Preview only show first 10 pages with watermark. For full document please download

Release Notes

   EMBED


Share

Transcript

Lenel Systems International, Inc. 1212 Pittsford-Victor Road Pittsford, New York 14534 Tel 866.788.5095 Fax 585.248.9185 www.lenel.com Release Notes for OnGuard® 2013 and OnGuard 2013 Service Pack 1 (SP1) Contents 1.Introduction ............................................................................................................................................ 3 2.OnGuard 2013 SP1 Release Notes.......................................................................................................... 4 2.1. Versioning Information...............................................................................................................4 2.1.1. Current CASI Firmware .......................................................................................................4 2.1.2. Current Access Series (LNL) Firmware and Special Application Versions...........................4 2.1.3. Current Security Series (NGP) Firmware ............................................................................4 2.1.4. Current ILS Firmware ..........................................................................................................4 2.1.5. Supported Operating Systems ............................................................................................5 2.1.6. Supported Database Systems .............................................................................................5 2.1.7. Supported Web Browser ....................................................................................................6 2.1.8. Internet Information Services (IIS) .....................................................................................6 2.1.9. Virtual Platforms .................................................................................................................6 2.2. New Features and Updates ........................................................................................................7 2.2.1. General ...............................................................................................................................7 2.2.2. Access Control ....................................................................................................................7 2.2.3. Encoding .............................................................................................................................9 2.2.4. Language Packs ...................................................................................................................9 2.3. Known Issues ..............................................................................................................................9 2.3.1. Access Control ....................................................................................................................9 2.3.2. Alarm Monitoring ...............................................................................................................9 2.3.3. Installation ........................................................................................................................10 2.3.4. SkyPoint ............................................................................................................................10 2.3.5. Video .................................................................................................................................10 3.OnGuard 2013 Release Notes .............................................................................................................. 11 3.1. Supported Operating System Requirements Enforced ............................................................11 3.2. Upgrades...................................................................................................................................11 3.3. Versioning Information.............................................................................................................12 3.3.1. Current CASI Firmware .....................................................................................................12 3.3.2. Current Access Series (LNL) Firmware and Special Application Versions.........................12 3.3.3. Current Security Series (NGP) Firmware ..........................................................................13 3.3.4. Current ILS Firmware ........................................................................................................13 3.3.5. Current Digital Video Firmware ........................................................................................13 3.3.6. Minimum System Hardware Requirements .....................................................................13 3.3.7. Supported Operating Systems ..........................................................................................14 3.3.8. Service Packs and Critical Patches ....................................................................................16 3.3.9. Security Utility ..................................................................................................................16 3.3.10. Supported Database Systems ...........................................................................................17 DOC-1028-EN-US (March 2014) © 2014 Lenel Systems International, Inc. revision 1.018 — 1 3.3.11. Supported System Components .......................................................................................18 3.3.12. Internet Information Services (IIS) ...................................................................................19 3.3.13. Virtual Platforms ...............................................................................................................19 3.3.14. Supported Third-party Components ................................................................................20 3.3.15. Antivirus Software Applications .......................................................................................20 3.3.16. Supported Web Browser ..................................................................................................20 3.3.17. Supported Terminal Services ............................................................................................20 3.3.18. OPC Versions ....................................................................................................................20 3.3.19. SNMP Versions .................................................................................................................20 3.3.20. Supported High Availability Systems ................................................................................21 3.3.21. End of Life Products and Features ....................................................................................21 3.4. New Features and Updates ......................................................................................................22 3.4.1. General .............................................................................................................................22 3.4.2. Central Station ..................................................................................................................22 3.4.3. Intrusion Detection ...........................................................................................................24 3.4.4. Access Control ..................................................................................................................28 3.5. Known Issues ............................................................................................................................29 3.5.1. General .............................................................................................................................29 3.5.2. Intrusion Detection ...........................................................................................................30 3.5.3. Access Control ..................................................................................................................30 3.5.4. Identity Management .......................................................................................................31 3.5.5. Visitor Management .........................................................................................................31 3.5.6. Digital Video......................................................................................................................32 3.5.7. Enterprise .........................................................................................................................39 4.Copyright and Trademark Notice ......................................................................................................... 40 DOC-1028-EN-US (March 2014) © 2014 Lenel Systems International, Inc. revision 1.018 — 2 1. Introduction These Release Notes cover OnGuard 2013 and OnGuard 2013 Service Pack 1 (SP1). For an overview of this document: • • • • Section 1 Introduction (this section) provides information on where to find installation instructions, OnGuard client purchases, OnGuard training, and the scope of this document. Section 2 OnGuard 2013 SP1 Release Notes lists the versioning information, new features and updates, and known issues that apply to the OnGuard 2013 SP1 release. Section 3 OnGuard 2013 Release Notes lists the supported operating systems, upgrades, versioning information, new features and updates, and known issues that apply to the OnGuard 2013 release. Section 4 Copyright and Trademark Notice provides copyright and trademark notices for Lenel and other third-party vendors. The Release Notes, Limitations, and Resolved Issues documents are available in portable document format (PDF) on the OnGuard disc in the ..\Program Files\OnGuard\doc\en-US\ folder. The documents can be searched using the Search All User Guides feature. For corrections and additions to the Release Notes document, refer to the Release Notes Addendum on the Lenel Web site: http://www.lenel.com/support/downloads/onguard. (You will need your Lenel login to gain access to this site.) Installation instructions are also available in PDF format on the OnGuard disc in the ..\Program Files\OnGuard\doc\ folder in the appropriate language sub-folder. For example, English documents are located in the en-US sub-folder. On 64-bit operating systems, the installation instructions are in the ..\Program Files (x86)\OnGuard\doc\ folder. . OnGuard clients purchased from Lenel no longer ship with the OnGuard software DVD. OnGuard installation and supplemental DVDs are now available for download directly from the Lenel Web site: http://www.lenel.com/support/downloads/onguard. (You will need your Lenel login to gain access to this site.) Download the OnGuard software and create a master DVD for all of your client installations. Lenel Global Education provides instructor-led, Web-based Global Distance Learning for more in depth knowledge on these new features in OnGuard 2013. The training is available for Value Added Resellers (VARs), Certified OnGuard System Users, and OnGuard System User Administrators. Visit the Lenel Web site for more details and schedules: http://www.lenel.com/training#distance-learning. DOC-1028-EN-US (March 2014) © 2014 Lenel Systems International, Inc. revision 1.018 — 3 2. OnGuard 2013 SP1 Release Notes 2.1. Versioning Information Note: This section lists the versioning information new to OnGuard 2013 SP1. OnGuard 2013 SP1 also supports versions for OnGuard 2013 as listed in Section 3.3 Versioning Information on page 12. 2.1.1. Current CASI Firmware • 1.01.064 2.1.2. Current Access Series (LNL) Firmware and Special Application Versions • • • • • • • • • • • • • LNL-1100/1200 Series 2 Version 1.32 LNL-1300 Series 2 Version 1.52 LNL-1320 Series 2 Version 1.55 LNL-2210/2220/3300 Series 2 Version 1.188 LNL-500/1000/2000 Version 3.121 LNL-1100-20DI Version 1.32 LNL-1200-16DO Version 1.32 LNL-1200-16DOR Version 1.32 LNL-1320-2RP Version 1.55 LNL-1320-S2RP Version 1.55 LNL-1380-8RP Version 1.56 LNL-3300-M5 Version 1.188 LNL-8000-MCOM Version 1.188 2.1.3. Current Security Series (NGP) Firmware • • • • • NGP: 1.03.034 (applies to NGP-22xxx and NGP-33xxx panels) NGP-1300U: NGP V11.13.02 NGP-1320U: NGP V11.13.02 NGP-1100U: NGP V11.13.02 NGP-1200U: NGP V11.13.02 2.1.4. Current ILS Firmware • Control Module (ACU): 3.0.0.25 DOC-1028-EN-US (March 2014) © 2014 Lenel Systems International, Inc. revision 1.018 — 4 2.1.5. Supported Operating Systems OnGuard 2013 SP1.0 has been approved with the listed operating systems and system service packs. All new systems shipped from Lenel will include at least these service pack versions. Operating system requirements are now enforced. Installations attempted on other operating systems will not run. Note: OnGuard is a 32-bit application that can be run on some 64-bit systems. 