Command Centre v7.50. Feature Summary. security.gallagher.com

Transcription

1 Command Centre v7.50 Feature Summary security.gallagher.com

2 Introduction... 3 PURPOSE OF THIS DOCUMENT... 3 General Command Centre v7.50 Notes... 3 UPGRADING TO VERSION CONTROLLER VERSION COMPATIBILITY... 4 OPERATING SYSTEM SUPPORT... 4 MOBILE SUPPORTED DEVICES... 4 MONITOR RESOLUTION SUPPORT... 5 DATABASE SUPPORT... 5 COMMAND CENTRE SERVER SOFTWARE LICENSING CHANGES... 5 Key Device Policy... 5 Command Centre Licensing... 5 Key Device Failure... 6 License Updates... 6 COMMAND CENTRE UPGRADE PATHS... 6 CLASSIC CLIENT RENAMED... 6 Mobile Application... 7 MOBILE ACCESS... 7 NEW APP FEATURES... 9 Cardholder Details... 9 Zone Lockdown... 9 Advanced Configuration Features... 9 MOBILE APPLICATION LICENSING CHANGE Licensing Groups Operator Sessions Control Operator Sessions Tile The Event Viewer General Viewer Configuration STATIC CONFIGURATION TILES Ademco 685 Plug-In Specific Alarm Notes SPECIFIC ALARM NOTES ON MOBILE REPORTING Extended FTCAPI Event Groups and Types EXTERNAL SYSTEM ITEMS LIMIT REMOVED Beta Warning Message Active Directory Cardholder Synchronisation Minor Enhancements JACQUES INTERCOM VISITOR MANAGEMENT KIOSK T20 LOCK OUT

3 Introduction PURPOSE OF THIS DOCUMENT The purpose of this document is to provide Gallagher Certified Channel Partners and customers with an overview of new features and products released with Gallagher Command Centre v7.50. Please note this document is not intended to be the single source of information regarding v7.50 but rather a guide to the improvements and additions. General Command Centre v7.50 Notes UPGRADING TO VERSION 7.50 Sites upgrading to Command Centre v7.50 from a previous version of Command Centre (v7.40 or earlier) will require an updated Gallagher Command Centre license file. To obtain an updated license file, a Command Centre software upgrade or software maintenance plan must be purchased. Refer to the Gallagher access policy documents for information regarding software maintenance plans and upgrades. Changes in Command Centre v7.50 may impact on the configuration of sites upgrading from earlier versions. Refer to the Command Centre v7.50 new features / enhancements release note for full details on the impact of these features before upgrading. Important Controller 6000 v7.50 upgrade note When upgrading Controller 6000 devices to v7.50, from a version prior to v7.30 the upgrade time will be longer than usual. This is to resolve an issue where a Controller 6000 may fail after upgrading (resolved in v7.30). The Controller is expected to be offline for approximately 9 minutes 30 seconds: The normal offline time is approximately 2 minutes 15 seconds While the Controller is offline the Run LED will enter a slow flash rate, this is expected and should not be interrupted A version of this fix is available in v7.20 (vgr fts) and v7.10 (vgr fts) controller code and are available on our FTP Server. Sites that are on v7.20 or v7.10 may apply the appropriate upgrade to their controllers to protect them against this issue Controllers with Serial number or higher already have this fix applied and therefore will upgrade in the normal expected time This longer upgrade will only need to be done once for each controller. If you have previously upgraded your controllers to v7.30 then this will not be an issue and subsequent upgrades including the upgrade from v7.30 to v7.50 will return to normal timings. For further information, please contact Gallagher Security Technical Support. 3

