CAVSS DESIGN GUIDE STANDARDS.pdf

Border Security Deployment Program

1/10/2014

CAVSS DESIGN GUIDE STANDARDS

BORDER SECURITY DEPLOYMENT PROGRAM

Table of Contents

F.1 SUMMARY

F.2 SYSTEM

F.2.1 System Overview

SYSTEM OVERVIEW (FIGURE F2-1)

F.2.2 Overall System Requirements

F.2.3 System Compliance

F.2.4 System Documentation

F.2.4.1. Technical Data Package

F.2.4.2. As Built Data Package

F.3 Racks

F.3.1 Equipment Rack

F.3.1.1. Rack Requirements

F.3.1.2. Rack Footprint

F.3.1.3. HVAC

F.3.1.4. POWER

F.3.1.5. Cable Management

F.3.1.6. Labeling

F.3.1.7. Industry Standards

F.3.1.8. Acceptable Manufacturers

Figure F-3-1. Rack Front with Door Open

Figure F-3-2. Rack Front with Door Closed

Figure F-3-3. Side by Side Rack Front with Doors

Figure F-3-4. Typical Rack Elevation Example

F.3.2 Operator Console

F.3.2.1. Console Requirements

F.3.2.2. Console Footprint

F.3.2.3. HVAC

F.3.2.4. Power

F.3.2.5. Cable Management

F.3.2.6. Industry Standards

F.3.2.7. Acceptable Manufacturers

WARNING: This document is FOR OFFICIAL USE ONLY (FOUO). It contains information that may be exempt from public release under the Freedom of Information

Act (5 U.S. C. 522). It is to be controlled, stored, handled, transmitted, distributed, and disposed of in accordance with DHS policy relating to FOUO information and is not to be released to the public or other personnel who do not have a valid “need-to-know” without prior approval of an authorized DHS official.

Figure F-3-5. Typical Console Example 1

Figure F-3-6. Typical Console Example 2

Figure F-3-7. Typical Console for Centralized Area Surveillance Center (CASC) Example 3

F.4 Digital Video Recorders (DVR)

F.4.1 Features

F.4.2 Settings

F.4.2.1. Cameras

F.4.2.2. Microphones

F.4.2.3. Recording Requirements

F.4.2.4. Normal Operation

F.4.3 Installation Requirements

F.4.3.1. Cable Management

F.4.3.2. Labeling

F.4.3.3. Power

F.4.4 Installation Procedures

F.4.5 DVR Installation Checklist

F.4.6 Accepted Manufacturers

F.4.7 Sample Accepted Models

F.5 Network Video Recorders

F.6 RAIDS

F.6.1 RAID Requirements

F.6.2 Specifications

F.6.3 Cable Management

F.6.4 Labeling

F.6.5 Power

F.6.6 Suggested Manufacturers

F.7 Video Monitoring Workstations

F.7.1 Nucleus Server

F.7.1.1. Specifications

F.7.1.2. Installation

F.7.1.3. Labeling

F.7.1.4. Suggested Manufacturers

WARNING: This document is FOR OFFICIAL USE ONLY (FOUO). It contains information that may be exempt from public release under the Freedom of Information

Act (5 U.S. C. 522). It is to be controlled, stored, handled, transmitted, distributed, and disposed of in accordance with DHS policy relating to FOUO information and is not to be released to the public or other personnel who do not have a valid “need-to-know” without prior approval of an authorized DHS official.

F.7.2 Work Workstation

F.7.2.1. Specifications

F.7.2.2. Installation

F.7.2.3. Labeling

F.7.2.4. Suggested Manufacturers

F.7.3 Video Monitoring Workstations

F.7.3.1. Specifications

F.7.3.2. Installation

F.7.3.3. Labeling

F.7.3.4. Suggested Manufacturers

F.7.4 Standard Desktop Configuration Guide

F.7.5 Video Matrix

F.7.5.1. Specifications

F.7.5.2. Installation

F.7.5.3. Labeling

F.7.5.4. Suggested Manufacturers

F.8 Monitors

F.8.1 Locations

F.8.2 Specifications

F.8.3 Installation

F.9 Uninterruptible Power Supply (UPS)

F.10 Network Switch

F.11 KVM Switch

F.11.1 Specifications

F.11.2 Installation

F.11.3 Labeling

F.11.4 Suggested Manufacturers

F.12 Fiber Optic Cabling

F.13 Fiber Optic Transmission/Devices

F.14 Wireless

F.15 Signs

Figure F-15-1 Sign Examples

WARNING: This document is FOR OFFICIAL USE ONLY (FOUO). It contains information that may be exempt from public release under the Freedom of Information

Act (5 U.S. C. 522). It is to be controlled, stored, handled, transmitted, distributed, and disposed of in accordance with DHS policy relating to FOUO information and is not to be released to the public or other personnel who do not have a valid “need-to-know” without prior approval of an authorized DHS official.

F.16 Cameras

F.16.1 Installation

F.16.1.1. Environmental Limitations

F.16.1.2. Camera Placement

Figure F-16-1. Enclosure Example

F.16.1.3. Mounting

F.16.1.4. Camera Pole Mounting Guidelines

F.16.1.5. Power

Figure F-16-2. Power Supplies mounted on a backboard

F.16.1.6. Conduit

F.16.2 Camera Specifications-Types

F.16.2.1. Fixed Position Cameras

F.16.2.1.1. General Specifications

F.16.2.1.2. Cable

F.16.2.1.3. Connectors

F.16.2.1.4. Lens Selection

F.16.2.1.5. Suggested Manufacturers

F.16.2.2. Pan Tilt Zoom Cameras

Figure F-16-3 Pan Tilt Zoom Dome Example

F.16.2.2.1. General Specifications

F.16.2.2.2. Cable

F.16.2.2.3. Suggested Manufacturers

F.16.3 Network Cameras

F.17 Microphones and Audio

F.17.1 Microphones

F.17.2 Noise Reduction

F.17.3 Cabling

F.17.4 Power

F.17.5 Suggested Manufacturers

Figure 17-1: Microphone Example 1

Figure 17-2 Microphone Example- Indoor only

Figure 17-3 Microphone Example

WARNING: This document is FOR OFFICIAL USE ONLY (FOUO). It contains information that may be exempt from public release under the Freedom of Information

Act (5 U.S. C. 522). It is to be controlled, stored, handled, transmitted, distributed, and disposed of in accordance with DHS policy relating to FOUO information and is not to be released to the public or other personnel who do not have a valid “need-to-know” without prior approval of an authorized DHS official.