64-bit systems are only supported as listed in this section. For an up-to-date list of tested operating systems and service packs, refer to the compatibility charts on the Lenel Web site: http://www.lenel.com/support/downloads/onguard#compatibility-charts. (You will need your Lenel login to gain access to this site.) 2.1.5.1. Windows 8 Enterprise and Professional • • • Windows 8 Enterprise and Professional 32-bit and 64-bit are approved for all OnGuard server and client operations. Windows 8 Enterprise and Professional are not recommended for use on the Web Application Servers (LS Application Server service) because the number of client connections to IIS is limited in these operating systems. Windows 8 Enterprise and Professional will be called “Windows 8” from this point forward in the OnGuard Release Notes. 2.1.5.2. Windows Server 2012 Standard • • Windows Server 2012 Standard 64-bit is approved for all OnGuard server and client operations. Windows Server 2012 Standard will be called “Windows Server 2012” from this point forward in the OnGuard Release Notes. 2.1.6. Supported Database Systems • • • • • Microsoft SQL Server 2012 SP1 (32-bit and 64-bit) and Express Microsoft SQL Server 2008 R2 SP2, 32-bit and 64-bit Oracle 12c R1 Server 64-bit (12.1.0.1) with 32-bit Client installed if OnGuard is running on the same server as the database Oracle 11g R2 Server 32-bit (version 11.2.0.4) Oracle 11g R2 Server 64-bit (version 11.2.0.4) with 32-bit Client installed if OnGuard is running on the same server as the database For an up-to-date list of tested database systems, refer to the compatibility charts on the Lenel Web site: http://www.lenel.com/support/downloads/onguard#compatibility-charts. Notes: When creating or modifying an ODBC connection on a 64-bit operating system, the location where the ODBC Data Sources are configured is different than on 32-bit operating systems. For 32-bit operating systems, click Start > Settings > Control Panel > Administrative Tools > Data Sources. For 64-bit systems, navigate to C:\windows\SysWOW64 and run the odbcad32.exe file. DOC-1028-EN-US (March 2014) © 2014 Lenel Systems International, Inc. revision 1.018 — 5 2.1.7. Supported Web Browser • Internet Explorer 8.0, 9.0, or 10.0 (Required for License Administration and Web applications) 2.1.8. Internet Information Services (IIS) • Windows Server 2012: IIS 8 Note: IIS is required for the Web Application Server. The following minimum settings are required for the browser-based applications to function properly: • • • • Common HTTP Features: – Static Content – Default Document – Directory Browsing – HTTP Errors – HTTP Redirection Application Development: – ASP.NET – .NET Extensibility – ISAPI Extensions – ISAPI Filters Security: – Windows Authentication – Request Filtering Management Tools: – – – IIS Management Console IIS 6 Metabase Compatibility IIS 6 WMI Compatibility 2.1.9. Virtual Platforms • • VMware ESX 5.5.x for all OnGuard services and database server with software-based license only VMware Workstation 10.0.x DOC-1028-EN-US (March 2014) © 2014 Lenel Systems International, Inc. revision 1.018 — 6 2.2. New Features and Updates 2.2.1. General • • OnGuard Versioning Strategy (OG-27162): Starting with OnGuard 2013 SP1, the version field in OnGuard will now contain and display four (4) numeric positions: [Major version].[Minor version].[Build number].[Hot Fix number] For example: 6.6.287.0 – The Major and Minor positions are for product release identification (for example, 6.6 = OnGuard 2013). – The Build position increments for daily builds of product releases and subsequent service pack builds. A service pack is a tested, cumulative set of all hot fixes in addition to fixes for recently found issues. A service pack may also contain new features and/or product support. – The Hot Fix position identifies Hot Fix builds. A hot fix is an update that targets a limited number of specific issues. Removal of Mercury Serial Number License Check (OG-27420): The “Disable Hardware Serial Number Verification” license bit was removed in order to reduce Technical Support calls during customer conversions. 2.2.2. Access Control • • Lenel M Series: OnGuard 2013 SP1 supports the new Lenel M Series, a user-configurable controller for use with the OnGuard access control and alarm management software platforms. For more detailed information, refer to the following articles in the Lenel Knowledge Base (http://kb.lenel.com): – DOC-1016-EN-US LNL-3300-M5 Quick Reference – DOC-1017-EN-US LNL-1100-20DI Quick Reference – DOC-1018-EN-US LNL-1200-16DO Quick Reference – DOC-1019-EN-US LNL-1200-16DOR Quick Reference – DOC-1020-EN-US LNL-1320-2RP Quick Reference – DOC-1021-EN-US LNL-1320-S2RP Quick Reference – DOC-1022-EN-US LNL-1380-8RP Quick Reference – DOC-1027-EN-US LNL-8000-MCOM Quick Reference – DOC-1039-EN-US LNL-3300-M5 Configuration Mercury Access Timing Support (OG70-CR038): Adding specific settings to the ACS.ini configuration file will now allow customers to control the following settings for the LNL “Access Series” Controllers. In each case, the described setting must be added to, or updated in, the [Service] section of the ACS.ini configuration file on the machine running that controller’s Communication Server: • EscortTimeout: Time to wait after a card is presented that requires an escort. Each subsequent card presented restarts the timer until a card that is an escort is presented, or the timeout value is reached. Valid range is 1-60 seconds; default is 15 seconds (EpEscortTimeout=15). DOC-1028-EN-US (March 2014) © 2014 Lenel Systems International, Inc. revision 1.018 — 7 • • • • • • MultiCardTimeout: Time to wait for subsequent cards to be presented when multicards are required. Valid range is 1-60 seconds, default is 15 seconds (EpMultiCardTimeout=15). AssetTimeout: Time to wait after an asset is presented for a subsequent asset or authorized card to be presented. Valid range is 1-60 seconds; default is 10 seconds (EpAssetTimeout=10). Bosch 9412GV4 and 7412GV4 Support (OG-26776): The GV4 update for the D9412GV4 panels includes an increase to the number of areas (32) and panel users (999), while the support for both the D9412GV4 and the D7412GV4 includes additional changes necessary to account for the expanded functionality set offered by the GV4 protocol panels. GV4 firmware version 1.10 is supported. The control panel is not configured using OnGuard, but rather the Bosch software; therefore, it should be installed and configured according to the manufacturer documentation. For more detailed information, refer to the Lenel Knowledge Base (http://kb.lenel.com) article, Bosch GV4 Series Intrusion Control Panel Configuration, DOC-1102-EN-US. Support for ATS and Bosch Intrusion Panels: OnGuard 2013 SP supports the ATS Intrusion Panel and the Bosch B Series Intrusion Control Panel Support for Assa Abloy Aperio™ Wireless Locks: OnGuard 2013 SP supports Assa Abloy Aperio™ wireless locks. For more detailed information, refer to the Lenel Knowledge Base (http://kb.lenel.com) article, Assa Abloy Aperio Locks, DOC-607-EN-US. Support for Schlage AD-400/300 Wireless Lock Configurations: For more detailed information, refer to the Lenel Knowledge Base (http://kb.lenel.com) article, Schlage Locks, DOC-608-EN-US. Schlage PIM (Panel Interface Module) connected to an LNL-3300: You can connect up to 16 PIMs per downstream port with a maximum of 64 locks across the entire access panel. Each PIM supports up to 16 AD-400 wireless locks. For performance reasons, a maximum of 8 PIMs per downstream port is recommended. – Schlage PIM connected to an LNL-2210: Connect one (1) PIM to the LNL-2210 with up to 16 AD-400 wireless locks attached. The PIM and LNL-2210 can be installed as separate units or as a PIM400-1501 with both components in the same enclosure for ease of installation. – Schlage AD-300 wired directly to LNL-3300/2210: With this configuration, you can mix both AD-400 wireless locks and AD-300 hard-wired locks on the same downstream port. Up to eight (8) AD-300 locks are supported by the LNL-2210. Once you configure an AD-400 or AD-300 device on a given downstream port, other device types cannot be mixed on that port. You can only add more Schlage devices. For example, Lenel devices (such as the LNL-1320) and Schlage devices cannot share the same downstream port. In addition, Wiegand support is available for the Schlage PIM400-TD2 connection to the LNL2220/1320/1300. Connects up to 2 locks (Door 1 & 2) to the access panel. This method does not provide the support of the new OnGuard integrated versions. – Note: The use of the LNL-500W is no longer required as an upstream device between the access panel and the PIM400-485/TD2. DOC-1028-EN-US (March 2014) © 2014 Lenel Systems International, Inc. revision 1.018 — 8 • • Override Reader Mode: Available on LNL and Lenel M series controllers and access panels. The Override Reader Mode is as an additional reader mode used by some commands in OnGuard that overrides the standard reader mode. While an Override Reader Mode is active, any changes to the standard reader mode are not applied to the reader (but are tracked by the panel in the background). Commands that use the override will expire after a configured time or must be aborted before the standard reader mode will be restored. When the override is aborted or expires, the current state of the standard reader mode is restored. OnGuard commands that support the Override Reader Mode include All Reader Lock/Set Mode (Local I/O), Double Card Unlock/Toggle, Schlage Interior Pushbutton (IPB), and Aperio First Card Unlock. All Reader Lock/Set Mode (Local I/O Function): Use the All Reader Lock/Set Mode function to change the mode of ALL READERS assigned to an access panel to LOCKED for the amount of time specified when executed with TRUE. The Locked mode remains in effect until the amount of time specified in the function expires. 2.2.3. Encoding • OnGuard 2013 SP1 supports CSSN SDK 10.00.08 (OG-27145): This version of the SDK supports the ScanShell 1000B Passport Scanner, new passports, and enhanced drivers licenses. The SDK is available on the Lenel Web site: http://www.lenel.com/support/downloads/onguard. (You will need your Lenel login to gain access to this site.) 2.2.4. Language Packs • 2.3. Language Support Available after Upgrading OnGuard 2013 (OG-27368): Upgrading to OnGuard 2013 SP1 automatically installs all released language packs. Existing customers of OnGuard 2013 will not need to re-apply a language pack after installing the upgrade. New customers will not need to download or apply a language pack at all. All customers must have the appropriate license bit enabled for language support, and must configure their OnGuard systems to run with a language pack (for example, run the Database Translator utility). For more information, refer to the Language Release Notes and Language Pack User Guide. Known Issues 2.3.1. Access Control • “Assume Door Used” setting conflicts with the escort function for a turnstile door type (OG-27815): When an escort required badge is presented to a turnstile reader, followed by the escort badge, both badges generate Granted Access events but the strike only fires one time, allowing only one person through the turnstile. The “Turnstile” and “Assume Door Used” settings are not compatible. This issue applies only to Access Series (LNL) products. 2.3.2. Alarm Monitoring • Lenel M Series: “Door Held Open Restore” alarm is generated in Alarm Monitoring when a “Door Forced Open” event occurs (OG-27864): If a “Door Forced Open” event occurs on an LNL-1320-2RP or LNL-1320-S2RP connected to an LNL-3300-M5, a “Door Held Open Restore” alarm is generated in Alarm Monitoring along with a “Door Forced Open Restore” event. DOC-1028-EN-US (March 2014) © 2014 Lenel Systems International, Inc. revision 1.018 — 9 2.3.3. Installation • Installation procedure for SQL Server 2012 is different than installation procedure for SQL Server 2008 (OG-27128): The installation procedure for SQL Server 2008 Standard Edition, as explained in the OnGuard 2012 Installation Guide (DOC-110, Revision 2.030, March 2012) is different than the procedure necessary for installing SQL Server 2012. To properly install SQL Server 2012, refer to Installing and Configuring SQL Server 2012 (DOC-1005-EN-US), located in the Knowledge Base at www.kb.lenel.com. 2.3.4. SkyPoint • Upgrading from SkyPoint 2.0 to SkyPoint 3.5 recommended before upgrading OnGuard (OG-27206): To ensure proper operation of SkyPoint, Lenel recommends upgrading from SkyPoint 2.0 to SkyPoint 3.5 before installing OnGuard 2013 SP1. In order to use SkyPoint 2.0, a manual update to the Communication Server application configuration file (Lnlcomsrvr.exe.config) is required. On each Communication Server: 1. Stop the “LS Communication Server” service. 2. In the OnGuard installation directory, navigate to the Lnlcomsrvr.exe.config file. 3. Open the Lnlcomsrvr.exe.config file in a text editor. 4. Change the default “3.5” to “2.0” as shown below: 5. Save the Lnlcomsrvr.exe.config file. 6. Restart the “LS Communication Server” service. 