Axon on-officer camera systems capture video and audio recordings. When the Axon user(s) finish their shifts, the Axon system is docked into the Axon Dock. The dock uploads the content securely via 256-bit SSL to Evidence.com services. Using an agency account on the Evidence.com website, Axon users can review the content, create clips, share evidence with other personnel in the organization, and download videos.
To get the dock up and running, you may need some assistance from your IT department. Axon Docks generate Internet Control Message Protocol (ICMP) packets to the DNS and gateway every 3 – 7 minutes. This is done to update the status of the gateway/DNS on the status page. Your network must allow for the transmission of these packets.
Although the Axon docks are hardened against external intrusion, it is STRONGLY recommended for maximum security that industry standard security policies be followed by placing the dock behind your agency’s firewall.
CAUTION! Network Security - DO NOT place the dock directly on the Internet. The dock must be connected behind a firewall or secure network.
The dock and Axon devices do not require any incoming data ports for regular operation. All dock communications are outbound. All video and data files are transmitted securely using HTTPS (SSL) and 256-bit AES encryption. For proper operation, the dock requires the following outbound firewall ports:
- Port 443 (TCP) opened for outgoing traffic to your agency’s domain (e.g., youragency.evidence.com). This is used by the dock to send video and data files to Evidence.com using the HTTPS protocol.
- Port 53 (UDP) opened for access to DNS, if your network uses external (internet) DNS servers. When using external DNS servers this is necessary for the dock to locate the servers for your evidence.com account.
- Port 80 (TCP) for time synchronization.
Once registered to your agency, the dock uses one of two methods to synchronize the clocks on the Axon devices:
- HTTP over port 80 (TCP) to synchronize time from youragency.evidence.com;
- HTTPS over port 443 (TCP) to synchronize time from youragency.evidence.com.
The dock requires only one of the above methods to be available. By default the dock uses Method #1 and requires port 80 be enabled for outbound access on the firewall. Method #2 is the most secure, requiring no additional ports to be opened in a firewall. However, in certain rare circumstances the HTTPS connection can fail if the clock on the dock is too far out of sync with the actual time. To enable option two, you must select the “Require SSL For Initial Time Check” checkbox on the “Administration” settings page.
Before being registered to your agency, the dock will perform time synchronization against “time.evidence.com.”
The Axon system does not currently support HTTP/HTTPS Proxies. If the dock is placed on a network where a proxy is used to access web sites, the IP assigned to the dock must be whitelisted. Depending on the specific network setup, this may require a static or reserved DHCP IP. We recommend using a DHCP reservation whenever possible to minimize configuration overhead.
IP Address Configuration
By default the dock uses standard DHCP to obtain an IP address from your agency network. If your agency uses the 10.10.1.x IP address range for your internal department network this may conflict with the default IP Address used by the configuration port (10.10.1.1). In this case it is necessary to set the dock’s configuration network address before connecting the dock to your network the first time.
If you have any questions on setup, contact us.