F.18 Typical Land Border Port Surveillance Coverage

F.19 Passenger Vehicle Lane Queue (Pre-Primary)

F.19.1 Cameras

F.19.2 Audio

F.20 Passenger Vehicle Lane (PCS LANE)

F.20.1 Cameras

F.20.1.1. Camera 1: Front Lane Camera

F.20.1.2. Camera 2: Rear Lane Camera

F.20.1.3. Camera 3: Driver Camera Low

F.20.1.4. Camera 3: Driver Camera High

F.20.2 Audio

F.20.3 Booth Details

Figure 20-1 Low Single Level Booth

Figure 20-2 Low Single Level Booth

Figure 20-3 High Low Booth ............................................................... Error! Bookmark not defined.

Figure 20-4 High Low Booth

F.21 Post Primary (PCS)

F.21.1 Cameras

F.21.2 Audio

F.22 Secondary Passenger Screening

F.22.1 Cameras

F.22.2 Audio

F.23 Port Exit

F.23.1 No Exit Booth (port with no exit booth)

F.23.1.1. Camera

F.23.1.2. Audio

F.23.2 Exit Booth (port with an exit booth)

F.23.2.1. Camera 1

F.23.2.2. Camera 2

F.23.2.3. Camera 3

F.23.2.4. Audio

F.24 Outbound

WARNING: This document is FOR OFFICIAL USE ONLY (FOUO). It contains information that may be exempt from public release under the Freedom of Information

Act (5 U.S. C. 522). It is to be controlled, stored, handled, transmitted, distributed, and disposed of in accordance with DHS policy relating to FOUO information and is not to be released to the public or other personnel who do not have a valid “need-to-know” without prior approval of an authorized DHS official.

F.24.1 Camera 1: Outbound Lane Front

F.24.2 Camera 2: Outbound Lane Rear

F.24.3 Camera 3: Outbound Over watch

F.24.4 Audio

F.25 Exit Gate

F.25.1 Cameras

F.25.1.1. Camera 1: Exit Gate Spotter

F.25.1.2. Camera 2: Exit Gate

F.25.2 Audio

F.26 Cargo/Commercial Vehicles Entering the US

F.26.1 Cameras

F.26.2 Audio

F.27 Commercial Entry Gates ............................................................ Error! Bookmark not defined.

F.27.1 Cameras ........................................................................ Error! Bookmark not defined.

F.27.1.1. Camera 1: Cargo Entry Gate Spotter ............................ Error! Bookmark not defined.

F.27.1.2. Camera 2: Cargo Entry Gate ........................................ Error! Bookmark not defined.

F.27.2 Audio ............................................................................. Error! Bookmark not defined.

F.28 Commercial Vehicle Processing Lane

F.28.1 Cameras

F.28.1.1. Camera 1: Cargo Lane Front

F.28.1.2. Camera 2: Cargo Lane Driver Low

F.28.1.3. Camera 3: Cargo Lane Driver High

F.28.2 Audio

F.29 Commercial Post Primary

F.29.1 Cameras

F.29.2 Audio

F.30 Commercial and Import Docks

F.30.1 Cameras

F.30.1.1. Camera 1: Dock Operations

F.30.1.2. Camera 2: Dock Inspections

F.30.2 Audio

F.31 Commercial Secondary Inspection Screening

WARNING: This document is FOR OFFICIAL USE ONLY (FOUO). It contains information that may be exempt from public release under the Freedom of Information

Act (5 U.S. C. 522). It is to be controlled, stored, handled, transmitted, distributed, and disposed of in accordance with DHS policy relating to FOUO information and is not to be released to the public or other personnel who do not have a valid “need-to-know” without prior approval of an authorized DHS official.

F.31.1 Cameras

F.31.1.1. Camera 1- NII Approach

F.31.1.2. Camera 2- NII Lane

F.31.1.3. Camera 3- NII Exit

F.31.1.4. Camera 4- NII Driver Waiting

F.31.2 Audio

F.32 Commercial Exit

F.32.1 Cameras

F.32.1.1. Camera 1- Commercial Exit

F.32.1.2. Camera 2- Cargo Exit Booth Front (per booth)

F.32.1.3. Camera 3-Cargo Exit Booth Driver (per booth)

F.32.2 Audio

F.33 Commercial Exit Gate

F.33.1 Cameras

F.33.1.1. Camera 1

F.33.1.2. Camera 2

F.33.2 Audio

F.34 Building Interiors

F.34.1 Driver Waiting Room Areas

F.34.1.1. Cameras

F.34.1.2. Audio

F.34.2 Permit Counters

F.34.2.1. Cameras

F.34.2.2. Audio

F.34.3 Cashier

F.34.3.1. Cameras

F.34.3.2. Audio

F.34.4 Interview Rooms

F.34.4.1. Cameras

F.34.4.2. Audio

F.34.5 Holding Cells

F.34.5.1. Cameras

WARNING: This document is FOR OFFICIAL USE ONLY (FOUO). It contains information that may be exempt from public release under the Freedom of Information

Act (5 U.S. C. 522). It is to be controlled, stored, handled, transmitted, distributed, and disposed of in accordance with DHS policy relating to FOUO information and is not to be released to the public or other personnel who do not have a valid “need-to-know” without prior approval of an authorized DHS official.

F.34.5.2. Audio

Figure 34-1 Holding Cell Camera and Microphone

Figure 34-2 Holding Cell Example Layout 1

Figure 34-3 Holding Cell Example Layout 2

Figure 34-4 Holding Cell Example Layout 3 ..................................... Error! Bookmark not defined.