2.3.5. Video • TruVision Recorder Support: OnGuard 2013 SP1 supports the following TruVision recorders: TVR11, TVR11C, TVR11D, TVR40, TVR41, TVN20, TVN21, TVR42, TNV50, and TVR60. The TruVision TVR41 Add-On is required. DOC-1028-EN-US (March 2014) © 2014 Lenel Systems International, Inc. revision 1.018 — 10 3. OnGuard 2013 Release Notes 3.1. Supported Operating System Requirements Enforced The installation or upgrade of OnGuard 2013 will be blocked on any operating system version not specifically listed as supported in Section 3.3.7 Supported Operating Systems. To install OnGuard 2013, upgrade to a supported operating system and service pack. 3.2. Upgrades Direct upgrades of the OnGuard software are supported for all currently supported versions of OnGuard. (The list of currently supported versions of OnGuard can be found in Knowledge Base article 1345: http://kb.lenel.com/article.aspx?article=1345&p=2.) For versions prior to OnGuard 2005 Second Edition (5.11.216), an incremental upgrade will need to be performed to get to 5.11.216. Systems from 5.11.216 and newer can and should be upgraded directly. Note: • Review each of the following items carefully to determine whether additional steps are needed for your particular upgrade. End of Life Products Must Be Deleted Prior to Upgrade (OG-23947): The Database Incompatibility Wizard will run during an upgrade and perform the following checks: 1. Checks for existing configuration data that must be manually removed before the upgrade can continue. Installation cannot proceed if any of the following are detected: Hardware: AAD Readers, AMD 12 Input Panels, Apollo Hardware, Asset Reader Interfaces, Cisco AIC Hardware, Digitize CAPSII Receivers, Identix Fingerscan V20 Readers, LNVS Hardware • Smart Card Formats: Cartographer, CombiSmart, GSC (DESFire), GuardDog, IE Smart Touch, Offline Guest, TI Access Control, UltraScan, Windows Certificate 2. Warns that any existing custom reports and DataExchange scripts may not work after upgrade (if they exist). User is prompted as to whether or not they would like to continue installing OnGuard. • 3. Warns the user about the existence of the following biometric data that is automatically removed by Database Setup. User is prompted as to whether or not they would like to continue installing OnGuard. • • • Identix Fingerprint Templates Ultrascan Fingerprint Templates • Biocentric Fingerprint Templates 4. Warns the user, if STENTOFON audio server is configured, that they will need to install the STENTOFON add-on after upgrading OnGuard. This prompt does not allow the user to stop the upgrade. It is simply an informative message. Upgrading from OnGuard versions Earlier than OnGuard 2005 Second Edition (5.11.216) (OG-22273): If upgrading a database from versions of OnGuard earlier than OnGuard 2005 Second Edition (5.11.216), the installation utility notifies you that it cannot perform the upgrade because the database is too old. The solution is to go to http://www.lenel.com and then click Support > Downloads. Under Software > Legacy Database Setup, read the Readme file, and then download and unzip the 5.11.216 Database Setup file. Run the StpDB.exe file, and then run Database Setup again. DOC-1028-EN-US (March 2014) © 2014 Lenel Systems International, Inc. revision 1.018 — 11 • • 3.3. Oracle Regions with Many Events Might Experience Long Database Setup Run Time (OG-15176): During an upgrade of an OnGuard 2008 (6.0) or earlier system running Oracle with millions of events, regions might take an extended amount of time to run Database Setup. The length of time this takes can be extended on systems that additionally have thousands of custom event parameters. The amount of time required to upgrade might exceed a day (24 hours). Badge Design Programming with List Builder Lists Will Not Function in BadgeDesigner After Upgrade from OnGuard 2006 (5.12.110) or Earlier (OG-15935): Any badge layout programming configured in BadgeDesigner that uses controlling fields with List Builder lists will not function after an upgrade from OnGuard 2006 (5.12.110) or earlier. This might cause the badge design for newly printed badges that use any UDF drop-down fields configured with List Builder to be incorrect. To resolve this issue, run the Program Badge Repair Utility located at \Program Files\OnGuard\ProgramBadgeRepairUtility.exe after running Database Setup to upgrade your database. Versioning Information 3.3.1. Current CASI Firmware • 1.01.058 3.3.2. Current Access Series (LNL) Firmware and Special Application Versions • • • • • • • • • • • • • • LNL-1100-U, LNL-1200-U, LNL-1300-U, LNL-1320-U Version 10.14 LNL-500/1000/2000 ISC Version v3.120 LNL-2210/2220/3300 ISC Version v1.143 LNL-1100/1200 Series 1 Version v1.04 *LNL-1100/1200 Series 2 Version v1.31 LNL-CK Rev A Version v1.30 LNL-CK Rev B/C Version v1.50 LNL-1320 Series 1 Version v1.13 *LNL-1320 Series 2 Version v1.51 LNL-1300 Series 1 Download not supported *LNL-1300 Series 2 Version v1.51 Bioscrypt with LNL-500B gateway firmware v1.26 RSI biometrics with LNL-500B gateway firmware v1.25 Recognition Source PIM-485-16-OT with wireless LNL-500W gateway firmware v1.10 * Note: Before downloading the firmware in this release to downstream Lenel access control boards, ensure that DIP switch or jumper 8 is in the OFF position. Failure to take this step will result in an inability to communicate to these boards until the switch or jumper position is corrected, and might therefore affect normal operation of your system. By default, boards are shipped with DIP switch or jumper 8 in the OFF position. DOC-1028-EN-US (March 2014) © 2014 Lenel Systems International, Inc. revision 1.018 — 12 3.3.3. Current Security Series (NGP) Firmware • • • • • NGP: 1.03.032 (applies to NGP-22xxx and NGP-33xxx panels) NGP-1300U: NGP V11.08.02 NGP-1320U: NGP V11.08.02 NGP-1100U: NGP V11.08.02 NGP-1200U: NGP V11.08.02 3.3.4. Current ILS Firmware • • • • • • • • • • • • Control Module (ACU): 3.0.0.21 Prox Reader: 3.0.0.1 iCLASS Reader: 3.0.0.2 MIFARE® Reader: 3.0.0.14 WLM NA (North America): 0.9.21358 WLM EU (Europe): 0.9.21366 PDA Application (serial): 2.0.4.5 PDA Application (USB): 3.0.1.2 WWM NA (North America): 0.9.21358 WWM EU (Europe): 0.9.21366 WMC Ethernet Firmware: 2.0.21791 WMC Wi-Fi Firmware: 2.0.21791 3.3.5. Current Digital Video Firmware • • • • • • Lenel Digital Video Recorder (LDVR) - Firmware Version 7.21 Hot Fix 2.0 Lenel Network Video Recorder (Lenel NVR) - Firmware Version 7.0.825 and Lenel NVR 7.0.816 Intelligent Video Server (IVS) - Firmware Versions 7.0.825 and 7.0.816 Intelligent Video Application Server (IVAS) - Firmware Versions 7.0.825 and 7.0.816 Remote Monitor - Firmware Version 7.0.816 Lenel Streaming Video Server (LSVS) - Firmware Version 7.0.825 and 7.0.816 3.3.6. Minimum System Hardware Requirements • • • • • • Pentium IV 1 GHz Processor 2 GB RAM DVD-ROM USB Port 1024x768 color display 6 GB of available space DOC-1028-EN-US (March 2014) © 2014 Lenel Systems International, Inc. revision 1.018 — 13 3.3.7. Supported Operating Systems The following products have been approved with the listed operating systems and system service packs. All new systems shipped from Lenel will include at least these service pack versions. Operating system requirements are now enforced. Installations attempted on other operating systems will not run. Note: OnGuard is a 32-bit application that can be run on some 64-bit systems. 64-bit systems are only supported as listed in this section. For an up-to-date list of tested operating systems and service packs, refer to the compatibility charts on the Lenel Web site: http://www.lenel.com/support/downloads/onguard#compatibility-charts. (You will need your Lenel login to gain access to this site.) 3.3.7.1. Windows 7 with Service Pack 1 • • • • • • Windows 7 SP1 Enterprise, Professional, and Ultimate 32-bit and 64-bit are approved for all OnGuard server and client operations. Windows 7 is not recommended for use as the Web Application Server (LS Application Server service) because the number of client connections to IIS is limited in this operating system. Windows 7 Enterprise 32-bit is supported for communication with HID Edge Devices. Windows 7 Enterprise 64-bit is not supported for communication with HID Edge Devices. Lenel NVR is supported on Windows 7 SP1 32-bit and 64-bit. Windows 7 SP1 Enterprise, Professional, and Ultimate will be called Windows 7, from this point forward, in the OnGuard 2013 Release Notes. 3.3.7.2. Windows Server 2008 R2 with Service Pack 1 • • • • • Windows Server 2008 Standard and Enterprise R2 SP1 64-bit are approved for all OnGuard server and client operations. Windows Server 2008 Standard and Enterprise R2 SP1 are approved for use as a Lenel NVR product host operating system. Windows Server 2008 Standard and Enterprise R2 SP1 can be utilized as the separate OnGuard server with Lenel Digital Video products. Note: Windows Server 2008 is not approved for use as any Lenel Digital Video product host operating system when using OnGuard 2010 and prior. Windows Server 2008 R2 SP1 Enterprise 64-bit is not supported for communication with HID Edge Devices. Windows Server 2008 Standard and Enterprise R2 SP1 will be called Windows Server 2008 R2, from this point forward, in the OnGuard 2013 Release Notes. DOC-1028-EN-US (March 2014) © 2014 Lenel Systems International, Inc. revision 1.018 — 14 3.3.7.3. Windows Server 2008 with Service Pack 2 • • • • • Windows Server 2008 Standard and Enterprise SP2 32-bit and 64-bit are approved for OnGuard server and client operations. Windows Server 2008 SP2 32-bit and 64-bit is approved for use as a Lenel NVR product host operating system. Note: Windows Server 2008 is not approved for use as any Lenel Digital Video product host operating system when using OnGuard 2010 and prior. Windows Server 2008 SP2 is not supported with Visitor Management Front Desk Application. Windows Server 2008 SP2 Standard Edition 32-bit is supported for communication with HID Edge Devices. Windows Server 2008 Standard and Enterprise SP2 will be called Windows Server 2008, from this point forward, in the OnGuard 2013 Release Notes. 3.3.7.4. Windows XP Professional with Service Pack 3 • • • • • • Windows XP Professional SP3 32-bit is approved for OnGuard server and client operations. Windows XP is not supported for use as the Web Application Server (LS Application Server service) because the number of client connections to IIS is limited in this operating system. Windows XP Professional is approved for use as any Lenel Digital Video product host operating system. Windows XP 64-bit is not supported. Windows XP SP3 is supported for communication with HID Edge Devices. Windows XP SP3 will be called Windows XP, from this point forward, in the OnGuard 2013 Release Notes. 3.3.7.5. Windows Server 2003 with Service Pack 2 • • • • • Windows Server 2003 SP2 32-bit Standard and Enterprise are approved for all OnGuard server and client operations. Windows Server 2003 64-bit is not supported. Windows Server 2003 SP2 Standard and Enterprise are approved for use as any Lenel Digital Video product host operating system, not including the OnGuard GO! product. Windows Server 2003 SP2 Standard and Enterprise can be utilized as the separate OnGuard server with Lenel Digital Video products. Windows Server 2003 Standard and Enterprise SP2 will be called Windows Server 2003, from this point forward, in the OnGuard 2013 Release Notes. 3.3.7.6. Windows Server 2003 R2 with Service Pack 2 • • • • Windows Server 2003 R2 SP2 32-bit Standard and Enterprise are approved for all OnGuard server and client operations. Windows Server 2003 R2 64-bit is not supported. Windows Server 2003 R2 SP2 Standard and Enterprise are approved for use as any Lenel Digital Video product host operating system, not including the OnGuard GO! product. Windows Server 2003 R2 SP2 Standard and Enterprise can be utilized as the separate OnGuard server with Lenel Digital Video products. DOC-1028-EN-US (March 2014) © 2014 Lenel Systems International, Inc. revision 1.018 — 15 • • Windows Server 2003 R2 SP2 Standard is supported for communication with HID Edge Devices. Windows Server 2003 Standard and Enterprise R2 SP2 will be called Windows Server 2003 R2, from this point forward, in the OnGuard 2013 Release Notes. 3.3.8. Service Packs and Critical Patches Visit the Lenel Support site for a complete and up to date list of approved Microsoft Service Packs (Compatibility Charts section) and Critical Patches (MS Patches section): http://www.lenel.com/support/downloads/onguard. (You will need your Lenel login to gain access to this site.) The Lenel Security Patch Policy located on the Web site details the specific conditions and frequency of certification for Microsoft Windows Critical Updates. Read through this information carefully since it addresses both operating systems and databases. For all instances, Lenel strongly recommends enabling the uninstall option when installing the service pack. There have been rare instances where communications and database activity have been affected by the installation of a service pack. When these situations have occurred, uninstalling the service pack resolved the issues. Lenel also strongly recommends backing up your database before performing any service pack installation. 