This article was machine-translated from French and is being reviewed. Prices are in Algerian dinars excl. VAT.
L'remote access to cameras is done with the manufacturer’s mobile app over the internet. It remains controlled if three rules are respected: passwords changed, no port opened on the internet router, firmware up to date. It is not allowed everywhere: regulation forbids internet connection for certain systems (see “Before opening remote access”). For a professional site, prefer the manufacturer’s cloud service or a VPN instead of port forwarding.
In short
- Three risks: default password, open ports, old firmware. All are fixed at installation.
- Two safer paths: the manufacturer’s cloud service (simple) or a VPN (more closed). Port forwarding should be avoided.
- Plan for 2 to 4 Mb/s upstream bandwidth to view 4 to 8 cameras in secondary stream (lower calculation). A WireGuard VPN costs about 65,000 DA HT on one of our quotes (rough estimate, single order).
Remote camera access: three ways to connect
The path is always the same: cameras, recorder, internet router, internet, phone. The router blocks external connections by default. Three solutions exist.
| Manufacturer’s cloud service | Port forwarding | VPN | |
|---|---|---|---|
| Principle | The phone connects to a manufacturer server, which links it with the recorder; the video stream may or may not pass through that server depending on the manufacturer. | The router allows connections to the recorder | An encrypted tunnel connects the phone to the site network |
| Open ports | None | Yes | Usually only one, for the VPN. |
| Our opinion | Suitable for a small site | To avoid | Suitable for multiple users or a sensitive site, with a router or firewall that manages the VPN |
The three risks to know
- Default password : a device with its factory password is the first entry point. Automatic tools scan the internet to find them.
- Open ports : a redirected port makes the recorder visible from the internet, without other protection.
- Old firmware : the firmware is the device’s internal software. A known flaw remains exploitable until it is updated.
See also IP or analog camera.
Before opening remote access
Before offering internet access, verify whether regulation allows it for the site in question. Executive decree No 09‑410, supplemented by executive decree No 16‑61 (article 20 bis), forbids internet connection for CCTV systems of public structures. It also prohibits it for private structures whose cameras film open public space; the operator must then commit in writing not to connect their system to the internet. According to the press, a resolution of ANPDP (No 02 dated 4 March 2026) appears to go in the same direction for administrations and public enterprises. We could not read its official text.
For a shop, clinic or site where cameras view the street or public space, confirm your status with authorities before enabling remote access. If internet access is not allowed, the best practices below do not apply. Details are in your company declaration obligations and in how to verify an installer is approved. For a home, the wilaya of Algiers authorization file includes an agreement not to connect the system to the internet: see the authorization file for home cameras.
Securing remote access: best practices
- Strong unique password: 12 characters or more if the device accepts it, different on the recorder and each camera, changed at installation.
- Separate network : cameras and recorder on a dedicated switch, or on a VLAN (isolated virtual network) when the switch allows it. Workstations remain out of reach of a hacked camera.
- Firmware updates for the recorder and cameras, at each maintenance visit.
- VPN or manufacturer cloud service, never port forwarding.
- A user account per person, with limited rights (see without modifying the configuration). Delete any person's account when they leave. Keep the administrator account off the phone.
- Disable the unnecessary: UPnP (a device asks the router to open a port), default accounts, unused services such as FTP or Telnet, and cloud if you go through a VPN. Available settings depend on the model.
What internet bandwidth to plan?
Remote camera viewing uses the site's upstream (upload) bandwidth, not the advertised downstream.
- Secondary stream, reduced image for the phone: about 0.5 Mb/s per camera.
- Main stream, full definition: about 2 Mb/s for a 2 MP camera in H.265 (see the recording duration).
Calculations: 4 cameras displayed together, 4 × 0.5 = 2 Mb/s; 8 cameras, 8 × 0.5 = 4 Mb/s; 2 people on 4 cameras, 2 × (4 × 0.5) = 4 Mb/s. On the phone, 0.5 Mb/s consumes 0.5 × 3,600 ÷ 8 = 225 MB per hour. These rates vary with the camera, setting and connection: measure the actual upstream rate on site.
What does securing cost?
Points 1, 3, 5 and 6 are settings, no hardware. Reference points on our quotes, each for a single order: examples, not prices. All prices are in DA HT.
| Quote line | Price (DA HT) |
|---|---|
| Manufacturer’s cloud service | No hardware; adjustment on quote |
| Implementation of a WireGuard VPN solution | 65 000 |
| Configuration of an additional VPN user | 6 000 |
| Provision, installation and configuration of a pfSense firewall | 285 000 |
For 3 VPN users: 65,000 + 2 × 6,000 = 77,000 DA HT, if the implementation includes the first user. The pfSense line covers a full firewall, supplied, which can also separate networks: its price is not that of a VPN alone.
Frequently asked questions
Can I see the cameras during a power outage?
Yes, if the recorder, PoE switch and internet router (with the operator’s modem or fiber) are on UPS, and if the operator’s network remains powered. See UPS for cameras.
What to do if I kept the factory password?
Change it on the recorder and each camera. Remove port forwards from the internet router, check the account list and update the firmware. If the recorder was visible from the internet, ask a technician for a check.
Is remote access mandatory?
No. Without remote access, the recorder records and is viewed on site. The safest option is to enable it only if needed.
A technician configures remote access and separates the camera network. AsloTech holds type I approval No. 207 dated March 17, 2025 from the Ministry of Interior (extent of approval). Discover our CCTV video surveillance solution or the CCTV shop. Also see how to choose your installation and the price of an IP installation.