Figure 34-5 Holding Cell Example Layout 4

F.34.6 Lobby Areas

F.34.6.1. Cameras

F.34.6.2. Audio

F.34.7 Patdown and Fingerprint Areas

F.34.7.1. Cameras

F.34.7.2. Audio

F.34.8 Seizure Rooms

F.34.8.1. Cameras

F.34.8.2. Audio

F.34.9 Entrance/Exit Doors

F.34.9.1. Cameras

F.34.9.2. Audio

F.34.10 Pedestrian

F.34.10.1. Pre-Primary Pedestrian

F.34.10.2. Primary Pedestrian

F.34.10.3. Pedestrian Exit

F.35 Port Perimeter

F.36 Port Design Template Overview

WARNING: This document is FOR OFFICIAL USE ONLY (FOUO). It contains information that may be exempt from public release under the Freedom of Information Act

(5 U.S. C. 522). It is to be controlled, stored, handled, transmitted, distributed, and disposed of in accordance with DHS policy relating to FOUO information and is not to be released to the public or other personnel who do not have a valid “need-to-know” without prior approval of an authorized DHS official.

PAGE LEFT INTENTIONALLY BLANK

WARNING: This document is FOR OFFICIAL USE ONLY (FOUO). It contains information that may be exempt from public release under the Freedom of Information Act

(5 U.S. C. 522). It is to be controlled, stored, handled, transmitted, distributed, and disposed of in accordance with DHS policy relating to FOUO information and is not to be released to the public or other personnel who do not have a valid “need-to-know” without prior approval of an authorized DHS official.

CAVSS – Centralized Area Video

Surveillance System

All specifications below do not supersede in any way, any Federal, state, local codes, or laws. These specifications are intended to be used in conjunction with existing building conditions and as a supplement to the CBP LPOE Design Guide, Internal Affairs (IA) and Office of Information and Technology

(OIT) Requirements and all federal, state, and local codes where applicable.

F . 1 S U M M A R Y

The Centralized Area Video Surveillance System (CAVSS) is a subsystem of the Border Security

Deployment Program (BSDP). The primary function of CAVSS is to provide real-time situational awareness of Customs and Border Protection (CBP) locations. CAVSS resides on the Department of

Homeland Security (DHS) data network and therefore follows standard network policies, security and requirement protocols for systems residing on the DHS network as stated within the CAVSS System

Accreditation (SA). The CAVSS SA describes the controls that are in place for implementation to ensure that the level of security for CAVSS is maintained. The SA also includes user responsibilities, roles and limitations, and general security procedures for users and security personnel. Any deviation from this guide may violate security safeguards for CAVSS and may not meet the policy requirements set forth by DHS and must be approved by the CAVSS Business and System Owners prior to implementation.

The CAVSS must be accessible for viewing live and recorded activity both locally at the installed facility as well as across the DHS network to Centralized Area Surveillance Centers (CASC) or other government management locations per CBP operational guidelines.

The CAVSS serves several primary functions as described below. The functions as described do not encompass all expected system roles and expectations as security assessments of site specific requirements are crucial to effective implementation of the CAVSS.

1. Surveillance: CCTV cameras (fixed and pan-tilt-zoom (PTZ) for both day and night) provide operators the opportunity and capability to monitor and to be made aware of events at multiple locations from a centralized remote viewing area.

2. Situational Awareness and Monitoring of all public interactions and perimeters allows operators to verify and assess the situation to make a determination as to the type of response required.

3. Officer/Agent Health and Safety: ensures the safety of officers and agents through deterrence, situational awareness, and integrity.

4. Deterrence: Dissuades criminal acts of unsophisticated violators providing fear of discovery and prosecution.

5. Integrity: Supports the public trust, competence and the professionalism of officers and agents.

6. Intrusion Detection and Assessment: Identifies intrusions and allows assessment and response to events.

7. Evidentiary Archives: Is used to identify and/or prosecute violators. Record of persons of interest.

WARNING: This document is FOR OFFICIAL USE ONLY (FOUO). It contains information that may be exempt from public release under the Freedom of Information

Act (5 U.S. C. 522). It is to be controlled, stored, handled, transmitted, distributed, and disposed of in accordance with DHS policy relating to FOUO information and is not to be released to the public or other personnel who do not have a valid “need-to-know” without prior approval of an authorized DHS official.

WARNING: This document is FOR OFFICIAL USE ONLY (FOUO). It contains information that may be exempt from public release under the Freedom of Information Act

(5 U.S. C. 522). It is to be controlled, stored, handled, transmitted, distributed, and disposed of in accordance with DHS policy relating to FOUO information and is not to be released to the public or other personnel who do not have a valid “need-to-know” without prior approval of an authorized DHS official.

F.2 SYSTEM

The CAVSS is an integrated and tested collection of Commercial Off The Shelf (COTS) workstations, recorders, cameras, microphones, switches, keyboards, and monitors with a full SA that provides the ability to monitor and record activities at CBP facilities. Typical system locations include; DHS

Government Buildings, Land Ports of Entry (LPOEs), Border Patrol Stations, Border Patrol Sectors, CBP

Field Offices, and other DHS Government operations facilities.

1. The Government Facility of Installation: local installed location of equipment.

2. Centralized Area Surveillance Center (CASC): Remote viewing location for all system components. CASCs are the primary monitoring centers for Port of Entry within a region. The location of the CASCs and which locations are monitored at each CASC are established by CBP.

Occasionally a smaller monitoring station may be established as a secondary monitoring location for certain locations; however, this location does not replace the CASC. The CASC location must have full system access to cameras, control, and video live viewing and playback. The CASC must have the same functionality as the government facility for all cameras and microphones.