3.3.9. Security Utility Windows Firewall is supported by use of the Security Utility; other third-party firewalls are not supported. The Security Utility allows OnGuard users to take advantage of the capabilities of Windows. The utility must be run to ensure that the OnGuard software will continue to function properly. The utility automatically adjusts all settings that affect the OnGuard software. It also displays the current system settings, as well as a list of actions required for normal operation of Lenel software installed on the local computer. Note: The Security Utility does not open database communication ports. The Security Utility runs automatically during OnGuard, Lenel NVR, IVS, IVAS, Remote Monitor, and Device Discovery Console installations. It must be run manually after LDVR installations. It must also be run manually as a maintenance procedure after making any of the following changes: • • • • • Lenel NVR security setting changes IntelligentVideo Server security setting changes Windows updates Windows service pack changes Windows security setting changes DOC-1028-EN-US (March 2014) © 2014 Lenel Systems International, Inc. revision 1.018 — 16 3.3.10. Supported Database Systems For an up-to-date list of tested database systems, refer to the compatibility charts on the Lenel Web site: http://www.lenel.com/support/downloads/onguard#compatibility-charts. Note: When creating or modifying an ODBC connection on a 64-bit operating system, the location where the ODBC Data Sources are configured is different than on 32-bit operating systems. For 32-bit operating systems: Click Start, then navigate to Settings > Control Panel > Administrative Tools > Data Sources. For 64-bit systems: Navigate to C:\windows\SysWOW64 and run the odbcad32.exe file. • Microsoft SQL Server 2005 SP4, 32-bit and 64-bit Note: • • • • • • • • • • SQL Server 2005 requires .NET 4.0 as a prerequisite. Microsoft SQL Server 2008 SP2, SP3, 32-bit and 64-bit Microsoft SQL Server 2008 R2 SP1, 32-bit and 64-bit Microsoft SQL Server 2005 SP4, 32-bit and 64-bit Oracle 11g R1 Server 32-bit (11.1.0.6) Oracle 11g R1 Server 64-bit (11.1.0.7) with 32-bit Client installed if OnGuard is running on the same server as the database Oracle 11g R2 Server 32-bit (11.2.0.3) Oracle 11g R2 Server 64-bit (11.2.0.3) with 32-bit Client installed if OnGuard is running on the same server as the database Oracle 10g R2 Server 32-bit (10.2.0.3 and 10.2.0.4) Oracle 10g R2 Server 64-bit (10.2.0.3, 10.2.0.4, 10.2.0.5) Oracle 10g R1 Server 32-bit (10.1.0.5) Note: Web applications require 32-bit drivers to connect to an Oracle database. DOC-1028-EN-US (March 2014) © 2014 Lenel Systems International, Inc. revision 1.018 — 17 3.3.11. Supported System Components • • Scan Shell SDK version 9.50 MDAC (required) Note: • • • • • • • • • MDAC is now installed with the operating system. Do not install the version of MDAC that ships on the Supplemental Materials disc, as it is older than the version that ships with the operating system. Windows XP: MDAC 2.8 Windows 7: MDAC 6.1 Windows Server 2003: MDAC 2.8 Windows Server 2008: MDAC 6.1 DirectX (required): 10, 11 MSXML 6 (required) - MSXML 6 is installed automatically with OnGuard. Adobe Flash Player 9 or later (required for Visitor Management Host) Microsoft Silverlight 3.0 or later (required for Visitor Administration) Microsoft .NET 4.0 (required) - Microsoft .NET 4.0 is installed automatically with OnGuard when installing using the setup.exe file. To shorten the OnGuard installation time, install Microsoft .NET 4.0 (available on the Supplemental Materials disc) prior to installing OnGuard. Note: If the Microsoft .NET 4.0 installation fails during the OnGuard installation on Windows Server 2008, you must run the System Update Readiness Tool available from Microsoft: http://support.microsoft.com/kb/947821. To prevent this issue, verify that the Windows Update service is turned on. DOC-1028-EN-US (March 2014) © 2014 Lenel Systems International, Inc. revision 1.018 — 18 3.3.12. Internet Information Services (IIS) • • • Windows Server 2003: IIS 5 and 6 Windows Server 2008: IIS 7 Windows Server 2008 R2: IIS 7.5 Note: IIS is required for the Web Application Server. The following minimum settings are required for the browser-based applications to function properly: • • • • Common HTTP Features: – Static Content – Default Document – Directory Browsing – HTTP Errors – HTTP Redirection Application Development: – ASP.NET – .NET Extensibility – ISAPI Extensions – ISAPI Filters Security: – Windows Authentication – Request Filtering Management Tools: – – – IIS Management Console IIS 6 Metabase Compatibility IIS 6 WMI Compatibility 3.3.13. Virtual Platforms • • • VMware ESX and ESXi Server 4.1.x, 5.0.x, and 5.1.x for all OnGuard services and database server with software-based license only VMware Workstation 7.1.x, 8.0 (pending), 9.0.x Microsoft Hyper-V 2008 R2 SP1 Notes: Lenel Video products were only tested on VMware ESXi 5.0.x. VMotion, High Availability and Fault Tolerance (pending) functionality was successfully tested with VMware vSphere 5.0.x. Virtual platforms are not supported with video viewing clients. The software-based license is limited to only VMware ESX Server and also to a standard hosted system (non-VMware). VMware is supported for OnGuard standard and Enterprise systems. DOC-1028-EN-US (March 2014) © 2014 Lenel Systems International, Inc. revision 1.018 — 19 3.3.14. Supported Third-party Components • • Crystal Reports 11.5, 12, and 14 Adobe Reader 10.1 3.3.15. Antivirus Software Applications Lenel does not certify any antivirus software to be used with OnGuard. For an up-to-date list of tested database systems, refer to the Third Party Application Compatibility Chart on the Lenel Web site: http://www.lenel.com/support/downloads/onguard#compatibility-charts. Notes: • • • Digital Video systems must exclude all data drives from the antivirus scanning operations. The \LicenseServerConfig\Licenses folder on the License server should also be excluded, since it will sometimes corrupt the license file. McAfee Virus Scan: McAfee Virus Scan can be recommended, but is not tested or certified at Lenel and is installed at the user’s risk. Symantec Endpoint Protection 12.012.1: Symantec Endpoint Protection is used internally at Lenel and can be recommended, but is not certified. Trend Micro OfficeScan Corporate Edition version 8.0: Trend Micro OfficeScan can be recommended, but is not tested or certified at Lenel and is installed at the user’s risk. 3.3.16. Supported Web Browser • • Internet Explorer 8.0 or 9.0 (Required for License Administration and Web applications) 32-bit version of Internet Explorer when using VideoViewer (Browser-based Client) 3.3.17. Supported Terminal Services OnGuard 2013 supports Terminal Services. This support is a licensed feature. Refer to the Lenel Web site to review the current testing status before configuring terminal services. The Third Party Applications Compatibility Chart can be accessed at: http://www.lenel.com/support/downloads/onguard#compatibility-charts. (You will need your Lenel login to gain access to this site.) • • Citrix XenApp is not supported within Windows XP Citrix XenApp is not supported for viewing video. 3.3.18. OPC Versions • • OPC Data Access 2.0 OPC Alarms and Events 1.0 3.3.19. SNMP Versions • • SNMPv1 Trap Messages are supported. SNMPv2 and SNMPv3 Trap messages are not supported. DOC-1028-EN-US (March 2014) © 2014 Lenel Systems International, Inc. revision 1.018 — 20 3.3.20. Supported High Availability Systems For more information, refer to the Third Party Applications Compatibility Chart on the Lenel Web site at: http://www.lenel.com/support/downloads/onguard#compatibility-charts. (You will need your Lenel login to gain access to this site.) • • • • • • NEC ExpressCluster X WAN/LAN with Oracle 11g R2: R3 3.0.0.1*, ** NEC ExpressCluster X WAN/LAN with SQL Server 2008 R2 64-bit: R3 3.1.0.1 NEC ExpressCluster X WAN/LAN with SQL Server 2008 R2 64-bit: R3 3.0.0.1 NEC ExpressCluster X WAN/LAN with SQL Server 2008 R2 32-bit: R3 3.0.0.1* NEC ExpressCluster X WAN/LAN with SQL Server 2008 R2 64-bit: R3 3.0.0.1 NEC ExpressCluster X WAN/LAN with SQL 2008 SP2: R3 3.0.0.1* Note: Lenel provides instructions for upgrading the OnGuard software only when the NEC ExpressCluster X version, operating system, and database version remain constant. For any other upgrade scenario, we recommend a database backup, the cleansing of both servers in the cluster, clean installs, database restoration, and then database setup. There might be operating system and database system upgrade scenarios where very knowledgeable administrators could avoid erasing the entire configuration, but we cannot guarantee their support. * Windows Server 2008 R1 SP2 (32-bit, Standard and Enterprise editions) ** Windows Server 2008 R1 SP2 (64-bit, Standard and Enterprise editions) 3.3.21. End of Life Products and Features Refer to Section 3.2 Upgrades for the list of end of life products that need to be removed prior to upgrade. DOC-1028-EN-US (March 2014) © 2014 Lenel Systems International, Inc. revision 1.018 — 21 3.4. New Features and Updates 3.4.1. General • • New Report Permission Groups Form: A Report Permission Groups form has been added to the Users folder. This form is used to create permission groups, each of which contains a set of abilities to preview, add, modify, and delete reports. This is a change from the System Permission Group checkboxes found in earlier versions of OnGuard. Report Permissions when upgrading to OnGuard 2013 (6.6): When upgrading to OnGuard 2013 (6.6), report permissions established for users in the earlier version of OnGuard determine the report permissions for users in OnGuard 2013 (6.6): In the earlier version of OnGuard, if users had less than full report permissions (View/Access, Add, Modify, and Delete), then they will only get View/Access reports permissions in OnGuard 2013 (6.6). – Users with no report permissions in the earlier version of OnGuard will get no report permissions in OnGuard 2013 (6.6). – Users will only get full reports permissions in OnGuard 2013 (6.6) if they had full reports permissions in the earlier version of OnGuard. Reports are replicated on Enterprise system: On Enterprise systems, reports are replicated to servers throughout the system. If a report is added to one server, that report is duplicated on all other servers. – • • • Mask Groups point editing improved: Previously the only means of modifying the properties of an existing point assigned to a group was to "remove" and "re-add" it. The Mask Groups form has been improved, allowing you to modify the properties of an existing point. All available device/event points remain in their corresponding lists in the Add and Modify modes. (Previously, when a point was assigned to a mask group, it was removed from the list.) When assigning a point that is already in the group list, it is updated in the group list with the changes. If the point is not in the group list, it will be added. Mask Groups form improved to view longer device names: The device, events, and assignment lists on the Mask Groups form dynamically adjust to the size of the window, allowing you to view longer device names. 