FortiAnalyzer – FortiOS 6.2.3 – FortiRecorder

FortiRecorder

The FortiRecorder module allows you to set up, manage, and view cameras directly through the FortiAnalyzer GUI.

Cameras can be set to record continuously and/or when motion is detected. Recorded video is stored in the root storage of the FortiAnalyzer device, however, it can be accessed from other ADOMs.

FortiRecorder includes two panes:

  • Camera Manager: Allows you to configure devices, profiles, and schedules.
  • Monitor: Allows you to view streaming and recorded video from configured devices.

Configuring cameras in the Camera Manager

In the Camera Manager pane, you can set up and manage the cameras connected to the FortiAnalyzer FortiRecorder module.

Creating a camera key

In order to enable cameras in the FortiRecorder module, a camera key must be created.

Camera keys are used by FortiAnalyzer to generate camera admin and operator passwords.

Only one camera key is required per FortiAnalyzer.

To set a camera key in the CLI:

config fortirecorder global

set camera key end

Setting up a camera

New cameras automatically detected by FortiAnalyzer will appear in the FortiRecorder> Camera dashboard.

In order for FortiAnalyzer to detect cameras automatically, the cameras must be:

l Assigned a DHCP address through a connected FortiGate. l Connected with Power over Ethernet (PoE) to the FortiAnalyzer.

If a DHCP server is not available, cameras can also be set up with a static IP address through the Create New menu in the Camera dashboard.

A camera key must be set before cameras can be activated in FortiAnalyzer. See Creating a camera key on page 143.

To activate a camera detected by the FortiAnalyzer:

  1. Go to FortiRecorder > Camera Manager > Camera.
  2. Select the Unauthorized
  3. Right-click a detected camera and select Authorize. The Edit Camera Device menu will open.
  4. Configure the camera settings, then select OK.

Camera settings will vary depending on the model of camera detected. For information on the individual camera settings, see the FortiRecorderAdministration Guide.

  1. Once successfully authorized, the camera will be enabled.

If a camera fails to connect, it will be displayed with an error icon. Right-click the device to Disable it and then attempt to Enable it again. This will reload the default settings for the device and may correct issues which are preventing it from connecting successfully.

In a HA configuration, FortiRecorder devices should only be configured on the FortiAnalyzer device on which they were set up. When attempting to modify a camera being managed by another device, a warning message will be displayed.

Configuring camera profiles

Camera profiles define which video profile, schedules, recording types, and storage options are set for each camera.

You can modify the default camera profiles, create new profiles, or clone an existing profile in the Camera Profile dashboard.

To create or edit a camera profile:

  1. Go to FortiRecorder > Camera Manager > Camera Profile.
  2. Click Create New or select an existing camera profile and click Edit.
  3. Configure the following information:
Name Enter a name to identify the camera profile.
Video Profiles  
Recording profile Select a video profile from the dropdown list to set the resolution, frames per second, video codec, bitrate, quality, and audio of the recorded video. See Configuring video profiles on page 147.
Viewing profile Select a video profile from the dropdown list to set the resolution, frames per second, video codec, bitrate, quality, and audio of the streaming video. See Configuring video profiles on page 147.
Schedule By default, the schedule is set to Always.

New schedules can initially only be added through the FortiAnalyzer CLI. See Assigning camera schedules to a profile on page 148.

Recording & Detection Settings  
Recording type Select the recording type(s). l Continuous: Records video for the entire duration of the schedule, regardless of movement.

l Motion detection: Records a video clip each time the camera’s sensor detects movement.

See Enabling motion detection on page 150.

Schedule By default, the schedule is set as Always.

New schedules can initially only be added through the FortiAnalyzer CLI. See Assigning camera schedules to a profile on page 148.

Storage Options  
Continuous recordings Select the storage options for continuous recordings: l Keep until overwritten: Retain video until all available disk space is nearly full. The oldest video will be overwritten.

l Delete: Remove video when it exceeds the specified maximum age. Note that if the disk is full before the maximum age is reached, the oldest video will still be overwritten.