3. Other management locations: Other management locations as required.

F.2.1 System Overview

A system overview diagram for CAVSS is show in Figure F2-1 below that includes both a local and CASC location. Typical System Components include, but are not exclusive to the following;

1. Equipment Rack

2. Consoles

3. Digital Video Recorder/Network Video Recorder

4. Viewing Workstations

5. Monitors/Speakers

6. Keyboard Video Mouse (KVM) consoles/Extenders

7. Uninterrupted Power Supplies (UPS)

8. Network Switch(es)

9. Fixed Position Cameras

10. Pan/Tilt/Zoom Cameras

11. Microphones

12. Facility Infrastructure

a. Network

b. Cabling

c. Access Control

d. HVAC

e. Emergency Power

f. Camera Switch

WARNING: This document is FOR OFFICIAL USE ONLY (FOUO). It contains information that may be exempt from public release under the Freedom of Information

Act (5 U.S. C. 522). It is to be controlled, stored, handled, transmitted, distributed, and disposed of in accordance with DHS policy relating to FOUO information and is not to be released to the public or other personnel who do not have a valid “need-to-know” without prior approval of an authorized DHS official.

g. Mounting Equipment

h. Signage

SYSTEM OVERVIEW (FIGURE F2‐1)

WARNING: This document is FOR OFFICIAL USE ONLY (FOUO). It contains information that may be exempt from public release under the Freedom of Information Act

(5 U.S. C. 522). It is to be controlled, stored, handled, transmitted, distributed, and disposed of in accordance with DHS policy relating to FOUO information and is not to be released to the public or other personnel who do not have a valid “need-to-know” without prior approval of an authorized DHS official.

F.2.2 High Level System Requirements

A Be operated by government personnel.

B Monitor Port perimeters and Designated interior spaces 24 hours per day.

C Monitor all areas of officer and agent/public interaction. Each requires individual A/V units

D Capture image and audio data on continuous record.

E Operate Year Round in environmental conditions.

F Integrate remote detection and monitoring capability at government facilities.

G Detect unauthorized intrusion across perimeter.

H Distinguish between threatening and non-threatening intrusions.

I Provide situational awareness for officer and agent safety and enforcement.

J Scan the entire perimeter and designated interior locations, focus on selected targets, and operate in low-light and reduced visibility conditions.

K Archive the data captured for 90 days on the solution.

L Provide the ability to extract events and data for permanent storage.

M Include monitoring of designated spaces from officer and agent, public and

“birds-eye-view vantage” points (workstations/consoles).

N Provide officers/agents and management access to the system in primary work areas.

O Maximize visual and audio clarity and minimize ambient noise.

P Have system fault, failure and tamper notification.

Q Have multi-user hierarchal command and control for systems operation.

R Provide the ability to View and Control system components from offsite government facility locations.

S Provide the ability for alarm notification at offsite government facility locations.

T Operate on the DHS network.

U Meet all required network guidelines and approvals.

WARNING: This document is FOR OFFICIAL USE ONLY (FOUO). It contains information that may be exempt from public release under the Freedom of Information Act

(5 U.S. C. 522). It is to be controlled, stored, handled, transmitted, distributed, and disposed of in accordance with DHS policy relating to FOUO information and is not to be released to the public or other personnel who do not have a valid “need-to-know” without prior approval of an authorized DHS official.

V All components provided must be on the CBP Technology Reference Model (TRM) listing.

F.2.3 System Compliance

CAVSS relies on the local CBP Local Area Networks (LANs) and the DHS OneNet to provide network transmission and has an Authority to Operate (ATO) on DHS OneNet based on the these standards.

In order to maintain the SA as well as to safeguard the integrity of the DHS network, it is imperative all provided equipment comply with DHS network standards, policies and the

CAVSS Design Standards for design and operation.

Due to the defined ATO for the CAVSS system, the CAVSS may not be connected to any other system at the facility. This includes; intrusion detection, access control and badging, and building environmental controls.

Only authorized BSDP “–M” holding CBP network administrators with a fully adjudicated CBP

Background Investigation (CBP BI) are allowed to connect the system to the government owned network. A BSDP administrator will load all workstation systems with the then current CBP created Microsoft Windows Operating System image prior to being connected to any network switch with DHS network access. In addition, system components must be listed on the CBP TRM prior to installation and must be pre-approved for use by the BSDP Business and System Owners.

The TRM can be found at: http://cbpear/Products.aspx

Once an installer has completed a stand-alone install of the system, BSDP Administrators will re-image the DVRs and workstations with the CBP created Microsoft Windows image and connect to DHS OneNet . After connection to DHS OneNet, access to the system is restricted to authorized DHS OneNet users and BSDP administrators with proper BSDP User Access Request

Forms. No CBP system access is available for temporary or non-approved users. The system and users must comply with DHS policies regarding use and access, to include policies described in DHS 4300A, DHS 4300B, and Policy and Handbook and CBP Information Security

Policy CIS HB 1400-05C.

WARNING: This document is FOR OFFICIAL USE ONLY (FOUO). It contains information that may be exempt from public release under the Freedom of Information Act

(5 U.S. C. 522). It is to be controlled, stored, handled, transmitted, distributed, and disposed of in accordance with DHS policy relating to FOUO information and is not to be released to the public or other personnel who do not have a valid “need-to-know” without prior approval of an authorized DHS official.

F.2.4 System Documentation

F.2.4.1. Technical Data Package

The contractor must provide a CAVSS system data package for approval by the

CAVSS System Owner. The data package shall include the following for all audio and video components;

1. Manufacturers’ Data

2. System Description and layout

a. All camera positions

b. All microphone positions

c. All Monitor positions

d. All workstation positions

3. Camera and microphone installation schedule (showing name, model number, type, location, DVR input, cabling)

4. System diagram and elevations

5. Rack elevations

6. Viewing console location and elevations

7. Power sources, types, locations

8. Conduit pathways and types

9. Cable pathways and types

F.2.4.2. As Built Data Package

Electronic copies of all final System Documentation must be provided in Adobe PDF format. Any

AutoCad drawings must be submitted in both PDF and DWG formats and become the property of the Government and may be used for future projects. The As Built documentation must be provided within 30 days of completion and must contain at minimum the following information:

-System manuals

-System Inventory Data o Location o Manufacturer o Part Number o Serial Number

-System Start up and Shut Down operations

-System diagrams and drawings o As-Built Drawings o Detailed system schematics and wiring lists o Detailed Camera List o Detailed Microphone List o Detailed Power Information

-Detailed system programming data -

Software and Software Data

-Certifications

WARNING: This document is FOR OFFICIAL USE ONLY (FOUO). It contains information that may be exempt from public release under the Freedom of Information

Act (5 U.S. C. 522). It is to be controlled, stored, handled, transmitted, distributed, and disposed of in accordance with DHS policy relating to FOUO information and is not to be released to the public or other personnel who do not have a valid “need-to-know” without prior approval of an authorized DHS official.