3.4.2. Central Station • Zone reporting where necessary: All points and doors now have zones assigned. Zone is a value, which is reported to the Central Station along with the event code, instead of point or door database index (as it was before). In order to achieve backward compatibility with older OnGuard versions, if zone is not defined, the panel behaves as older revisions did (point/door index reported). DOC-1028-EN-US (March 2014) © 2014 Lenel Systems International, Inc. revision 1.018 — 22 • Burglary Verified Alarm: A new event type has been added – Burglary Verified Alarm. This event has codes defined in both SIA and CID standards so a proper reporting to the Central Station has been implemented to comply with standards. The event codes used are: – – • • For SIA protocol: • Alarm: BV [area] • Restore: BR [area] For CID protocol: • Alarm: 1139 [zone] • Restore: 3130 [zone] Verified alarm is generated when two burglary type points report alarm and “verified alarms” functionality is enabled. Osborne-Hoffman reporting errors: Some of the event codes reported to the OsborneHoffman receiver using SIA protocol were formatted improperly, and the Osborne-Hoffman receiver was unable to decode them properly. A fix for this issue has been implemented. Event Codes changes: Some events had improper codes assigned to them. Changes have been made in order to comply with the reporting standards: Fuse failure: for CID format change from code 320 (sounder/relay) to 312 (power supply overcurrent) – Fail to close and fail to open had swapped codes: for CID Fail to close should have 454 and fail to open 453 – Implemented Open Early event code handling: code 451 assigned to this event (area disarmed before specified time) – Code assigned to Emergency Off changed from 451 (Open Early) to 450 (Exception O/C) Door event changes: Major changes were made in reporting of door-related events. Before OnGuard 2013, all the door events were reported as burglary events with the point numbers above 2000 for SIA and 550 for CID. This special range of point numbers allowed to determine the event type (door force/held open/alarm) and the door number. However, specifications for both SIA and CID define specific codes for door-related events. These codes are now used and reported to the central station in order to make messages more compliant with the standards and existing receiver hardware/software. Also, zone numbers instead of door indexes are used. – • – – • For SIA protocol: • Door Forced event: DF [zone] • Door Forced restore: DR [zone] • Door Held Open: DL [zone] For CID protocol: • Door Forced event: 423 [zone] • Door Held Open: 426 [zone] Backward compatibility: HSC-IP had not worked in OnGuard versions older than OnGuard 2012. In OnGuard 2012, necessary changes were made to make this way of reporting fully functional. To maintain some degree of backward compatibility, it is also possible to use HSCIP with OnGuard 2010 (SIA protocol only). DOC-1028-EN-US (March 2014) © 2014 Lenel Systems International, Inc. revision 1.018 — 23 • User Logon ID: In OnGuard 2013, the user’s Logon ID value is used for reporting of userrelated events. This value is available in OnGuard’s user interface, and can be assigned or changed by the System Administrator. SIA and CID protocols have some limitations on the numbers transmitted with the events. In the case of user-related events, only the Logon IDs which are lower than 9998 (SIA) or 998 (CID) will be reported correctly. All the values higher than these limits will be reported as 9998 (SIA) or 998(CID). Values 9999 (SIA) or 999 (CID) have a special meaning - these numbers are reported with the user-related events generated by either “service user” or by the automatic system (panel) activities. 3.4.3. Intrusion Detection • • • • NGP OSDP V1 reader support: OSDP V1 reader support is available for NGP onboard doors, NGP-1300-U and NGP-1320-U doors, as well as CASI DirecDoor, M2000 and M5/M3000 doors. New reader Type options include: – Dual Interface Door 1 (OSDP Protocol) – Dual Interface Door 2 (OSDP Protocol) – Single Door Interface (OSDP Protocol) Not available for legacy NGP door controllers such as the NGP-1320 and NGP-1300. NGP intrusion support for burglary verified alarms: For NGP intrusion access panels (NGP-2220i and 3320i): Support is available for burglary verified alarms. Alarm reset options include the use of the Service PIN and Master authority options only. "Unconfirmed" and "Confirmed" alarms will be transmitted to the Central Station. NGP/CASI door strike configuration available: On the Readers and Doors > General form, door Strike is now available for all NGP and CASI devices. Configure Strike to "Cut Off on Close," "Cut Off on Open," or, "Cut Off on Duration" (based on the Strike time specified on the Timing and Alarms form). NGP/CASI Micro and DirecDoor Access Panel support: License controls the name on the Access Panels > NGP form (tab) and the available NGP and/or CASI models: – CASI license only - tab name is "CASI" – NGP license only - tab name is "NGP" – NGP and CASI licenses - tab name is "NGP/CASI" Available CASI panels: – CASI M2000 (M2000PXNplus) – CASI M5/M3000 (M5000 and M3000) – DirecDoor Alarm panels are automatically added when you define the following CASI access panels: – DirecDoor: 1 on-board alarm panel with up to 6 outputs – M2000: • One 8DO alarm panel with up to 8 outputs • One 10DI alarm panel with up to 10 inputs ‘Slots’ tab is available on the CASI forms: – Alarm panels are also added automatically to CASI M5/M3000 and DirecDoor by assigning input/output device extension boards using the new Slots sub-tab. – One DDIO board can be assigned to the DirecDoor slot which will add one alarm panel with up to four inputs or outputs. DOC-1028-EN-US (March 2014) © 2014 Lenel Systems International, Inc. revision 1.018 — 24 M5/M3000: – For each 20DI board, one 20DI alarm panel is added with up to 20 inputs – For each 16DO board, one 16DO alarm panel is added with up to 16 outputs The Slots tab is also used to assign reader device extension boards to the panel. Maximum extension boards per M5/M3000 panel: – Up to two 8RP – Up to two 2RP/2SRP – Up to four 20DI/16DO Notes: • 8RP cannot be mixed with 2RP or 2SRP. For each 2RP/2SRP board, you can configure up to 2 auxiliary outputs. All outputs are general purpose outputs (Mode must be “None” or “Auxiliary Output”). Output 1 is In Reader auxiliary output and Output 2 is Out Reader auxiliary output. Modifying access panel slot assignments will remove all devices associated with the changed slots. NGP/CASI Micro and DirecDoor Reader/Door support: For CASI panels, readers are identified by a unique Reader number which will be enabled for editing. Reader numbers must conform to the configurations supported by the panel model. DirecDoor: Reader numbers 1-2 are available: – 1 reader with 2 doors – 2 readers with 1 door M2000: Reader numbers 1-4 are available: – 4 doors (1 reader per door) – 3 doors (2 readers + 1 reader + 1 reader) – 2 doors (2 readers per door) M5/M3000: Reader numbers 1-8 or 1-16 are available depending on which device extension boards are present. 2RP/2SRP boards support up to 8 doors and 8RP boards support up to 16 doors. CASI reader Type options include Magstripe F/2F, Magstripe Strobed, and Wiegand / Prox. CASI Doors: – Door Contact Input specifies the input used with the reader door contact of the door. Possible options include: In Reader door contacts, Out Reader door contacts, alarm panels, and 20 DI alarm inputs. Note: – Each reader has two dedicated inputs that can be used as a Door Contact and REX, and one dedicated output that can be used as Strike. Out Reader door contact is available if an Out Reader is configured. REX Input specifies the input to be used with the reader REX input of the door. Possible options include: In Reader REX, Out Reader REX, alarm panels, and 20 DI alarm inputs. Note: Out Reader REX is available if an Out Reader is configured. DOC-1028-EN-US (March 2014) © 2014 Lenel Systems International, Inc. revision 1.018 — 25 – Strike Output specifies the output to be used with the reader strike output of the door. Possible options include: In Reader Strike, Out Reader Strike, In Reader auxiliary outputs, Out Reader auxiliary outputs, alarm panels, and 16 DO alarm outputs. Each reader has one dedicated output that can be used as Strike output. 2RP/SRP-based readers have one auxiliary output that can be configured as Auxiliary Output or Door Strike. Note: • • • NGP/CASI In/Out Reader anti-passback entry and exit area updated: Area entering and Area leaving were moved to the top of the In Reader/Out Reader forms and a new check box, Perform area leaving check, was added to both forms. (The Area drop-down was removed.) Area entering (the area a cardholder enters by using the reader) will be used for both intrusion reporting and anti-passback. Area leaving (the area a cardholder exits by using the reader) will also be used for both intrusion reporting and anti-passback. In addition, when the IN reader is configured, the OUT reader Area entering and Area leaving settings are automatically configured in reverse. The IN reader Area entering is used for the OUT reader Area leaving and the IN reader Area leaving is used for OUT reader Area entering. Perform area leaving check - If enabled, the area leaving will be evaluated. Based on the Area entering and Area leaving, the system determines which area is to be associated with events for the reader using the following rules: – At least one area must be Local to the panel (not an Outside or a Global Area), and this Local Area will be used for intrusion reporting. – If both areas of the reader are Local to the panel, then the Area entering is used for intrusion reporting. – When Global Anti-passback is enabled, at least one area must be Local to the panel in order to use the Local Area for intrusion reporting. CASI DirecDoor FACP alarm reported in Alarm Monitoring: When a DirecDoor panel is connected, and generates a FACP (Fire Alarm Control Panel) alarm it is reported in Alarm Monitoring. NGP area-centric view available in Alarm Monitoring System Status Tree: In Alarm Monitoring, from the System Status Options, select the new Tree - Area (NGP) option to display NGP hardware devices in an area-based hierarchy (Panel | Area | Point). Points include reader, reader - LCD keypad, reader/alarm input, alarm panel, and power supply. Note: • In Reader auxiliary output and Out Reader auxiliary output are available for 2RP/2SRP-based readers only. Out Reader Strike and Out Reader auxiliary output are available if an Out Reader is configured. NGP areas support the area-related filters such as Armed, Disarmed, and In Alarm. NGP Central Station reporting: Configure area reporting zones: Configure Central Station reporting zones for NGP intrusion panel doors, inputs, and auxiliary inputs. Zone number from 0 - 998. Zone number must be unique within a given area and can be specified on the Readers and Doors > In Reader/Auxiliary Inputs forms or the Alarm Panels > Alarm Inputs form. In addition, click [Configure Reporting Zones] on the Areas > Intrusion Detection form to edit zones for individual devices, set all devices to zone (0) zero, or generate a series of device zone numbers in the new Zones dialog. DOC-1028-EN-US (March 2014) © 2014 Lenel Systems International, Inc. revision 1.018 — 26 • • NGP User ID changes: NGP User ID for a cardholder is more flexible. Now you can enter a Panel User ID (from 1 - 500,000) or have the system assign the next available ID number. In addition, you can clear the User ID information making it available for reassignment. When an NGP User ID is submitted, the system checks to make sure the Panel User ID is unique. NGP Input Supervision upgraded from 4 to 8: NGP devices now support eight different circuit types (EOL resistor tables) per panel. The NGP-1100 supports four circuit types per panel. Note: • You can configure up to four custom (BASIC only) resistor tables for NGP access panels using different input configurations (NGP on-board and NGP universal I/O devices). Advanced custom EOL resistor tables are not supported for devices connected to NGP access panels. NGP-2220i and 3320i intrusion panels: Work late input support: When work late points (reader or alarm inputs) are activated by area occupants working late, the scheduled closing time will be delayed for a specified time interval. Access Control > Alarm Panels > Alarm Inputs: Select "Work late" from the Point Type drop-down to indicate the work late feature is available at the alarm input. – Access Control > Readers and Doors > In Reader: Select the Work Late reader check box to indicate that the work late feature is available at the reader input. Each time a badge with work late privileges is presented to this reader, and access is granted, the area’s scheduled closing time will be delayed for a specified delay interval. The work late condition can only be activated within 15 minutes prior to area arming. However a user with work late permission can activate this condition prior to the 15 minutes interval using the keypad. Global APB and mustering support NGP areas: Global APB and mustering functionality includes NGP areas. NGP area assignment for readers has also been revised to allow NGP to participate in Global APB. Each NGP Door/Reader must have at least one area local to the panel. – • • • • NGP supports 75-bit Wiegand card format: NGP panels, Universal I/O controllers, and onboard door controllers support 75-bit Wiegand card formats containing Agency, System, Credential and Expiration Date. Local I/O Functions added for controlling NGP area arming state: New Local I/O functions "Area Force Arm Disarm" and "Area Force Stay/Disarm" are available for NGP intrusion panels (NGP-2220i and 3320i) only. Local I/O "Access Activity" can be triggered at an NGP door/reader as a result of an access granted, access denied, or duress event. Link NGP areas to a specified output based on the alarming area and point type. New Link Area form is used when linking an area associated with an NGP intrusion panel to a function list. Locally control an output signal based on the area armed state. Output control includes the use of "area local" outputs for Siren and In Alarm. NGP POD Trouble alarm/event changes: POD Trouble equipment point includes the device (pod/module) that is reporting the