Detection recordings Select the storage options for detection recordings: l Keep until overwritten: Retain video until all available disk space is nearly full. The oldest video will be overwritten. l Delete: Remove video when it exceeds the specified maximum age. Note that if the disk is full before the maximum age is reached, the oldest video will still be overwritten.

l Use continuous recordings if available: If a recording of the detected event is already stored as a continuous recording, the detection recording will not be saved to avoid duplication.

  1. Select OK.

Configuring video profiles

By default, there are three video profiles.

l low-resolution l med-resolution l high-resolution

The default video profiles can be customized, and new profiles can be created.

To create or edit a video profile:

  1. Go to FortiRecorder > Camera Manager > Video Profile.
  2. Click Create New or select an existing video profile and click Edit.
  3. Configure the following information:
Name Enter a name to identify the video profile.
Video codec Select a video codec from Default, H.264 AVC, and H.265 HEVC.
Resolution Select the amount of detail in the image from the dropdown menu.

Lower resolutions feature less detail but are faster to transmit.

Higher resolutions produce a clearer image but require more bandwidth. A higher resolution is preferable if the camera is recording a large space, such as a parking lot, where small details like faces and license plates could be important.

Note: Resolution greatly impacts performance, bandwidth, and the rate at which the disk space is consumed.

Frames per second Type the number of frames per second (FPS).

Conventional video is 24 frames per second. More frames per second may be useful if you need to record very fast motion, but increasing FPS will also increase disk usage and CPU usage.

Bitrate mode Select a bitrate:

Variable: Automatically adjust the stream to the minimum bitrate required by the current video frames while maintaining video quality.

Fixed: Manually specify a constant bitrate.

Specifying a bitrate that is too low may result in poor quality. Specifying a bitrate that is too high may needlessly consume extra bandwidth.

Bitrate Type the bitrate that will be used.

This setting appears and is applicable only if the Bitrate mode is Fixed.

Quality Select the video quality from Extra Low, Low, Normal, High, and Extra High.
Audio enable Toggle to enable or disable audio in the video stream or recording.
  1. Select OK.

Creating and editing camera schedules

The FortiRecorder module includes one default schedule: Always.

The default schedule can be customized, and new schedules can be created.

To use a custom camera schedule, it must first be assigned to the camera profile through the FortiAnalyzer CLI.

Once assigned, you can use the FortiAnalyzer GUI to select the new schedule for each recording stream or recording type. See Assigning camera schedules to a profile on page 148.

To create or edit a camera schedule:

  1. Go to FortiRecorder > Camera Manager > Schedule.
  2. Click Create New or select an existing schedule and click Edit.
  3. Configure the following information:
Setting name Description
Name Enter a name to identify the camera schedule.
Description Enter a description of the schedule (optional).
Type Select a schedule type:

l Recurring: The schedule happens at specified times on selected days. l One-time: The schedule happens only during the specified date-range.

Days Select the days you want the camera to begin recording if you have selected the Recurring schedule type.
All day Select this option if you want the camera to record all day long.
Start time/End time Select the start and end time for the Recurring recording or the start and end date for the One-time recording.
  1. Select Save.

Assigning camera schedules to a profile

By default, camera profiles are set to use the Always schedule.

To assign a custom schedule to a camera profile, you must first enable it through the CLI. Once enabled, a table is added to the Camera Profile editor which allows you to select the custom schedule.

After the first custom schedule has been enabled on a profile, subsequent schedules can be selected directly through the GUI. New schedules can be created by clicking the Create New button above the table.

For more information on creating a custom schedule, see Creating and editing camera schedules on page 148.

To enable a recording schedule in the FortiAnalyzer CLI:

config fortirecorder camera profile edit [profile name] config recording-schedule edit [schedule name]

end

To enable a video schedule in the FortiAnalyzer CLI:

config fortirecorder camera profile edit [profile name] config video-schedule edit [schedule name]

end

To assign the schedule through the GUI:

  1. Go to FortiRecorder > Camera Manager > Camera Profile.
  2. Select the camera profile and click Edit.

A table appears underneath the Video Profiles and/or Recordings & Detections Settings sections, depending on where you enabled the schedule.