F.3 Racks

Racks are to be placed in the LAN room when space is available. At all new facilities racks will be placed in the LAN room and LAN rooms should be sized to accommodate the BSDP racks. Racks placed in the LAN room or locked LAN room cage do not need front and rear locking doors;

however, they do require rack fans mounted throughout the rack to assist with air movement.

Racks placed outside of the LAN room need prior OIT approval and must be in a secure room, and require front and rear locking doors and rack fans. CAVSS racks must follow the same secure LAN room requirements as other OIT equipment.

F.3.1 Equipment Rack

The configuration of equipment racks is dependent upon the site design and equipment requirements. Each facility must be provided dedicated equipment rack enclosures for BSDP equipment located either in the LAN Room or adjacent Security Interface Control (SIC) Room

(which typically houses the CBP Access Control workstation). The rack must hold all primary head end equipment with the exception of officer/agent workstations and monitors (these are in the work areas outside of the LAN room), camera power supplies, and audio power supplies.

Figures F3-1 , 2, 3 and 4 illustrate typical rack configurations. Below are the CAVSS standards.

F.3.1.1. Rack Requirements

Requirement Description

1 Location: Must be located in a secure room. Typically the LAN room or a room dedicated for security equipment.

2 Access to room must be restricted.

3 Access to rack must be restricted.

4 The designated room must have proper cooling and ventilation for installed rack.

5 Each location requires at minimum, one 45U equipment rack, height 85”, depth 32” per 48 analog cameras.

6 The rack must be dedicated for BSDP equipment only.

7 No other equipment may be installed in the rack.

8 Each rack that is outside of the LAN room must have a locking front and rear door and must be approved by CBP to be located outside the LAN Room.

9 Racks with doors are to be provided with fans throughout the rack in order to provide proper air circulation out of rack. Open racks in LAN rooms or LAN cages do not need doors.

10 Rack is to have proper spacing between components. DVRs and RAIDs must have a minimum of 1U space above and below each unit. No stacking of devices on top of other devices is allowed.

11 Rack is to have cable management, according to Electronic Industry Association

(E.I.A.) and Telecommunication Industry Association (T.I.A) as well as OIT standards and should include strain reliefs.

12 All components installed within the rack must be labeled for use/name.

13 All cabling within the rack must be labeled as directed for component.

14 No open frame racks may be utilized for equipment, unless located in a LAN room or

LAN cage.

WARNING: This document is FOR OFFICIAL USE ONLY (FOUO). It contains information that may be exempt from public release under the Freedom of Information Act

(5 U.S. C. 522). It is to be controlled, stored, handled, transmitted, distributed, and disposed of in accordance with DHS policy relating to FOUO information and is not to be released to the public or other personnel who do not have a valid “need-to-know” without prior approval of an authorized DHS official.

15 All blank spaces must have blank covers.

16 Each rack must be provided with a dedicated monitor by the rack installer.

17 Each rack must have a Keyboard, Mouse and Video display capability for all components.

18 Each rack enclosure must have a UPS and battery back-up extension to allow for a minimum 15 minute run time for all system components in the rack.

19 Each equipment rack group must have a work workstation provided in the rack.

20 All rack equipment must be connected to facility backup generator.

21 Racks must be seismically rated at facilities requiring seismic rated equipment enclosures.

22 Rack elevations must be provided on the system drawings.

23 Must have rack inventory secured to rack.

F.3.1.2. Rack Footprint

The footprint and space required for the equipment rack will vary dependent on the amount of cameras, number of DVRs, recorded storage requirement- number of

Raids, audio filters, fiber devices, UPS size, etc...

Each rack requires clearance of at least 30” in both the front and back for:

- Equipment access and removal without removal of sides or doors

- Equipment service without removal of sides or doors

- Doors (open and closed) -

Technician work space

- Fire clearance/codes

F.3.1.3. HVAC

The Typical BTU output from a 32 camera rack is approximately 17,250 BTUs per hour. The contractor must provide the BTUs per hour of each rack on the drawings along with the rack elevations.

Racks should be placed in an environmentally controlled airspace. Temperature:

+32 to +80 degrees Fahrenheit (F), not to exceed 80 degrees F.

F.3.1.4. POWER

Each rack must have an Uninterruptible Power Supply (UPS). The UPS must be sized appropriately to not exceed a 75% load of the UPS. Each UPS in the rack must have its own dedicated circuit. This circuit must be placed on the sites back-up power generator. Circuit sizes and quantity will be dependent on the size and quantity of

UPS utilized. However, general recommendations are as follows.

- Standard 30 Amps at 120 VAC 60 Hertz per rack.

- Minimum of 20 Amps at 120 VAC 60 Hertz per rack.

WARNING: This document is FOR OFFICIAL USE ONLY (FOUO). It contains information that may be exempt from public release under the Freedom of Information Act

(5 U.S. C. 522). It is to be controlled, stored, handled, transmitted, distributed, and disposed of in accordance with DHS policy relating to FOUO information and is not to be released to the public or other personnel who do not have a valid “need-to-know” without prior approval of an authorized DHS official.

- Maximum Power line Surge no more than 1800 joules.

Number and placement of dedicated power is dependent upon equipment, but in general should follow codes and guidelines for critical systems.

F.3.1.5. Cable Management

Cable paths are to be bundled to the sides to provide access to the back panels of all rack devices with either Velcro or plastic ties. All cables shall be labeled in accordance with applicable industry standards. Cabling should enter the rack from either the top or the bottom. Designated fan areas at the top of the rack must not be used for cabling.