error. DOC-1028-EN-US (March 2014) © 2014 Lenel Systems International, Inc. revision 1.018 — 27 3.4.4. Access Control • LNL-2210: On-board readers and downstream devices supported: On-board readers and downstream devices (external, off-board readers and alarm panels) can now be assigned to the LNL-2210 panel. Each LNL-2210 can support up to 8 downstream devices providing input/output support or up to 16 readers depending on the modules used. Port must be "Reader 1" for the downstream devices. Note: • • LNL-2210: Device count and other options available on Options tab: Device count is now available on the Options tab. This allows you to adjust the number of downstream devices that can be assigned to the panel from 0 - 8 Readers modules + Alarm panels. Elevator support, HandKey biometrics, and Special area rules are now available as well. Reader Configuration Wizard supports LNL-2210 downstream devices (off-board readers): The Reader Configuration Wizard now allows you to add and configure multiple LNL-2210 off-board readers (downstream devices). Notes: • • • A full panel download might be required when you change between a downstream and a non-downstream configuration. Specifically, a download to the panel is required the first time a downstream device is added to an LNL-2210 that has no downstream devices or when the last downstream device is deleted from the panel. Adding downstream devices to an LNL-2210 panel is not supported if a second on-board reader is configured. Lenel panels: Device count "Readers" renamed to "Reader modules": The Device count section was updated to more accurately represent device types on the Options page for Lenel panels. "Readers" has been renamed as "Reader modules" to better describe the external, offboard reader devices (not to be confused with on-board readers). LNL-2210: Supports promotion to the LNL-2220 or LNL-3300 panel: Promoting an LNL2210 access panel to an LNL-2220 or LNL-3300 panel is now supported via the access panel menu command. EOL Basic Custom normal high range extended to 12.5K: Normal high range for the Basic Custom configuration of EOL resistor tables must be extended to 12.5K (12499 ohms). Note: • On-board reader Type names have been simplified. 10K (9999 ohms) is the recommended maximum resistance value for Normal high range. However, values up to 12.5K are allowed but will affect detection accuracy. iCLASS Encoding changes to include Book 1 support (OG-26099): Users can now define smart card formats to include iCLASS cards secured with HID or INSIDE keys to Book 1 of the smart cards. Specifically for the IrisAccess application, “Book 1 / 16kbits / 2 Application Areas” and “Book 1 / 16kbits / 16 Application Areas” options were added. For the Lenel iCLASS application, “16kbits / 2 Application Areas” and “16kbits / 16 Application Areas” options were added, which use the default HID keys. DOC-1028-EN-US (March 2014) © 2014 Lenel Systems International, Inc. revision 1.018 — 28 3.5. Known Issues 3.5.1. General • • • • • • • • MDAC version should not be updated to the version on the Supplemental Materials disc: The “Third-Party Service Packs and Updates” section of the Installation Guide instructs that MDAC is a component on the Supplemental Materials Disc that requires update. MDAC no longer needs to be updated, as all supported operating systems are now installed with a version of MDAC newer than the version on the Supplemental Materials disc. Column heading tooltips disabled for Windows XP (OG-12746): Tooltips are not available for column headings in OnGuard running on Windows XP. ACS.INI file cannot be edited by administrator group member (OG-14034) (OG-19970): By default, the Admin account does not have permission to save the ACS.INI file in Windows 7 or Windows Server 2008. To work around this issue, add the Admin user to the ACS.INI file security settings and allow full control, or run the application that you use to edit the ACS.INI file (i.e., Notepad) using the “Run As Administrator” option. Temporary files remain after installation has completed (OG-14475): Some components needed by OnGuard might leave temporary files on the system root drive after the installation. More information can be found here: http://support.microsoft.com/kb/950683. FormsDesigner field style border and inside edge not functioning properly (OG-15759): In order to support recently introduced changes to the user interface, the ability to turn off a sunken edge border for a control in FormsDesigner has been disabled. OnGuard Installation no longer distributes the Sentinel Driver (OG-23538): The OnGuard installation no longer distributes the Sentinel driver (for USB dongles) during the installation of the License Server feature on a server installation. Refer to the Supplemental Materials disc for the driver, if needed. SafeNet driver (OG-23789): The SafeNet driver has been removed from the installation, but if needed it is available on the Supplemental Materials disc. OnGuard returns an error when attempting to create an unattended client installation (OG-24632): An error is returned that stops the creation of the OnGuard MSI file using the "setup /a" parameter. During the phase of "Copying new files," the following error is displayed: "Error 1303. The installer has insufficient privileges to access this directory: C:\Windows\winsxs\73t3z6j5.7ag. The installation cannot continue. Log on as an administrator or contact your system administrator." DOC-1028-EN-US (March 2014) © 2014 Lenel Systems International, Inc. revision 1.018 — 29 • Client Update: When performing an upgrade, refer to the Upgrade Guide for information about Client Update. If upgrading from a release prior to OnGuard 2012 (6.5), when upgrading the client machines, the manual steps indicated in the Client Update section in the Upgrade Guide need to be followed so that the automatic client update can be used in the future. The Client Update Server allows the OnGuard server workstation to automatically update client workstations. When a client workstation opens an OnGuard application, the application detects that the software version does not match the database. The application then allows the user to either cancel the login or update the client software. This functionality only exists for applications that are part of the OnGuard installation suite. Two services enable this functionality, one installed on the server workstation (LS Client Update Server Service) and another installed on each client workstation (LS Client Update Service). These services are only used to update client workstations. Server workstations must still be updated manually. 3.5.2. Intrusion Detection • • • NGP panels will only support a holiday duration of 365 days (OG-20814): When setting the duration of a Holiday that will be configured in a system with NGP Controllers, do not exceed a value of 365 days. The Holiday interface will allow a value up to 366 (for support of LNL Controllers) but that value will not be compatible with an NGP Controller. Unmask Door Held Open events time works differently in NGP panels compared to Mercury panels (OG-23259): When a Mask Held Open event occurs at a reader in an NGP system, the alarm is sent after 60 seconds instead of immediately. Only one event, instead of two, is generated in Alarm Monitoring when the same timezone is configured for masking Door Forced Open (DFO) and Door Held Open (DHO) alarms (OG-23263): Only one event, instead of two, is generated in Alarm Monitoring when the same timezone is configured for masking Door Forced Open (DFO) and Door Held Open (DHO) alarms for a reader connected to a NGP Access Panel. This occurs when a door is open during the timezone, but is not closed after the end of the timezone. 3.5.3. Access Control • • • • Integrated intrusion LCD display of event history adds spurious event for alarms with door set for Entry Delay (OG-15920): When utilizing the new Intrusion Mask Groups, an alarm caused by a Door Status event set for "Trigger" point mode will result in an extra event being displayed in the LCD keypad event history. The extra event will be labeled "256 TYPE ERROR" and have the same time as the door event, and can be ignored. This issue will be addressed in a future firmware version. OSDP reader might have incorrect LED display (OG-17529): If power is lost to an Open Supervised Device Protocol (OSDP) reader, but power to the Lenel reader interface is maintained, the LED display pattern might be incorrect until an access activity takes place. Strike field states cutoff on close (OG-18019): For HID Edge devices, the Strike field states Cutoff on close. The actual reader strike output will cutoff on open in all cases. Area Access Manager (Browser-based Client) reports not supported with Windows Authentication on Windows Server 2008 (OG-18066): Reports will not run properly from Area Access Manager (Browser-based Client) with Windows Authentication on Windows Server 2008. For these operating systems, only SQL authentication is supported with browser-based reports. DOC-1028-EN-US (March 2014) © 2014 Lenel Systems International, Inc. revision 1.018 — 30 • • • • Area Access Manager (Browser-based Client) returns a server error for a cardholder if a field is added to the Cardholder Form (OG-19281) (OG-20123): Area Access Manager (Browser-based Client) will return the following server error for a cardholder if a field is added to the Cardholder form: “A server error has occurred. Please see your system administrator.” When a form is updated, IIS must be restarted along with the LS Application Server. If you receive this error, restart IIS and the LS Application Server. Deleting badges from Onity Integra locks (OG-23265): When badges are deleted from ILS Integra locks, at least one (1) badge must always remain on the lock. Attempting to delete all badges from a lock will not succeed, and the lock will retain the same access privileges it had before the attempt was made. If you want to prohibit all access to a lock, use some other mechanism, such as blocking or changing schedules. LNL-2020W configured with Format 2 and attached to Universal I/O reports constant invalid PIN and invalid card format events (OG-26428): Reader formats that have "Tamper Monitor Enabled" are not currently supported by NGP or Universal I/O. For example, on the LNL-2020W reader, format 2 is not supported when the reader is attached to the NGP or NGP Universal I/O. CASI panels and local I/O: Local I/O links based on cabinet tamper and power failure are not supported (OG-26544): Local I/O links based on Cabinet Tamper and Power Failure are not supported. 3.5.4. Identity Management • • • Magicard Tango2e must use Driver V1.41 (OG-20299): Magicard Tango2e driver V1.42 has a known issue with the installation of magapi.dll. Driver V1.41 is available on the Supplemental Materials disc and should be used instead. Magnetic encoding does not work with Firmware V2.00 for Zebra printers (OG-23809): Magnetic encoding will not work with firmware V2.00 for Zebra performance class card printers. Earlier versions of the firmware (up to V1.17.88 confirmed) should encode correctly. Cannot modify badge ID in System Administration after printing badge (OG-25861): Users are now able to Modify Badge ID after printing if the badge type, badge ID allocation is set to “From ‘Cardholder ID’”. 3.5.5. Visitor Management • • • Supported date format (DE385): “Short date, no time” (seen in FormsDesigner) is the only date format supported for date fields in Visitor Management Host. Error messages that result from not having JavaScript are not localized (DE395): Visitor Management requires that JavaScript be enabled in the browser. When it is not enabled, the error message “This application requires JavaScript. Contact your administrator,” is not localized. The Service Trace Viewer tool is needed to view the Visitor Management tracing file (DE1472): Windows Communication Foundation Service Trace Viewer Tool (SvcTraceViewer.exe) should be used to view the Visitor Management tracing file (Idvm.svcLog) on the server. This can be obtained from Microsoft’s Web site as part of the Windows SDK. DOC-1028-EN-US (March 2014) © 2014 Lenel Systems International, Inc. revision 1.018 — 31 • • • • Access control badges retain previous access levels when reassigned (OG-15158): When an access control badge is assigned to a visitor being signed in, it retains the access levels currently configured for the badge. Signing in/out a previous visitor with the badge does not change the access levels. Kiosk virtual keyboard is not localized for KOR, JPN, CHS, or CHT (OG-22235): The Kiosk’s virtual keyboard is not localized for KOR, JPN, CHS, or CHT. Front desk application: CSSN SnapShell: need to run “Lenel Installer for CSSN SDK” on Supplemental Materials disc (OG-23349) (OG-24017): In order to use the CSSN SnapShell device for scanning business cards in the Visitor Management Front Desk application, the "Lenel Installer for CSSN SDK" on the Supplemental Materials disc must be run. This should be run before connecting the SnapShell scanner for the first time and will install the necessary driver and SDK. It will also update the SnapShell SDK for existing installations. Cannot log into Front Desk application when the server operating system is Windows Server 2008 SP2 (OG-25909): The following error message appears when trying to log into the Front Desk Application when the server operating system is Windows Server 2008 SP2: “The HTTP request is unauthorized with client authentication scheme ‘Negotiate’. The authentication header received from the server was ‘Negotiate,NTLM’.” 