4 CONTROLLER VERSION COMPATIBILITY Command Centre v7.50 is compatible with the firmware version vbt/gr 7.50 of the Gallagher controller. It is also compatible with previous versions of controller code for upgrade purposes only. No configuration change should be done on pre-version vbt/gr 7.50 controllers once Command Centre has been upgraded. Important Note There are no software controls in place to check controller versions during peer-to-peer communications; a site will simply get unpredictable behavior. It is recommended that sites upgrading from a version prior to Command Centre v7.30 upgrade all controllers as soon as is practical for the site. OPERATING SYSTEM SUPPORT Support for the following Operating Systems/Service Packs is included in Command Centre v7.50: Minimum Gallagher Command Centre Server Service Supported Tested Operating Systems Supported Pack Windows 10 n/a Windows 8.1 Pro n/a Microsoft Windows 2012 Server n/a Microsoft Windows 2012 Server R2 n/a Microsoft Windows 2008 Server SP2 Microsoft Windows 2008 Server R2 (64 bit only) SP1 Microsoft Windows 7 Professional/Ultimate* SP1 Gallagher Command Centre Workstation Operating Systems Supported Minimum Service Pack Supported Tested Windows 10 n/a Windows 8.1 Pro n/a Microsoft Windows 7 Professional/Ultimate* SP1 Note: 32 and 64 Bit versions of the above operating systems are supported*. Command Centre is supported on virtual server environments. However, due to virtual server environment configuration variability, if initial fault resolution is inconclusive Gallagher reserves the right to request customer replication of any errors in a non-virtual environment. Command Centre installation is not supported on a Windows Domain Controller PC *Windows 7 and 64 bit Operating System support for some hardware and integrations are pending third party driver availability. Please refer to the Command Centre v7.50 Installation Note for more details. MOBILE SUPPORTED DEVICES iphone: 4S/ 5 / 5C / 5S / 6 / 6 Plus ipad & ipad Mini: ios 8.0 and above ios and above 4

5 MONITOR RESOLUTION SUPPORT Gallagher Command Centre Premier, from v7.00, is fully supported on monitors with a minimum vertical resolution of 720 pixels and above. While most Command Centre Premier screens will display correctly on lower resolution monitors some lightboxes, such as the Assign Access lightbox, have a fixed resolution which requires a monitor with a minimum of 720 vertical pixels. Monitors with a lower resolution than this will cause the bottom of some lightboxes to be removed from view. DATABASE SUPPORT Command Centre v7.50 currently supports the following databases: Gallagher Command Centre Database Server Systems Supported Minimum Service Pack Supported Tested Microsoft SQL Server 2014 n/a Microsoft SQL Server 2014 Express n/a Microsoft SQL Server 2012 SP1 Microsoft SQL Server 2012 Express SP1 Microsoft SQL Server 2008 R2 SP1 Microsoft SQL Server 2008 SP1 Microsoft SQL Server 2008 Express SP1 Note: SQL Server 2014 Express is the default freely available database for Gallagher Command Centre. 32 and 64 Bit versions of the above databases are supported. COMMAND CENTRE SERVER SOFTWARE LICENSING CHANGES From Command Centre v7.40 the core Gallagher Command Centre Server License (part number C201311) and associated translated version (part number C201411) now includes six electric fence zone licenses (part number 2A8272). Sites receiving new or upgraded licenses for Gallagher Command Centre will automatically receive these electric fence zone licenses within their CommandCentre.Lic file. Key Device Policy In Command Centre v7.00 Gallagher introduced a new key device policy. The policy is described below and relates to the process for changes to key devices in a Command Centre license file. Command Centre Licensing Gallagher licenses the use of its Command Centre product via key devices. A key device can be any controller permanently installed and communicating with the Command Centre server. Each site can have one or two key devices. The key devices are identified in the license file at the time of its purchase from Gallagher. 5

6 Key Device Failure Should a key device fail or be removed from the site for any reason an alarm will be raised in Gallagher Command Centre. Note: Prior to Command Centre v7.00, only the last key device being removed from the system causes an alarm. From Command Centre v7.00 and later versions, any key device being removed will generate an alarm. When the last key device is removed, if the license file is not updated or the key device returned, after an elapsed period of time the system will become read-only. License Updates When Gallagher is requested by a Certified Channel Partner to update the key devices in a site license file, due to failure or removal of the key device from that site, Gallagher requires that the key device is sent back to the nearest Gallagher regional sales office within 30 days. Should the Channel Partner not be able to return the key device then Gallagher reserves the right to invoice the Channel Partner for the full cost of the site s Gallagher Command Centre software based on the price list in effect at the date of invoice. COMMAND CENTRE UPGRADE PATHS The following upgrade paths to Command Centre v7.50 are fully supported: Version 7.10.xxx to version 7.50 Version 7.20.xxx to version 7.50 Version 7.30.xxx to version 7.50 Version 7.40.xxx to version 7.50 CLASSIC CLIENT RENAMED Gallagher Command Centre needs to be viewed as one solution used daily to manage and monitor a sites regular activity (formerly Premier Client), as well as cardholders and their relevant access. In contrast the Configuration Client (formerly Classic Client) is used by system installers and system administrators to manage the initial installation and configuration and then the less regular (yet complex) site config changes once the site is operational. 6