F.3.1.6. Labeling

Each rack will have a rack inventory with the following information printed and secured to the rack.

Device Name Part Number Manufacturer Serial Number Location

F.3.1.7. Industry Standards

The system shall comply with E.I.A. and T.I.A standards for rack mounting (ANSI/EIA standard RS-310). Network standard used in all government facilities is T568A.

Other Standards: IEEE, NEC, FCC, UL, OSHA, NFPA, BICSI, ASIS

F.3.1.8. Acceptable Manufacturers

- Winsted, or l ike

- APC, or l ike

- DELL, or like

- Middle Atlantic, or like

WARNING: This document is FOR OFFICIAL USE ONLY (FOUO). It contains information that may be exempt from public release under the Freedom of Information Act

(5 U.S. C. 522). It is to be controlled, stored, handled, transmitted, distributed, and disposed of in accordance with DHS policy relating to FOUO information and is not to be released to the public or other personnel who do not have a valid “need-to-know” without prior approval of an authorized DHS official.

CAVSS DESIGN GUIDE STANDARDS

Figure Error! No text of specified style in document.-3-1. Rack Front with Door Open

Figure Error! No text of specified style in document.-3-2. Rack Front with Door Closed

WARNING: This document is FOR OFFICIAL USE ONLY (FOUO). It contains information that may be exempt from public release under the Freedom of Information Act

(5 U.S. C. 522). It is to be controlled, stored, handled, transmitted, distributed, and disposed of in accordance with DHS policy relating to FOUO information and is not to be released to the public or other personnel who do not have a valid “need-to-know” without prior approval of an authorized DHS official.

Figure Error! No text of specified style in document.-3-3. Side by Side Rack Front with Doors

4 5

4 4

4 3

4 2

4 1

4 0

3 9

3 8

3 7

3 6

3 5

3 4

3 3

3 2

3 1

3 0

2 9

2 8

2 7

2 6

2 5

2 4

2 3

2 2

2 1

2 0

1 9

1 8

1 7

1 6

1 5

1 4

1 3

1 2

1 1

1 0

WARNING: This document is FOR OFFICIAL USE ONLY (FOUO). It contains information that may be exempt from public release under the Freedom of Information Act (5 U.S. C. 522). It is to be controlled, stored, handled, transmitted, distributed, and disposed of in accordance with DHS policy relating to FOUO information and is not to be released to the public or other personnel who do not have a valid “need-to-know” without prior approval of an authorized DHS official.

FAN/FIBER

BLANK SPACE

VICON DVR 1

BLANK SPACE

RAID 1

BLANK SPACE

VICON DVR 2

BLANK SPACE

RAID 2

BLANK SPACE

KVM

FAN

BLANK SPACE

MONITOR PULLOUT

Keyboard/Mouse

BLANK SPACE

VICON DVR 3

BLANK SPACE

RAID 3

BLANK SPACE

BLANK SPACE

BLANK/Shelf

FAN

UPS

BATTERY Backup for UPS

Figure Error! No text of specified style in document.-3-4. Typical Rack Elevation Example

WARNING: This document is FOR OFFICIAL USE ONLY (FOUO). It contains information that may be exempt from public release under the Freedom of Information

Act (5 U.S. C. 522). It is to be controlled, stored, handled, transmitted, distributed, and disposed of in accordance with DHS policy relating to FOUO information and is not to be released to the public or other personnel who do not have a valid “need-to-know” without prior approval of an authorized DHS official.

F.3.2 Operator Console

A separate monitoring work area needs to be provided for end user interaction. This area should be separate from the end-user desks so that is available for all authorized users.

This separate work area is called the Operator Console. The console will be provided in a separate location/room from the equipment rack. The console will serve as the primary viewing and operation station for the BSDP system. Additional workstations and viewing locations are typically required for other key personnel and areas throughout the facility, including the CBP Command Center, the Headhouse, or the

Supervisor’s Office. Typical console configurations are shown in Figures F3-5, 6.

F.3.2.1. Console Requirements

Requirement Description

1 Location: Must be in CBP Command Center or Supervisor’s Office.

At small ports, may be located in the Officer Work Area.

2 Must provide a separate workspace from normal operational duties. 3 Provides situational awareness and active monitoring to end users.

4 Typical configuration is one dedicated monitoring workstation per

32 cameras when floor space is available.

5 Must have a minimum one 24-46” monitor per 32 cameras.

6 Will have video keyboard and mouse access to all workstations within the console.

7 Camera Pan, Tilt, Zoom (PTZ) control will be achieved through the Vicon application on the workstation.

8 Ability to switch between cameras in single and multi-view, up to 16 cameras at a time will be achieved through the Vicon application on the workstation.

9 Must have audio listening capability (speakers).

F.3.2.2. Console Footprint

The space required for the installation of the provided console is dependent on the amount of equipment installed as part of the security suite. At minimum, the front work area around this monitor should be of approximately 8 Sq. ft to accommodate one average size individual monitoring from this location.

The preferred configuration would provide for a minimum per 32 cameras, 1 console rack (38-1/4”H, 21-1/16” W, 22-5/8” D), with a 18” counter. The total dimensions of this configuration, including operator work space is approximately 25.67”W, 75.54”D, 54.01”H, 76.01” Diagonal.

WARNING: This document is FOR OFFICIAL USE ONLY (FOUO). It contains information that may be exempt from public release under the Freedom of Information

Act (5 U.S. C. 522). It is to be controlled, stored, handled, transmitted, distributed, and disposed of in accordance with DHS policy relating to FOUO information and is not to be released to the public or other personnel who do not have a valid “need-to-know” without prior approval of an authorized DHS official.

F.3.2.3. HVAC

The Typical BTU output for each workstation/monitor installed in the operator console is approximately 800 BTUs per hour. Most temperature controlled work areas can accommodate the installation of a small operator console without needing to improve the existing HVAC system, but specific situations will vary.

Temperature: +32 to +80 degrees F, not to exceed 80 degrees F.