3.5.6. Digital Video • PAL cameras might not have frame rates color-coded to indicate supported frame rates (OG-15468): Regions using PAL and incorporating the following list of cameras might not have the frame rate displayed in green/red to indicate supported frame rates: – – – – – – – – – – – – – – – – – – – – Axis MPEG4 (only): 213 PTZ Axis MJPEG (only): 240Q Axis MJPEG and MPEG4: 214 PTZ, 215 PTZ, 241Q, 241QA, 241S, 241SA, 243Q , 243SA, 247S Axis 231D MJPEG and MPEG4 (both PAL and NTSC) Axis 232D MJPEG and MPEG4 (both PAL and NTSC) Axis 233D MJPEG and MPEG4 (both PAL and NTSC) Axis Q7401 MJPEG and H264 (PAL) Axis Q7406 MJPEG and H264 (PAL) Bosch All Cameras (both PAL and NTSC) HikVision All Cameras (both PAL and NTSC) Lenel: All cameras Panasonic MJPEG (only): WV-NW474 Panasonic WV-NF284 MPEG4 Panasonic WV-NF302 MPEG4 Panasonic WV-NP244 MPEG4 Panasonic WV-NP304 MPEG4 Panasonic WV-NS954 MPEG4 Panasonic WV-NW484S MPEG4 Panasonic WV-NS964 MPEG4 Sony MJPEG (only): RZ-30, CS3 DOC-1028-EN-US (March 2014) © 2014 Lenel Systems International, Inc. revision 1.018 — 32 • • • – Sony MJPEG and MPEG4: DF-40, DF-70, P5, RZ-25, Z20 – Sony MJPEG, MPEG4, H264: CS50, DF-50, DF-80, RX-550, RZ-50 – All Sony SNC-xxxxP PAL Cameras Double video on alarm with LDVR (OG-15506): For customers using LDVR (non-hybrid systems only), the PauseOnDoubleVideoOnAlarm setting in the ACS.INI file must be set to 0 on all client computers. Channel pre-roll values must be set to 15 seconds or more. This is required in order to avoid black screen issues and video not available error messages when recorded video is played back as part of the double video on alarm feature. The amount of pre-roll required depends on the video resolution and bitrate that is used. The larger the size and frequency of the frames, the smaller pre-roll time can be configured. Double video with time-lapse limitation (OG-15507): When using the Double Video on Alarm feature, the time lapse setting must have the same value as the AlarmDurationMax value, otherwise there might be black video. Joystick control difficult due to delays in video (OG-15077): PTZ might appear slow due to buffering that is included to allow better image quality. For customers that require better PTZ performance, a workaround exists that includes setting audio to off. The workaround is to update the registry [HKEY_CURRENT_USER\Software\Lenel\Lnr]"LiveVideoBuffer" -> DWORD. This value, when set to 0, will speed up the live viewing for both MJPEG and MPEG4 cameras but introduces audio issues. Note: • • • • Modifying the registry could cause irreversible damage to your Windows operating system. Back up the registry before making any changes. Follow the instructions located at http://support.microsoft.com/kb/322756. Streaming video server not supported with H.264 video source (OG-16019): The H.264 camera codec is not supported with the BARCO/Streaming Video Server integration. IntelligentVideo events allow region of interest that extends past the image boundaries (OG 16056): The user interface allows a region of interest to be configured that extends outside of the image area with the Object Crosses a Region and People Counting events. This configuration is not supported and might cause the event to not function properly. Frame rates higher than 50 FPS might not be accurate (OG-16061): Setting the frame rate to above 50 FPS on cameras that support high frame rates might result in a slightly different FPS value. For example, if the frame rate is set to 50 FPS, you might experience a frame rate of 52 FPS. Lenel NVR motion detection not supported with IQinVision cameras (OG 16501): IQinVision cameras should not be configured with Lenel NVR motion detection. This configuration is not supported and might cause the system to become unresponsive. To work around this issue, utilize the camera motion detection functionality and configure the camera to send motion alarms to the OnGuard system. DOC-1028-EN-US (March 2014) © 2014 Lenel Systems International, Inc. revision 1.018 — 33 • Audio Limitations: Live video from the AXIS 210A MPEG4 with audio enabled appears to be in time-lapse mode (OG 16665) – There is a two second or greater delay in recording audio in MPEG4 (OG-16666) – Cannot export video from MPEG4 cameras with audio to ASF format (OG-16919) Panasonic camera model numbers in the Device Discovery Console (OG-17442): Some Panasonic cameras are displayed by their series number rather than their model number in the Device Discovery Console. These cameras will not display their camera model numbers, but instead they display the series of the camera. For example, the Panasonic NS954 is part of the WV-NS950 series and would be displayed as a Panasonic NS950. For a list of Panasonic camera display names, refer to the Device Discovery Console User Guide. – • • • • Error when switching to live video after viewing recorded from archive server (OG-17598): When video is opened using the Launch recorded video from > Archive Server right-click menu item in Alarm Monitoring, the communication path becomes locked to the Archive Server and the player cannot be switched to live video. If you want to view live video, close the Video Player and launch live video. Axis cameras with H.264 compression do not support square pixel compensation (OG-17659): Square pixel compensation is not supported by Axis cameras with H.264 compression. When using square pixel compensation, the camera still transmits, for example, 352x240 if the camera is set to 320x240. The resolution is corrected in the viewer, thus providing no visual, storage, or bandwidth benefits. Windows Server 2008: Enabling video export (OG-17701): To allow Windows Server 2008 to export video, complete the following steps: 1. 2. 3. 4. Right-click My Computer and select Manage. Click on Features in the navigation tree. Click the Add Features link. Select the Desktop Experience check box and click [Install]. Note: • • • This installation requires a reboot. After Desktop Experience has been installed, export to ASF will work successfully. False motion detection alarms from Lenel ICT230 located in a dark room (OG-17771): There is a known issue with the Lenel ICT230 cameras (firmware version 3.0) generating false motion detection alarms when they are located in a dark room. Gaps in recorded video when saving embedded event configuration to camera (OG-17880): Saving embedded analytics configuration changes to an LCi-100-dx camera might result in several seconds of unrecorded video for the channel. In rare instances this might result briefly in a Communication Lost alarm for the camera channel. PTZ tour server does not run on channel in failover (OG-17970): The PTZ Tour Server does not work when a channel is in failover mode. The PTZ Tour Server can be configured while in failover mode, but will not run until the primary video recorder has been restored. DOC-1028-EN-US (March 2014) © 2014 Lenel Systems International, Inc. revision 1.018 — 34 • • • • • • • • • Video artifacts with RTP over UDP with some bitrate/resolution combinations (OG-18053): When using cameras with RTP over UDP, artifacts might occur in the final image. This is due to the fact that UDP is a transmission without acknowledgement protocol and could have loss of packets during transmission in busy networks. This becomes more obvious when the video is bigger (for example, in the case of transmission of larger bitrates and resolutions). RTP over TCP/IP or RTP over RTSP over HTTP might be a better option with cameras that support them because they are more reliable and do not present this issue. Lenel NVR issues with Axis video servers with no feeds connected (OG-19329): Axis analog video servers configured on a Lenel NVR that do not have any video signals plugged into them might cause the Lenel NVR to leak memory and eventually crash. This issue can be avoided either by not adding the unconnected channels to OnGuard or by marking them logically offline. Remote Monitor and Alarm Monitoring might become de-synchronized (OG-19830): Remote Monitor and Alarm Monitoring might become de-synchronized after Alarm Monitoring is restarted. For example, Video Quality Enhancement (VQE) settings made for the Remote Monitor channel are no longer selected in the user interface after restarting Alarm Monitoring. Import XML does not allow modification of inputs on Sony V704 (OG-20542): When exporting XML from a Lenel NVR with the Sony V704 camera (all four inputs) and then importing into another Lenel NVR, the user cannot change the input number for the V704 camera. The workaround is to manually modify the channels to have the correct input number. Cannot import HIK analog channels from an XML to an Lenel NVR (OG-20543): Exporting XML from a Lenel NVR, which already has HikVision analog channels, and then importing the file into another Lenel NVR, selecting an analog channel, and clicking the add button, produces an error stating that the channel is missing or has an invalid IP address. The workaround is to type 127.0.0.1 and then click Add. The tool will then allow the channel to be added. Remote Monitor Client and Server do not support Unicode (OG-20866): The Remote Monitor Client and Server do not support Unicode. This might cause a username or password in a non-ASCII character set to not work in some cases. Status bar does not show "Offline" if a camera is marked offline (OG-21062): When a camera is manually marked offline, Alarm Monitoring and Video Viewer will not display a red footer with a "Communication Lost" message at the bottom of the video cell for the offline camera when the video stream is interrupted. When live video buffering is enabled, "Communication Lost" message does not appear in the live video window (OG-21072): When buffered video is enabled ("bufreader0=1" in ACS.INI file), Alarm Monitoring and Video Viewer will not display a red footer with a "Communication Lost" message at the bottom of a video cell when the video stream is interrupted. Changing resolution of a camera while video search window is open causes LpsSearchSvc.exe to close unexpectedly on client (OG-21079): The LpsSearchSvc Windows service might close unexpectedly if the camera resolution is changed while a camera is opened in the Video Search dialog (for configuring IntelligentVideo or Lenel NVRbased video analytics). DOC-1028-EN-US (March 2014) © 2014 Lenel Systems International, Inc. revision 1.018 — 35 • • • • • • • • Selecting "Update Capabilities" on an SP408 hybrid channel produces a "Class not registered" error (OG-21204): Configuring a Lenel NVR with SP408 hybrid channels, and then adding one of the channels, selecting the hybrid channel, and clicking [Update Capabilities], produces an error message of "...Class not registered." If the user clicks [OK], it correctly says "No" in the Embedded column. Exporting a video clip with bitmap that is larger than the video frame causes the export to stop responding (OG-21808): This occurs after launching recorded video on an Lenel NVR channel in Alarm Monitoring, selecting Options>Export, setting the Output Type to Windows Media (asf), clicking the Generate Overlay Image checkbox, clicking [Customize], clicking [Image Overlap], browsing to a bitmap that is larger than the resolution of the camera, selecting Image Location, clicking [OK] to close the Customize Image Overlap dialog, and then exporting the clip. About halfway through the export, the export stops responding, and the export does not complete. Performance Counters for Lenel NVR not showing up on 64-bit Lenel NVRs (OG-21565): When running the Lenel NVR on 64-bit systems, perfmon needs to be running in simulation mode. The user must open an Explorer window and open the folder "C:\Windows\SysWOW64" and then run perfmon from that location, or run "mmc.exe /32 perfmon.msc". "End Video Tour" not disabled after selecting "Remove Video" for single camera, anonymous tour (OG-22258): This occurs after opening Video Monitoring (Live Video) in Alarm Monitoring, starting an existing Video Tour, and selecting a camera in an existing Camera Device Group. The tour does not display after selecting Video Tour, and when rightclicking on Video Tour, the End Video Tour menu option is still enabled. When selecting Remove Video after right-clicking on Camera Video, the tour does not redisplay. Darkness in Alarm Monitoring when using