7 Mobile Application MOBILE ACCESS Building upon the success of the Mobile Client s previous installments, v7.50 introduces a key new feature: The Mobile Access feature. Mobile Access provides a mobile solution to ensure accurate access control, and maintains the integrity of the Gallagher Command Centre system when a fixed access reader is compromised or unsuitable for use. Coupled with the Gallagher Mobile Reader, the Mobile Access feature grants the ability for operators to move a cardholder into a zone. The cardholder s competencies, access groups and card credentials will be authenticated by the system and displayed in the user interface clearly resulting in a granted or denied access decision. Two zones can be configured to make switching between a user specified entry and exit zone fast and easy. The Mobile Reader s continuous read functionality allows the device to read for 2 minutes from the last time a card was badged providing hands-free operation during busy card reading situations. An intuitive user interface and audio tones explicitly signal whether a cardholder has been granted or denied access to a zone. 7

8 Controlled Challenge mode; similar to the Controlled Challenge feature in Command Centre, enables the mobile operator to manually allow a cardholder access to a zone. This feature is particularly useful if a cardholder s PDF image doesn t match their ID card. Manual Cardholder search. If a cardholder has lost or misplaced their card, the operator can manually search for the cardholder and move them into an access zone. If an Access Zone is in lockdown or is armed, the Mobile Access feature warns the operator and denies any attempts of cardholder access. The Mobile Access feature also makes it clear to the operator if a zone is in a free state, resulting in free access for any cardholder. 8

9 The ability to trigger outputs assigned to doors and macros once a cardholder has successfully been granted access to a zone. These features can be configured to the Access Zones in the Access Reader setup tab. Licensing Gallagher Mobile Access is a licensed feature, part number 2A8561. Purchase of a license enables a single mobile device in conjunction with the Gallagher Mobile Reader (C861300) to use the new feature. Naming Changes The Mobile Challenge feature, is now known as Spot Check. NEW APP FEATURES A range of features have been added to the Command Centre Mobile App, including: Cardholder Details The cardholder details screen now includes a Disable Cardholder function. This feature is useful if a card has been reported lost or stolen, preventing entry from un-authorized personnel. Zone Lockdown Individual access zones can now be put into lockdown as soon as it s required from the mobile, without having to configure a macro in Command Centre first. Simply navigate to the required Access Zone and select Lockdown. Advanced Configuration Features Advanced features which are configured to a zone such as; Dual Authorization, Zone Counting, Anti-Tailgating, Anti-Passback and PIN unlock, will not function on the Access Reader. When assigning an access zone to the Access Reader, the Administrator will be notified that these features will be disabled instead defaulting to a secure status. 9

10 MOBILE APPLICATION LICENSING CHANGE There has been a change to the Gallagher Command Centre Mobile Application licensing (previously was part number C12701) which was based on the number of connections to the server. The new license 2A8559 is based on a single device connection to the server. Sites running Gallagher Command Centre v7.30 and above will be eligible for one free device license. 10

11 Licensing Groups Operators may require guaranteed logon to Gallagher Command Centre v7.50 especially in multi-tenanted and multi-divisional sites. The Licensing Groups feature allows access to workstations and visitor management kiosks to be reserved. Workstation license reservation can be guaranteed by workstation and/or by operator, ensuring that access to the security software is always available for important users or stations. When an operator logs on, the system will first check if there is a reserved license for that licensing group member. If there is, it will use this reservation. If not, then the system will check if any unreserved floating licenses are available. If there is an available floating license the operator will logon successfully. If no floating license remains, the operator will not be able to logon. Other Licensing Group points of note: Licensing Groups are configured in the Configuration Client under the Configure menu. An operator or a workstation cannot be a member of more than one Licensing Group. Floating licenses are total workstation licenses (in the license file) less total reserved licenses across all groups. These floating licenses are not configured; they are the remaining non-reserved licenses. If total reservations across all groups are set above the actual licensed workstations (or visit kiosks) a warning message will appear stating this situation. Operators can be drag and dropped from the Cardholder (Operators) property page of the Operator Groups window, from the Cardholder Master List Window (MLW) if the cardholder is an operator, and from other license group grids. Workstations can be drag and dropped from the Services and Workstations MLW and from other license group grids. Right-mouse click of an item in this grid will invoke a context menu which will include an option to Remove from List. View Site in the division of the licensing group is required to view a license group. Edit Site in the division of the licensing group is required to edit a license group. Edit Site in the division of the workstation is required to change the licensing group assigned to a workstation. WARNING: Do not set reservations at or above the total license limit with no operators or workstations in any of the groups. 11