F.3.2.4. Power

Each operator console must have a UPS. The UPS must be sized appropriately to not exceed a 75% load of the UPS. It is recommended that the circuit used be placed on the site’s back-up power generator. Circuit sizes and quantity will be dependent on the size and quantity of UPS utilized. However, general recommendations are as follows.

- Required 20 Amps at 120 VAC 60 Hertz per operator console -

Maximum Power line Surge no more than 1800 joules.

Number and placement of dedicated power is dependent upon equipment, but in general should follow codes and guidelines for critical systems.

F.3.2.5. Cable Management

Cable paths are to be clear and are to be bundled to the sides to provide access to the back panels of all rack devices with either Velcro of plastic ties. All cables shall be labeled in accordance with applicable industry standards. If plastic ties are utilized they must not be over-tightened and must not provide any stress on cabling in the bundle.

F.3.2.6. Industry Standards

The system shall comply with E.I.A. and T.I.A standards for rack mounting (ANSI/EIA standard RS-310). Network termination standard used in all government facilities is

T568A.

Other Standards: IEEE, NEC, FCC, UL, OSHA, NFPA, BICSI, ASIS

F.3.2.7. Acceptable Manufacturers

- Winsted, or like.

- Middle Atlantic, or like.

- Image Vision, or like.

WARNING: This document is FOR OFFICIAL USE ONLY (FOUO). It contains information that may be exempt from public release under the Freedom of Information Act

(5 U.S. C. 522). It is to be controlled, stored, handled, transmitted, distributed, and disposed of in accordance with DHS policy relating to FOUO information and is not to be released to the public or other personnel who do not have a valid “need-to-know” without prior approval of an authorized DHS official.

Figure Error! No text of specified style in document.-3-5. Typical Console Example 1 for

Operator Work Area (Multiple Monitors)

WARNING: This document is FOR OFFICIAL USE ONLY (FOUO). It contains information that may be exempt from public release under the Freedom of Information Act

(5 U.S. C. 522). It is to be controlled, stored, handled, transmitted, distributed, and disposed of in accordance with DHS policy relating to FOUO information and is not to be released to the public or other personnel who do not have a valid “need-to-know” without prior approval of an authorized DHS official.

Figure Error! No text of specified style in document.-3-6. Typical Console Example 2 for

Operator Work Area (Single Monitor)

WARNING: This document is FOR OFFICIAL USE ONLY (FOUO). It contains information that may be exempt from public release under the Freedom of Information

Act (5 U.S. C. 522). It is to be controlled, stored, handled, transmitted, distributed, and disposed of in accordance with DHS policy relating to FOUO information and is not to be released to the public or other personnel who do not have a valid “need-to-know” without prior approval of an authorized DHS official.

Figure Error! No text of specified style in document.-3-7. Typical Console for

Centralized Area Surveillance Center (CASC) Example 3

F.4 Digital Video Recorders (DVR)

All DVRs must provide remote monitoring and camera control via the Vicon Workstation

Software GUI on a CBP OIT approved workstation running the CBP Windows 7 LITE image.

Non-networked matrix PTZ controllers may be used; however, all PTZ control must also be wired to the DVR to allow for remote control over DHS OneNet via the Vicon software GUI. The

DVR model utilized shall be a Vicon Kollector Series. Check with the CBP BSDP Program

Manager to obtain the current Vicon Kollector model numbers approved for use. One DVR per

16 analog cameras and 16 microphones is typical at each site. No replacements for the Vicon

Kollector Series DVR will be accepted. If a Vicon Network Video Recorder (NVR) such as the

Shadow Series is desired, it would first need to undergo a Technology Insert for approval to be used on DHS OneNet and this would need to take place PRIOR to any new installation design plans being submitted to CBP. DVRs will be configured to each have a minimum of 90 days storage. Internal and external storage devices may be used to meet the 90 days requirement; a

RAID5 configuration is preferred for the safety of the data collected. No USB or network attached storage devices will be allowed.

F.4.1 Features

Kollector Series DVR with the following features:

WARNING: This document is FOR OFFICIAL USE ONLY (FOUO). It contains information that may be exempt from public release under the Freedom of Information Act

(5 U.S. C. 522). It is to be controlled, stored, handled, transmitted, distributed, and disposed of in accordance with DHS policy relating to FOUO information and is not to be released to the public or other personnel who do not have a valid “need-to-know” without prior approval of an authorized DHS official.

- Windows 7 Embedded Operating System (ordered from OEM with Windows 7

Embedded, and will ultimately be re-imaged by CBP to Windows 7 LITE)

- 16 channels analog Video

- 16 Channels Audio

- 16 alarm inputs (“NO- Normally Open” or “NC- Normally Closed”) and 8 relay alarm outputs (dry contact)

- Includes 16x4 analog video matrix on the rear panel controlled by the software locally and over the network

- Must have a DVD Multi-writer/DVD Drive

F.4.2 Settings

F.4.2.1. Cameras

All cameras must meet the following programming requirements.

- All cameras set to continuous record

- Recording at 15 FPS or better (240-480 FPS for the DVR) at minimum (i.e. a DVR with 240 FPS would be spread over 16 cameras at 15 FPS= 240 FPS)

- Vicon compression

- Quality 5 at minimum

- All cameras must be named within the Vicon software and may not have the generic or default name

- Any input not in use must be named “Not Used”

- Each PTZ must have “preset 1” programmed to desired field of view

F.4.2.2. Microphones

All microphones must meet the following programming requirements.

- All microphones must be set to continuous record

- All microphones must be named and displayed in the site tree and may not have the generic or default name

- Any input not in use must be name “Not Used”

F.4.2.3. Recording Requirements

- System must meet a minimum of 90 days recording with all cameras and microphones set to continuous record with the above settings

- Recording quality may be set to higher than recommended levels as long as 90 days is still provided

- Should internal DVR hard drive space not meet the 90 days, an external direct attached RAID unit must be provided

WARNING: This document is FOR OFFICIAL USE ONLY (FOUO). It contains information that may be exempt from public release under the Freedom of Information Act

(5 U.S. C. 522). It is to be controlled, stored, handled, transmitted, distributed, and disposed of in accordance with DHS policy relating to FOUO information and is not to be released to the public or other personnel who do not have a valid “need-to-know” without prior approval of an authorized DHS official.

