOC) or end-customers to self-manage alarms in the Event Monitor of Alarm Management.  The service requires access to Alarm Management. *) Alarm Transmitter CBS-ALMGT-CAT Forward camera events with activated Alarm Management Service in Alarm Management to 3rd party Alarm Automation Platforms. The service requires access to Alarm Management. *) Alarm Notification CBS-ALMGT-NOTI1 Use Alarm Notification to receive VCA events via Alarm Management on your mobile device with the Bosch Site Monitor App. The service requires access to Alarm Management. *) EOL announced. Cloud Storage CBS-EBR-CAM Record, store and access video event clips in the Bosch Security Cloud. The service requires access to Alarm Management. *) Alarm Monitoring CBS-MON-CMS Use Alarm Monitoring to connect cameras to services of certified Monitoring Centers in the Bosch Partner Network. The service requires access to Alarm Management. *) This Service is only available for Bosch Partner CMS'es In-Store Analytics CBS-INSA-COMBOL CBS-INSA-MERCHL CBS-INSA-OPERAL Provides Retailers with customer traffic intelligence to improve in-store experience & service. The service requires access to In-Store Analytics application EOL announced. Intelligent Traffic Solutions CBS-ITS-CAM Transportation Analytics provides data services for traffic authorities to improve safety and operational efficiency. The service requires access to ITS application; currently only for demo and pilot installations Notes: *) To get access to Alarm Management and how to configure to Alarm Management, please visit the related articles. Alarm Monitoring and demo licenses are available through Cloud-based Services Product Manager or Tech Support.   3.2.1 Add licenses into Bosch Remote Portal   1. Order the required licenses by Bosch Order desk > You will get an e-mail with the related license codes included. 2. Logon Bosch Remote Portal as Administrator 3. Navigate to Service Licenses tab 4. Click the + icon  > click Add licenses 5. Paste the license information of the e-mail into the text box and click Save   6. Confirm the licenses and click OK 7. The new licenses appear in the Licenses tab.   3.2.2 Activate services in Bosch Remote Portal   1. Logon Bosch Remote Portal as Administrator 2. Navigate to Systems tab 3. Select a newly added camera 4. Under Services select any available service and click Add Service button 5. Enable   with Auto-Renew to automatically use next available license after expiration and click Save. Note: The services need to be activated for every camera. (with the exception of Counter Report which includes up to 12 counters, from 1 to 12 cameras).   4. Remote configuration with Bosch Configuration Manager   Remote Connect service allows remote configuration of Bosch IP cameras through the cloud with Bosch Configuration Manager. 1. In Configuration Manager click the Remote Portal icon 2. Enter your Remote Portal user and password (Administrator or Technician) > click OK 3. The groups and devices appear on the device list 4. The cameras can be configured from remote.   Notes: The Administrator has access to all groups and devices of the Account. The Technician needs to be added to restricted devices and groups in Remote Portal, to get these groups and devices displayed in Config Manager.   ... View more

 Find attached the French version of this article!   Use Bosch software and apps to connect remotely to your devices for configuration or maintenance simply by logging in with your Remote Portal account. To create a company's account in Bosch Remote Portal, please follow the steps below:   Step-by-step guide   Create your company's account in Bosch Remote Portal   1. Navigate in browser to https://remote.boschsecurity.com and click Sign up button. 2. Enter your company's name, your name and a password 3. Select the region (server location) which is next to your country: North America for North and South America Europe for Europe, Middle East and Africa, Asia/Pacific for Asia, Pacific Region incl. Australia and NZ   Note: The Region selects the server location on the Remote Portal’s Video Relay. To keep video streams fast, the region should be selected in the same area where the camera is located. 4. Agree to terms & conditions and to privacy statement and click Sign up button.   5. Activate your account by following the link in the received e-mail   Note: If the user does not activate the account in Remote Portal within 10 days, the user and account get deleted and the user needs to sign up once again.   User roles in Bosch Remote Portal   Administrator   After you have created your Account in Bosch Remote Portal, you are the Administrator of this account. Remote Portal provides the Administrator to: Manage users ‒ Invite further Administrators, Technicians and Customers to your account  Manage licenses ‒ Order licenses via Bosch Order Desk and apply them into your account Administrate your account ‒ Add Groups and organize a hierarchic account structure (nested groups) ‒ Add devices (Systems) and move them into these groups ‒ Grant Technicians access to certain groups and/or devices ‒ Subscribe Services and grant Customers access to these services Configure your devices and services Get Remote Alert notifications (such as device disconnected, recording stopped, new firmware available)   Technician   Remote Portal provides the Technician to: Register devices (Bosch IP cameras, Divar IP 2000/5000, Divar network/hybrid) Remotely configure your devices ‒ In Remote Portal ‒ In Configuration Manager through Remote Portal Get Remote Alert notifications (such as device disconnected, recording stopped, new firmware available)   Customer   Remote Portal provides the Customer to: Display your devices on Bosch Video Security Client or Video Security App through Remote Portal ‒ Live Video, Replay, Forensic Search Display your cameras on Remote Portal Viewer Display and export your Camera Counter Reports Get Remote Alert notifications (such as device disconnected, recording stopped, new firmware available)   Note: For further details please visit the following articles: What are the configuration options for Bosch IP cameras in Remote Portal? How to connect to your cameras with Bosch Video Security Client through Remote Portal?   Nice to know: For a better understanding of using the Bosch Remote Portal, we encourage you to join our free online Training from Bosch Building Technologies Academy! Or refer to the Knowledge Base Articles below: How to add Bosch cameras to Bosch Remote Portal? How to organize your devices in Groups in Bosch Remote Portal? How to give user access to specific cameras in Bosch Remote Portal? Show all articles about Remote Portal from Bosch Building Technologies Knowledge Base ... View more