12 In the example below, two workstation licenses are reserved for the three operators Paul, Harry and Mike. This guarantees logon for two out of the three operators. If Mike and Harry are logged on, Paul can still logon via a floating (non-reserved) license if one is available. To guarantee logon for all three operators, the Workstations reservation should be increased to three. 12

13 In the example below, assuming workstation reservations for the group are also set at two, any two operators are guaranteed logon through any of the three workstations 1085, 1438 and If say 1085 and 1438 both are consuming a reserved license, then any operator can still logon on 9787 via a floating license if one is available. To guarantee logon for all three workstations the Workstations reservation should be increased to three. A Licensing property page has been added to the workstation item. This page will display the Licensing Group (if exists) membership for the workstation. The group can be changed from the drop-down. 13

14 A Licensing Group drop-down has been added to the Operator Configuration property page of the cardholder item. The group can be changed from the drop-down menu. Licensing The Licensing Groups feature is freely available within Gallagher Command Centre 14

15 Operator Sessions Control The Operator Sessions page has moved from the Server Properties to the Monitor menu in Command Centre v7.50 Configuration client and has been enhanced allowing the termination of operator sessions. The Licensing Group column has been added in this version. Viewing and termination of sessions are controlled via privileges. An operator requires View Operator Session (or Terminate Operator Session) in the division of the workstation or mobile device associated with the session to see a session in the Operator Sessions window. An operator requires Terminate Operator Session in the division of the workstation or mobile device associated with the session to allow termination of the session. Terminate Operator Session includes the privileges provided by View Operator Session. If a session does not have an associated workstation or mobile device, then an operator requires these privileges in the root division to see the session. The only session types that can be terminated are Operator, Operator (Configuration Client), Receptionist, VM Kiosk and Mobile. Prior to v7.50 network related session disconnections could potentially remain locking up a workstation license for up to four hours. In v7.50 this time delay has been reduced to less than 5 minutes. The ability to terminate sessions gives privileged operators control over active and expired sessions allowing instant freeing of workstation licenses. Licensing The Operator Sessions Control feature is freely available within Gallagher Command Centre 15

16 Operator Sessions Tile The Operator Sessions Tile looks similar and provides similar functionality to the Operator Sessions Control in the Configuration client. The Operator Sessions can be grouped by licensing group and when displayed in this way will also show a summary of the licenses used and reserved for workstations and kiosks. Those sessions associated with workstations or operators not in groups as well as mobile sessions will be combined as floating. Columns can be resized and sorted but cannot be re-ordered, removed or re-added. Sessions can be terminated based on the same privileges mentioned for the Operator Sessions Control. The tile can be added to any viewer. Licensing The Operator Sessions Tile is freely available within Gallagher Command Centre 16

17 The Event Viewer Version 7.50 introduces a new viewer to the existing suite of configurable operator views The Event Viewer provides the ability to monitor and search for events and retrieve all related information for display to the operator including and most importantly stored video footage. Initially developed to support sites that do not actively manage alarms but do need to review access events and review related footage. For sites that use alarm management, the real power in this viewer is in the post event analysis where alarms may have already been processed but there is a need to review all related details of the event or incident requiring closer scrutiny. The Event Viewer supports two modes. 1. Live Events actively monitoring events for the division(s) configured. 2. Historical Events search. Allowing the ability to refine and search for past events. 17