- Recording parameters may not be adjusted or down-graded to meet the 90 day minimum recording requirements

- Since actual recording time fluctuates, it is recommended the calculation be done to exceed the 90 day requirement so that at a minimum 90 days is achieved

F.4.2.4. Normal Operation

- The DVR may not be used as the viewing method for monitoring cameras. - Each

DVR will be set to run “as a service” and when in this mode the Vicon

GUI is not able to be loaded, therefore DVRs are not able to display cameras directly

- DVRs will not have users actively logged into the OS

- Only workstations will be used to display cameras and for audio, and control

- Direct DVR access will only be used for administrative and maintenance purposes

- The DVR operating system will be reloaded after acceptance with a copy of the government version of the OS(ordered from OEM with Windows 7 Embedded, and will ultimately be re-imaged by CBP to Windows 7 LITE.

F.4.3 Installation Requirements

F.4.3.1. Cable Management

All video, data, and audio cables attached to the DVR must be labeled according to the device labeling requirements. Cables must be neatly secured and bundled as to prevent stress on the backplane of the DVR. Cables must still allow for service access, to include removal of the unit without disruption of cable management. All power must be kept separate from video, data, and audio feeds.

F.4.3.2. Labeling

Each DVR will be labeled on the front panel with the workstation name or device name such as “DVR-1”. Each DVR is required to have a government inventory tag. The inventory tags can be obtained from the assigned Local Property Officer (LPO). The inventory tag will be placed on the inside front cover or as directed by the LPO. The inventory tag and device label must be present at system acceptance.

F.4.3.3. Power

Each DVR must be placed in a rack provided with a UPS. The DVR must be connected to the

UPS.

WARNING: This document is FOR OFFICIAL USE ONLY (FOUO). It contains information that may be exempt from public release under the Freedom of Information Act

(5 U.S. C. 522). It is to be controlled, stored, handled, transmitted, distributed, and disposed of in accordance with DHS policy relating to FOUO information and is not to be released to the public or other personnel who do not have a valid “need-to-know” without prior approval of an authorized DHS official.

F.4.4 Installation Procedures

The contractor must install the DVR per manufacturer and CAVSS standards. The DVRs must be designed and installed to run the Vicon software “as a service”. The system must be fully functional and be able to demonstrate all system aspects at acceptance.

After acceptance, government assigned personnel will provide the correct OS version and will place the asset on the DHS network.

F.4.5 DVR Installation Checklist

Requirement Description

1 All cameras/microphones are continuously recording to the DVR.

2 Recording time is a minimum of 90 days.

3 All cameras are named and configured.

4 All microphones are named and configured.

5 All PTZs can be controlled through the DVR and remote workstations using the Vicon Workstation software GUI.

6 DVR is associated to the regional nucleus.

7 All site authorizations and device groups are configured.

8 DVR is added to Active Directory.

9 DVR is set to run as a service.

F.4.6 Accepted Manufacturers

ONLY Vicon Kollector Series DVRs will be accepted. No alternates are approved. F.4.7 Sample Accepted Models

Vicon Kollector KF3-X000 (X=Terabytes of storage)

WARNING: This document is FOR OFFICIAL USE ONLY (FOUO). It contains information that may be exempt from public release under the Freedom of Information Act

(5 U.S. C. 522). It is to be controlled, stored, handled, transmitted, distributed, and disposed of in accordance with DHS policy relating to FOUO information and is not to be released to the public or other personnel who do not have a valid “need-to-know” without prior approval of an authorized DHS official.

F.5 Network Video Recorders

At this time the requirements for Network Video Recorders are still under development. The use and approval of Network Video Recorders is completed on a case by case basis based on facility size, facility layout, network design, type and cost considerations. All Network Video

Recorders must be on CBP EARS/TRM. A Video system only switch may also be necessary.

Network Video Recorders will additionally require a full Network Service Request (NSR) to be submitted prior to approval of design and implementation. Only fully approved designs with

NSR and devices listed on the TRM will be considered.

F .6 RAIDs

DVRs can be provided with an external RAID in order to meet the 90 Day recording requirement. The external RAID cannot be shared between multiple DVRs. Each DVR that requires additional storage must be provided with individual RAIDs.

F.6.1 RAID Requirements

Requirement Description

1 A RAID is required only if the internal DVR storage cannot meet the 90 day recording requirement.

2 RAID Units must be located in the dedicated BSDP rack provided.

3 One unit (1U) of Rack space must be provided above and below each

RAID.

4 RAIDs may not be stacked.

5 RAIDs may not be shared between multiple DVRs.

6 RAIDs must not be placed on the network or connected to a network switch.

RAIDs must be directly connected to the DVR via SAS (Serial

Attached SCSI).

8 RAIDs must be compatible with the VICON DVRs.

9 RAIDs must be approved for use by Vicon.

10 RAIDs must be listed on the CBP EARS/TRM and approved for use by

CBP OIT.

F.6.2 Specifications

The RAIDs provided must be approved for use by CBP OIT and Vicon. Any RAID not listed on the CBP EARS/TRM list of approved equipment will not be accepted.

- RAIDs must be shown as part of drawings and submittals. -

RAIDs must be able to directly attach to individual DVRs. -

RAIDs must be rack-mountable.

- RAIDs must have a redundant power supply.

WARNING: This document is FOR OFFICIAL USE ONLY (FOUO). It contains information that may be exempt from public release under the Freedom of Information Act

(5 U.S. C. 522). It is to be controlled, stored, handled, transmitted, distributed, and disposed of in accordance with DHS policy relating to FOUO information and is not to be released to the public or other personnel who do not have a valid “need-to-know” without prior approval of an authorized DHS official.

- RAID hard drives must be hot swappable. -

Must be configured as a RAID 5…