hkc and vanderbilt

12 hours ago, scrimshanker said:

Has anyone used the Galaxy gx app? 

 

Ive been reading on the texecom forum about the utter disaster of their app and wonder if it was just texecom how got it so wrong or whether its industry wide. 

 

I am familiar with the GX app. As long as you have the latest panel firmware and the latest Ethernet module firmware, then the app works well. The initial connection isn't as easy as it should be, but apart from that it's okay.

 

Always use a VPN to access _any_ internal devices. Port forwarding to alarm panels (and other devices) should be avoided.

 

funny you say that about a vpn as i use one for other things, but there is always something running software at each end to deal with it.

 

how can you use a vpn on an alarm? do you have to run it on a pc in your home/office?

 

If you have a decent router, then it will include a VPN option. This allows you to a single point of entry to your internal network and you can keep that point up to date with the latest firmware including the latest security patches.

http://www.draytek.co.uk/information/our-technology/vpn-overview

 

You connect to the VPN with your phone/laptop and run the app as if you are local to the panel.

 

Unlike the low cost alarm modules/boards, the router will have a decent spec CPU/memory to handle the encryption and any attacks.

 

So is that pptp or ipsec?

 

pptp isn't secure but the easiest to implement 

 

i get the router idea but most customers will have their providers standard which are rubbish in my humble opinion 

Ipsec if that is all you have.  SSL based OpenVPN is one of the best options. If a decent router is too expensive, just use the router as the DSL MODEM and place a more capable device with OpenVPN behind it as a secure gateway to your internal network.

I get the theory but customers aren't going to pay for that. But I guess that's why home networks are so vulnerable!

no need to worry as a consumer as they will sue the provider, or those that don't show the difference

You can use a VLAN or DMZ. That way if the device is attacked it will not compromise the rest of the network.

Obviously VPN would be a more secure option.

The more secure options will always require better hardware.

dmz is worst case on most routers?

id say most customers don't care as long as it works.... Trying to explain the reasons why make you the over charging numpty who charged for stuff that wasn't needed