18 The operator has the ability to specify a date range and then specify additional filters. This includes the ability to filter events by specific items that may be the event source (i.e. a door) and/or by specific event types or groups (i.e. access granted events). This narrows the search criteria enabling the operator to find the relevant events quickly and easily. When the results have been filtered, the operator is made aware that filter has been applied to avoid any confusion when changing dates. Events with items that have cameras associated or an action plan with a camera are displayed with an icon to show that there is stored footage retrievable & viewable in a pre-configured tile. In the Event Viewer, configuration retains the same flexibility that exists within the existing Alarm Viewer. The same tiles can be assigned to the viewer based on the same or similar rules, displaying information that is relevant to the event type. Additionally, with the Event Viewer, there is a new Event Details tile, that displays additional event information. Licensing The new Event Viewer is freely available within Gallagher Command Centre 18

19 General Viewer Configuration STATIC CONFIGURATION TILES For operators who may perform a number of functions and wish to see more tiles on the same viewer, there is now the ability to configure the following tiles to operate independent of a viewer navigation panel. The tiles can be configured to operate with a static configuration that will display irrespective of what cardholder, alarm or event is selected on the chosen Viewer. These tiles include, Event Trail Guard Tour Site Plan URL Operator Sessions Broadcast Notifications (Customization) This also includes tiles that can be configured to Operator Selected that can be dynamically updated responding to either drag & drop functionality or the tiles search ability. These tiles include, Camera Status Tag Board Any tiles that can operate independently, can be placed on any viewer. Tiles that exclusively require a navigation panel to operate are excluded, (cannot be operated independently) Licensing The ability to configure tiles to function independently to others is freely available within Gallagher Command Centre 19

20 Ademco 685 Plug-In Command Centre v7.50 now supports the ability to receive incoming alarms from controllers (both the Gallagher Controller 6000 and third party alarms panels) via the industry standard Ademco 685 protocol. Organizations with a central Gallagher Command Centre server may have remote branches running third party alarms panels, which are monitored at a cost by alarms monitoring stations. Often these alarms could be monitored more effectively and cost effectively by the organization s Gallagher Command Centre instance. Organizations may also wish to monitor alarms from Gallagher Controllers which are located on another party s Command Centre server, for example, where alarms in a multi-tenanted building are relevant to all parties. Gallagher Command Centre v7.50 now allows alarms from these panels to be passed from an alarms receiver (either the Gallagher IP Alarms Receiver, or a third party alarms receiver) to a Controller The Ademco 685 Plug-In, which receives industry standard Ademco 685 Contact ID codes over RS-232, and translates these to Controller 6000 Event and Alarms API compliant alarms. These alarms can then be represented in Command Centre as alarms from External System Items, which may be monitored and acted upon. External Gallagher Controller 6000 Alarms Monitoring 20

21 Third Party Alarm Panel Monitoring The Ademco 685 Plug-In supports multiple receivers, with a default mapping file provided for monitoring standard Ademco Contact ID (DC09), modifiable by the installer. An External System and External System Item import tool is also available, which allows an installer to create the Command Centre configuration from a CSV file imported from Microsoft Excel. Licensing The Controller Ademco 685 Plug-In is a licensed feature. The Gallagher IP Alarms Receiver is a freely available application found in the Utilities folder off the Gallagher Command Centre installation disk. 21

22 Specific Alarm Notes The Alarm Instruction item has been enhanced with a new Alarm Notes tab. A user with the Edit Site privilege now has the ability to add (or remove) specific alarm notes in relation to the particular alarm instruction. The Alarm Notes that are displayed on this page will be available to operators when managing alarms that are related to that specific alarm instruction. 22

23 SPECIFIC ALARM NOTES ON MOBILE The specific Alarm Notes also carry through to the Command Centre Mobile where the Guard or operator will be able to respond with specific details that are relevant only to that type of alarm as seen in the two mobile screen shots below: REPORTING A new Alarm Notes column will be added to the reporting function so that Alarm Notes can be viewed against each alarm. This will allow sites to produce reports and filter, group or sort by the alarm note added. It will also be possible to enter freetext alarm notes and report those within the Alarm Notes column of the relevant report, as shown in the example below: 23

24 Extended FTCAPI Event Groups and Types Gallagher Command Centre v7.50 enhances the FTCAPI to allow up to 30 External Event Groups. The existing External Event Groups 0-9 remain and are extended to External Event Groups Each group has one event type External Event 0-29 by default. The FTCAPI now allows up to 1000 event types across all external event groups. It is now possible to assign a title to these external event groups and types using a new utility. The Site Configuration Report in the Configuration Client has been enhanced to show the customized external event groups and types whenever one or more items has been added or assigned a title. EXTERNAL SYSTEM ITEMS LIMIT REMOVED Prior to Gallagher Command Centre v7.50 a limit of 100 External System Items per External System existed. This limit has been removed in v7.50, although it is recommended that this number does not exceed