Arecont Vision AV5110 Camera (OG-22486): When using the Arecont Vision AV5110 camera, Alarm Monitoring shows darkness if [Modify/OK] is clicked. During any modification or even no modification, the low light condition of the camera is set to "Balanced" which causes the sensor to reset the light conditions and cause the darkness. This is expected camera behavior. Future versions of the streaming video server will not support LDVR video (OG-22595): With the release of Lenel NVR 7.0, the streaming server is now an embedded part of the LNV Suite. Those using LDVR must use the streaming server that was released and approved for their LDVR version. SkyPoint: NetEVS delays (OG-22626): The first connection to NetEVS will take up to 20 to 40 seconds. Streaming video, viewing recorded video, and getting a recipient list will result in this delay the first time one of these functions is performed. The next time any of these functions is performed, the response time should improve. If none of these functions are performed for 15 minutes, the delay will be observed again the next time one of the functions is performed. The same initial delay will also be observed for these functions when using a NetDVMS that is configured with an Auxiliary Server (SkyPoint Base). These delays will not be observed when using a NetDVMS that is not configured with an Auxiliary Server. Performance monitor in Lenel NVR shows the incorrect live frame rate for IQinVision H.264 cameras (OG-22699): Using Performance Monitor in Lenel NVR to view live frame rate for the IQinVision cameras will show a frame rate that is more than the configured frame rate. DOC-1028-EN-US (March 2014) © 2014 Lenel Systems International, Inc. revision 1.018 — 36 • • • • • • • • • • goVision video recorder cannot be discovered in Device Discovery Console (OG 22956): goVision does not show up in the scanned list. WinPcap (from the Supplemental Materials disc) must be installed to correct this issue. Remote Monitor does not handle an IP change when using a hostname (OG 22986): In order to resolve this, the Communication Server must be restarted. Many Lenel NVR applications and utilities are not displaying correct version information (OG 23217): The following applications do not follow the same version numbers as the rest of OnGuard applications: – Lenel Hybrid Card VMD Configuration 1.0 – Lenel NVR Live Video Setup 2.0 – Lenel Video Player 5.20 NAS compatibility (OG-23272): Network Attached Storage (NAS) devices are supported by Lenel NVR. Not all devices work the same. As with any storage device responsible for recording continuous streams of data, the continuous uninterrupted read/write rates for the unit must be in line with the expected incoming/outgoing data streams. Buffering streaming video is disabled by default (OG-23275): The Buffering Streaming Video feature is now disabled by default and will also be disabled after an upgrade. For more information about buffering, refer to the Video Monitoring chapter of the Digital Video Software User Guide. Buffering streaming video with audio causes lag in timestamp (OG-23276): When the Buffering Streaming Video feature is activated and the video stream contains audio, the timestamp that is presented by default lags by a few seconds and the lag increases gradually. This has no effect with the video presented which is in the current live time. A workaround is to click the arrow to get to the latest minute of the buffering. Auxiliary Tab is missing for RC-C Recorder (NetDVMS) from Video Recorder Tab of System Administration (OG-23607): This tab was intentionally removed. The user no longer needs to explicitly associate an auxiliary server with a video recorder in order to exercise the "Send Video To..." functionality for SkyPoint integration. This is now handled automatically. Communication Server needs to restart to get the updated presets from RC-C Recorder (OG 23671): When importing PTZ camera presets to an RC-C recorder, you must restart the Communication Server. Once the Communication Server is restarted, the PTZ camera presets will display correctly in Alarm Monitoring. VideoViewer (Browser-based Client) Cab file gets 'DVRCapsLib.dll' errors when installing (OG-23693): Clients installing the Lenel Video Player browser loaded .cab installation from VideoViewer (Browser-based Client) must first have Microsoft .NET 4.0 Framework installed or they will receive errors during installation. This is not during the OnGuard installation but the Lenel Video Player that installs through the browser on a "thin" (no OnGuard installed) client accessing video in the VideoViewer (Browser-based Client). PTZ Zoom with mouse wheel is non-responsive and/or slow (OG-23694): When using PTZ mode in Alarm Monitoring with an Axis P5532-E PTZ camera, use the buttons on the toolbar to zoom rather than the mouse wheel. When attempting to zoom using the mouse wheel, the system might be unresponsive or zoom very little. DOC-1028-EN-US (March 2014) © 2014 Lenel Systems International, Inc. revision 1.018 — 37 • • • • • • • • • Live video being viewed during a VMotion event of an Lenel NVR might not come back (OG-23740): During a VMotion event, at near completion, the majority of the channels might go to the "Video signal lost" state in Alarm Monitoring on every client. The channels might return to the full live frame rate on most clients, but on some they might never come back and stay in the Video Signal Lost state. Reloading the channels might work in some cases but it might still not solve the issue. Unable to receive Communication Lost event from RC-E Recorder (OG-24126): RC-E recorders will always appear to be online. If a RC-E recorder goes offline, there is no indication that the devices from which the RC-E is recording are no longer recording/available. This is a recorder limitation. Communication Server needs to be restarted in order to import updated presets for the RC-E cameras (OG-24163): Once the Communication Server restarts and performs Import Cameras from the recorder under the Digital Video module of System Administration, the updated preset information is available in Alarm Monitoring. Connecting to VideoViewer (Browser-based Client) with Internet Explorer 64-bit on an OnGuard computer does not work properly (OG-24258): It is recommended to use the 32-bit version of Internet Explorer when using VideoViewer (Browser-based Client). If the 64-bit version is used, the system might download the CAB file every time the application is started. The user will see an 'x' where the video template should be. There is no way to get video to stream into the 64-bit application. Schedule PTZ preset failed for the presets created in Alarm Monitoring (OG 24355): The Schedule PTZ Action failed message is displayed. NetDVMS: Restoring the network connection does not give "Video Source Signal Lost" alarm (OG-24376): When using a NetDVMS or RC-C recorder with an Axis Encoder, there is a scenario in which camera status will not be reported properly in Alarm Monitoring. If the video cable that connects an analog camera to the Axis Encoder is disconnected while the Axis Encoder is offline or powered down, the camera will appear to be online in Alarm Monitoring when the Axis Encoder is brought back online or powered up. This is a recorder limitation. Certain cameras do not have color-coded frame rates (OG-24432): All AreCont Vision cameras do not have color-coded frame rates. The cameras added for OnGuard 2012 (6.5) do not have color-coded frame rates. Unable to play recorded video from RC-E Cameras continuously for more than one hour (OG 24439): Recorded video from RC-E cameras will not continuously play for more than one hour. It stops after playing for an hour. This is a limitation on the recorder and will be addressed in future releases. Receiving incorrect "Responding" event from RC-C two minutes after Axis Encoder is disconnected (OG-24479): When using a NetDVMS or RC-C recorder with an Axis Encoder, if the Axis Encoder is disconnected, Alarm Monitoring will correctly indicate the lost connections to the corresponding cameras. Approximately two minutes later, Alarm Monitoring will briefly (and incorrectly) identify those cameras as having been reconnected. Within a few seconds, the correct (disconnected) status will once again be reflected. This is a recorder limitation. DOC-1028-EN-US (March 2014) © 2014 Lenel Systems International, Inc. revision 1.018 — 38 • WinPCap installation changes (OG-24585): In previous versions, WinPCap was installed along with the Device Discovery Console and Service. The system no longer installs WinPCap. The system administrator must install WinPCap. WinPCap is available on the Supplemental Materials disc. 3.5.7. Enterprise • • • • • • Global I/O Restrictions (OG-13969): Global I/O linkages will not work between two Enterprise regions. Global I/O configurations must use the same Linkage Server. IntelligentVideo applications not available on Enterprise master when configured on a child region (OG-15971): There is a known issue with the replication of IntelligentVideo Applications to the Master Server. IntelligentVideo Applications can be configured and monitored on a per Region basis. IntelligentVideo applications not supported with IntelligentVideo application server located on a different region (OG-15972): In Enterprise systems, IntelligentVideo Applications should not be configured for IntelligentVideo Application Servers that are located on other Regional Servers. This is not a supported configuration, and the IntelligentVideo Application will not function properly. Referential integrity error when saving camera layouts (OG-15973): If a camera layout is saved with cameras added from another Regional Server via the Camera Lookup feature, a Referential Integrity error might occur. To save a layout that generates the error, remove the cameras located on other Regional Servers from the layout prior to saving. Pre-existing user-specific layouts not replicated to Enterprise master (OG-16029): Preexisting user-specific video layouts are not replicated up to the Master Server when user replication is enabled. This only affects pre-existing layouts. New layouts will be properly replicated. To work around this limitation, open each existing layout and save it again with the same name. Badge template transaction failed with violation of primary key error (OG 17915): A violation of primary key error occurs if you create a badge template and assign a cardholder to that template before the template has had a chance to replicate. If the creation of the template is replicated before the cardholder is assigned, this problem will not be encountered. To work around this error after it has occurred, purge the transaction that is failing. Once the failed transaction has been purged, other transactions should be processed successfully and the Badge table will be properly synchronized. Note: • • Purging failed transactions will typically result in an unsynchronized system and is not recommended under other circumstances. This action is specific to a particular processing error and has been tested by Lenel. Global output devices, paging devices, workstations specified at Master are overwritten with region child workstation after upgrade (OG-19091): When upgrading from a version prior to OnGuard 2008 (6.0.148), Global Output Devices, Paging Devices, and Workstations specified at the Master are overwritten with the Region Workstation after the upgrade. This does not occur when upgrading from OnGuard 2008 or later. Full download to region results in unexpected log size and application error (OG-21309): A full download to a Region results in a log larger than expected and an application error. DOC-1028-EN-US (March 2014) © 2014 Lenel Systems International, Inc. revision 1.018 — 39 4. Copyright and Trademark Notice Copyright © 2013 Lenel Systems International, Inc. Information in this document is subject to change without notice. No part of this document may be reproduced or transmitted in any form or by any means, electronic or mechanical, for any purpose, without the express written permission of Lenel Systems International, Inc. The software described in this document is furnished under a license agreement and may only be used in accordance with the terms of that agreement. Lenel and OnGuard are registered trademarks of Lenel Systems International, Inc. Microsoft, Windows, and Windows Server are either registered trademarks or trademarks of Microsoft Corporation in the United States and/or other countries. Integral and FlashPoint are trademarks of Integral Technologies, Inc. Crystal Reports for Windows is a trademark of Crystal Computer Services, Inc. Oracle is a registered trademark of Oracle Corporation. Other product names mentioned in this document may be trademarks or registered trademarks of their respective companies and are hereby acknowledged. DOC-1028-EN-US (March 2014) © 2014 Lenel Systems International, Inc. revision 1.018 — 40