Getting Started with Aeion Sentinel

From ONVIF camera discovery to AI-powered threat detection in 6 steps. $129/month flat, unlimited users, no hardware lock-in, $50,952/year savings vs Verkada.

1

Discover Your ONVIF Cameras

Admin → Sentinel → Devices → Add Device → ONVIF Auto-Discovery:

``` Subnet scan: 192.168.1.0/24 Scan timeout: 10 seconds Protocols: ONVIF + RTSP probe

Discovered: ✓ Lobby Camera 1 — Hikvision DS-2CD2043G2 (192.168.1.50) ✓ Lobby Camera 2 — Axis P3225-LVE (192.168.1.51) ✓ Loading Dock — Dahua IPC-HDW5831E (192.168.1.52) ✓ Parking Entrance — Hanwha XNP-6040H (192.168.1.53) ✓ Server Room — Axis P1448-LE (192.168.1.54)

4 cameras found. Provision all? [Yes] ```

Or bulk import via CSV:

csv name,ip_address,manufacturer,model,rtsp_path,username,password Lobby Camera 1,192.168.1.50,Hikvision,DS-2CD2043G2,/Streaming/Channels/101,admin,encrypted_pass Loading Dock,192.168.1.52,Dahua,IPC-HDW5831E,/cam/realmonitor?channel=1,admin,encrypted_pass

Configure each camera:

``` Admin → Sentinel → Devices → [Camera] → Edit

General: Name: Lobby Camera 1 Zone: Main Lobby Description: Main entrance coverage

Streams: High Quality: rtsp://192.168.1.50/Streaming/Channels/101 (1080p/30fps) Low Bandwidth: rtsp://192.168.1.50/Streaming/Channels/102 (720p/15fps)

Recording: Mode: Motion-triggered Motion regions: [Draw rectangle over doorway] Retention: 90 days

PTZ: Capabilities detected: Continuous pan/tilt/zoom Presets: 8 stored Home position: [Set current view]

Status: ✅ Online ```

Enable Bridge for GPU AI (optional):

``` Admin → Bridge → Sentinel Integration

Bridge status: Connected (192.168.1.100:8080) GPU: NVIDIA GTX 1070 — Available for AI

Enable GPU-accelerated detection: ✅ Face recognition ✅ License plate recognition ✅ Object detection (person/vehicle/weapon/package) ✅ Behavior analysis (loitering/tailgating)

→ AI now runs locally via Bridge, not cloud ```

2

Define Security Zones

Admin → Sentinel → Zones → Create Zone:

``` Zone: Main Lobby

Cameras: ✓ Lobby Camera 1 ✓ Lobby Camera 2 ✓ Lobby PTZ (preset: Lobby Overview)

Access Points: ✓ Main Entrance Door ✓ Side Entrance Door

Alarm Partitions: ✓ Building A - Floors 1-3

Recording Policy: Retention: 90 days Mode: Motion-triggered (24/7 coverage)

AI Detection: ✅ Enable person detection ✅ Enable vehicle detection (parking area) ✅ Occupancy analytics ```

Create zone hierarchy:

Campus (parent) ├── Building A (child) │ ├── Lobby (leaf) — Cameras: Lobby C1, C2 │ ├── Loading Dock (leaf) — Cameras: Dock C1, C2, alarm partition │ └── Server Room (leaf) — Cameras: Server C1, temperature sensor ├── Building B (child) │ ├── Reception (leaf) │ └── Executive Suite (leaf) — MFA required, restricted hours └── Parking Lot (leaf) — Cameras: Lot C1, C2, C3, LPR

Zone-level rules:

Zone: Loading Dock → After-hours auto-lock: 18:00 (6 PM) → Motion → create AI threat log → Person detected after hours → high-priority alert → Badge denied → create incident

3

Set Up Access Control

Admin → Sentinel → Access Points → Configure Door:

Main Entrance:

``` Name: Main Entrance Type: Door

Controller Protocol: OSDP (recommended) Address: 192.168.1.100 OSDP Secure Channel: ✅ (encrypted)

Reader Type: RFID + NFC → Supports: HID Prox cards, iPhone/Google NFC wallet → BLE mobile credentials: ✅

Schedules: Normal: 06:00-22:00 (Mon-Fri), Full access Weekend: 08:00-18:00, Full access Night: 22:00-06:00, Badge + PIN required

Security: Anti-passback: ✅ (prevent badge sharing) Door held open alert: 30 seconds Tailgating detection: ✅ (AI via Lobby Camera) ```

Mantrap (loading dock interlock):

``` Name: Loading Dock Mantrap Type: Mantrap

Inner door: Loading Dock Inner Outer door: Loading Dock Outer

Interlock logic: 1. Outer door opens 2. Person enters vestibule 3. Outer door closes 4. Badge scan OR AI person detection 5. Inner door opens 6. If no inner open within 30s → alarm (tailgating attempt) 7. If inner held open > 10s → alarm ```

Test access:

``` Admin → Sentinel → Access Points → Main Entrance → Test

Simulate badge swipe: Badge ID: [Swipe test card] Result: ✅ Access Granted Log entry created: sentinel_access_logs

Check access log: Time: 2024-01-15 09:14:22 Access Point: Main Entrance Credential: John Smith (badge_1234) Result: Access Granted Mode: Normal ```

4

Configure Alarm Partition

Admin → Sentinel → Alarm Partitions → Create Partition:

Building A:

``` Name: Building A - Floors 1-3

Sensors: Floors 1-3: - Door/window sensors: 24 - Motion detectors: 12 - Glass break sensors: 6 - Smoke detectors: 4 - CO detectors: 2

Arm Modes: Away: Full protection — all sensors active Stay: Perimeter only — interior motion bypassed (people can move inside) Night: Perimeter + select interior (bedroom zones active)

Entry/Exit Delays: Entry delay: 30 seconds (time to disarm after entering) Exit delay: 60 seconds (time to exit after arming) Alarm duration: 5 minutes (siren time)

Auto-Arm Schedule: ✅ Enable auto-arm Arm at: 22:00 (Mon-Fri) Disarm at: 07:00 (Mon-Fri) Arm at: 20:00 (Sat/Sun) Disarm at: 09:00 (Sat/Sun)

Verification (reduce false alarms): ✅ Require motion confirmation from camera (reduces false alarm dispatch) ✅ Two-zone trip required for panic alarm ```

Central Station Dispatch:

``` Admin → Sentinel → Central Station → Add Monitoring Account

Provider: Rapid Response Monitoring (UL-listed) Account ID: ACME-INDUSTRIAL-001 Signal Format: SIA2 / Contact ID

Events to dispatch: ✅ Alarm (fire/police/medical panic) ✅ Panic button ✅ Zone tamper ✅ Arm/disarm events ✅ AC power loss ✅ Low battery

Dispatch routing: Fire alarm → Fire Department (non-emergency line) Police panic → Police (911) Medical panic → EMS (911) General alarm → Central station → verified → 911 ```

Test alarm:

``` Admin → Sentinel → Alarm Partitions → Building A → Test Mode

Trigger sensor: Loading Dock Door Expected: Entry delay countdown starts → Entry delay: 30 seconds → Entry tone plays

Enter disarm PIN: 1234 Expected: Disarm successful → Status: Disarmed → Test mode: No central station dispatch

Exit test mode before going live! ```

5

Enable AI Threat Detection

Admin → Sentinel → AI Detection → Configure:

Detection Types:

``` Per Zone: Main Lobby

Person Detection: ✅ Enabled Confidence threshold: adjustable per zone (higher = fewer false positives, lower = catches more) → Alert on: person in restricted zone after hours

Vehicle Detection: ✅ Enabled Confidence threshold: adjustable per zone → Alert on: unauthorized vehicle in loading zone

Package Detection: ✅ Enabled (Left/removed package alert) Confidence threshold: adjustable per zone → Alert on: package left unattended past a configurable dwell time in lobby

Loitering Detection: ✅ Enabled Threshold: person stationary past a configurable dwell time Severity: Medium (notify guards), escalating to High the longer it continues

Tailgating Detection: ✅ Enabled (AI via camera) → Alert on: one badge, two+ people

Wrong Direction: ✅ Enabled (for emergency exits) → Alert on: person exits through emergency door (not main entrance) ```

Anomaly Detection (baseline learning):

``` Occupancy Baseline: Zone: Lobby Baseline: Monday-Friday, 08:00-18:00 Expected: learned automatically from your own historical traffic Alert: significant deviation above or below the learned baseline (sensitivity configurable)

Motion Pattern Baseline: Zone: Loading Dock Baseline: Weekdays, 06:00-18:00 Expected: Regular traffic pattern Alert: If unusual motion detected outside baseline hours

Access Pattern Baseline: Expected: Normal badge entry sequence Alert: If unusual access pattern (multiple denied badges, odd hours) ```

Watchlist:

``` Admin → Sentinel → AI → Watchlist

Person Watchlist: + Add Entry Label: John Doe - Terminated Employee Photo: [upload] Note: Access should be denied, security notified

✅ Active

Vehicle Watchlist: + Add Entry Label: Suspicious Van - Area 4 License Plate: ABC-1234 Note: Do not allow on property

✅ Active ```

AI Threat Score:

``` Zone: Loading Dock Contributing factors: → Person detected at loading dock after hours (10:30 PM) → Badge denied — credential not recognized → Motion pattern differs from baseline

Combined result: Level: HIGH

Each factor's contribution is weighted by how strong a signal it is on its own, and the weighting is tunable per tenant. Operators see the plain-language reasons above, not a raw formula. ```

6

Deploy Visitor Management

Admin → Sentinel → Visitor Management → Settings:

Kiosk Setup (iPad):

``` Admin → Sentinel → Visitor Management → Kiosk

Kiosk Mode: ✅ Enabled Pre-registration required: ✅ (no walk-ins)

Badge Design: Template: Standard visitor badge Fields: Visitor name, Host name, Date, Expires at time QR Code: Embeds pre-registration code Logo: [Upload company logo]

NDA/Waiver: ✅ Require NDA signature (draw-to-sign) NDA Document: [Upload PDF] Fields to collect: Name, Email, Signature, Date

Host Notification: ✅ Email on arrival ✅ SMS on arrival (if phone provided) Message: "{Visitor} has arrived at reception" ```

Create pre-registration:

``` