No good deed...

HCHTech

Well-Known Member
Reaction score
4,268
Location
Pittsburgh, PA - USA
I've been putting out fires all day - I'm ready for a drink!

I get a call at 8am this morning from one of my small office clients - "Security guy is here and he needs you to help him install new camera software on the server" - ugh. I hate getting blindsided by crap like this. So I remote in and get the guy on the phone, and install his new and wonderful software that lets any workstation in the office see the security camera feed. In the past, folks just used a browser to hit the web interface of the DVR box - I'm not sure what was wrong with that method, but whatever I guess.

The thing installs without incident and it works - ok, good - we disconnect and on to the next project.

About a half hour later, the phone rings - it's the client - "We're not getting email on our phones". Yup - it figures. Another remote session, all the services are running, I restart exchange and IIS, no help. Hmm. I bring up a browser on my machine and put in their IP address as https - expecting to hit the IIS page, but no. No response. So I go into IIS Manager on the server and sure enough, the CompanyWeb site is stopped and can't be restarted - file in use by another process. I think I found the problem.

Some searching through the services, and I find Xitami Web Server - obviously installed by the new camera software. Once I stop that and set it to disabled, I can restart the CompanyWeb site and voila, the activesync starts working again. I'm guessing it takes over port 443 or something like that. I look, but don't see any way to change the port used by that web server, so I'm awaiting a call back from support now to see what our options are. I'm sure it will be a scintillating discussion.
 
Last edited:
Holy crap...I can't believe a security company like that thinks it is OK to install their web based software on an existing server at a business! Have they no partial concept that there may (and likely) be existing data and apps already in place..that could be stepped on?

I'd be grabbing my ax and swinging at neck level!

Always...always...always..put utilities/sevices such as cameras on a totally separated, isolated box. Especially since those are often exposed to the internet, and rarely ever kept up with firmware versions...and importantly..security. Typically with default creds.
 
Always...always...always..put utilities/sevices such as cameras on a totally separated, isolated box.

Yeah, I should have said that right from the start - first thing tomorrow, though!

An no, they don't have any concept about stepping on existing configurations - it's like the comcast voiceedge techs - as long as their crap works, their work is done, who cares how it might screw up existing infrastructure.
 
Back
Top