  1. Select a recording type or recording stream, then click Edit.
  2. Select a schedule from the dropdown menu.
  3. Click OK.

 

Enabling motion detection

Motion detection can be enabled on cameras through the Camera Profile.

To enable motion detection:

  1. Go to FortiRecorder > Camera Profile.
  2. Click Create New or select an existing camera profile and click Edit.
  3. In Recordings & Detections Settings select Motion detection as the recording type.

Both Continuous and Motion detection recording types can be enabled at the same time.

  1. Enter any additional settings you want to configure for this camera profile and click OK.
  2. Go to FortiRecorder > Camera and double click the camera where motion detection is to be enabled.
  3. In the camera settings, select the profile where motion detection is enabled.
  4. Select OK.

Motion detected recordings can be viewed in the Monitor dashboard, and is identified in red in the camera’s activity timeline. See Watching live and recorded video in the Monitor on page 150.

Watching live and recorded video in the Monitor

The Monitor pane allows you to view the streaming and recorded video captured by devices configured to the FortiAnalyzer.

To view a video stream:

  1. Go to FortiRecorder > Monitor.
  2. Click Add Widget.
  3. Select the device to be displayed from the dropdown menu.
  4. Once added, the widget displays the video stream from the selected camera.

To watch recorded video:

  1. Go to FortiRecorder > Monitor. The recorded video clips for each camera appear in a timeline below the video stream.
  2. To locate a video clip, use the scroll wheel on your mouse to zoom in on a time frame. Ensure that your mouse cursor is centered in the area that you want to zoom in. You can also navigate the timeline by dragging it to the left or right.
  3. Click on a recorded video in the timeline to begin playback. Time periods in the timeline panel are color-coded: l Light blue: Recorded video clips. l Red: A motion detection-based recording that was not initiated by a schedule. l White/blank: No recording at that time period.
  4. To return to the live stream from the recording view, click Back to Live.

Video can also be viewed in a Picture in picture mode.

This option opens a small window which persists outside of the browser.

To launch Picture in picture mode, select the menu icon on the bottom-right side of the video and choose Picture in picture.

Enabling and disabling FortiRecorder

By default, the FortiRecorder module is disabled in FortiAnalyzer.

The FortiRecorder module can be enabled or disabled on supported platforms through the FortiAnalyzer CLI.

To enable the FortiRecorder module in the CLI:

config system global set disable-module none

end

To disable the FortiRecorder module in the CLI:

config system global set disable-module fortirecorder

end

Supported platforms and cameras

Supported platforms

Below is a list of the FortiAnalyzer appliances that support the FortiRecorder module.

Platform   Maximum number of cameras Storage (TB)
FAZ-200F   4 4
FAZ-300F   6 4
FAZ-400E   12 6
FAZ-800F   16 8
FAZ-1000E   30 18
FAZ-2000E   40 30
FAZ-3000F   50 42
FAZ-3700F   60 216

Supported cameras

The following FortiCamera models are supported in the FortiRecorder module: l FCM-CB20 l FCM-FD20 l FCM-FD20B l FCM-FD40 l FCM-MB40 l FCM-MD20 l FCM-MD40 l FCM-OB30

 

This entry was posted in Administration Guides, FortiAnalyzer, FortiOS 6.2, FortiRecorder on by .

About Mike

Michael Pruett, CISSP has a wide range of cyber-security and network engineering expertise. The plethora of vendors that resell hardware but have zero engineering knowledge resulting in the wrong hardware or configuration being deployed is a major pet peeve of Michael's. This site was started in an effort to spread information while providing the option of quality consulting services at a much lower price than Fortinet Professional Services. Owns PacketLlama.Com (Fortinet Hardware Sales) and Office Of The CISO, LLC (Cybersecurity consulting firm).

Leave a Reply

Your email address will not be published. Required fields are marked *

This site uses Akismet to reduce spam. Learn how your comment data is processed.