25 Beta Warning Message Gallagher Research and Development often release pre-production versions of Command Centre to allow internal staff to become familiar with features prior to release to market. Occasionally these earlier versions of software are exposed to Channel Partners and customer sites. To mitigate the undesired risks of these early software builds being used on customer sites beyond the normal release cycle Beta period a Beta warning message will display during the install process when installing pre-production software. A BETA string will also be added to the Site name that appears in the title bar of both Command Centre and Configuration Clients When a version is intentionally released to Beta customers this BETA string will be suppressed from the Title Bar. 25

26 Active Directory Cardholder Synchronisation Command Centre integrates with Microsoft Active Directory (AD) enabling cardholder and user records to be fully synchronized on a real time basis. As user records are created or modified within AD this will automatically drive the registration or update of cardholder records within Command Centre including the assignment of access permissions and operator groups. The integration is bidirectional, allowing for the use case where Command Centre, as the source of truth for specific cardholder details (card number, CSN or Image), needs to share this data with other organizational systems. The integration simplifies the user experience by: Seamlessly linking physical access permissions to existing logical access permissions; Eliminating duplication of data entry, minimizing the possibility of data errors and ensuring fast and efficient management of staff and contractors; Ensuring a swift response to security risks by disabling both logical and physical access permissions at the click of a button. For a complete list of functionality and documentation please refer to the Gallagher Security Support Site. Licensing Active Directory Cardholder Synchronisation is a licensed feature (Part Number C12738). It is packaged as a web service with its own installer and requires the following entry within the Command Centre license: [Customisation Options] ActiveDirectorySync=1 26

27 Minor Enhancements JACQUES INTERCOM The integration with the Jacques intercom system has been enhanced to allow actions to be available for operators working from site plans and status tiles. Operators now have the ability to call, answer, hold and hang up calls directly from these tiles. There is also the ability to isolate and de-isolate the intercoms. Note: As a number sites have a restricted policy on this ability, isolating intercoms does require a separate utility to be installed during configuration. VISITOR MANAGEMENT KIOSK Streamlining the sign in process A small change to the configuration of the Visitor Management Kiosk now allows the ability to remove the create visit screen from the sign in process. New visits can still be created, but instead of displaying this screen, the system will apply the visit default times. Note: The configuration does allow for the Kiosk to be restricted to Pre-registered Visits Only. These visits are further streamlined and when combined with automatically marked on site the visitor experience is quick and efficient, reducing the overall time needed to complete the sign in process. T20 LOCK OUT To protect from unauthorised attacks, the Gallagher T20 Terminal can now be configured to lock out users for 90 seconds if repeated attempts are made to log on to the terminal with an incorrect user code or PIN. 27

28 GALLAGHER WORLD HEADQUARTERS Kahikatea Drive, Hamilton 3206 Private Bag 3026, Hamilton 3240 New Zealand TEL: security@gallagher.com REGIONAL OFFICES New Zealand Americas Asia Australia India Middle East South Africa United Kingdom / Europe DISCLAIMER: This document gives certain information about products and/or services provided by Gallagher Group Limited or its related companies (referred to as Gallagher Group ). The information is indicative only and is subject to change without notice meaning it may be out of date at any given time. Although every commercially reasonable effort has been taken to ensure the quality and accuracy of the information, Gallagher Group makes no representation as to its accuracy or completeness and it should not be relied on as such. To the extent permitted by law, all express or implied, or other representations or warranties in relation to the information are expressly excluded. Neither Gallagher Group nor any of its directors, employees or other representatives shall be responsible for any loss that you may incur, either directly or indirectly, arising from any use or decisions based on the information provided. Except where stated otherwise, the information is subject to copyright owned by Gallagher Group and you may not sell it without permission. Gallagher Group is the owner of all trademarks reproduced in this information. All trademarks which are not the property of Gallagher Group, are acknowledged. Copyright Gallagher Group Ltd All rights reserved. 3E1361 3E /16 01/16 security.gallagher.com security.gallagher.com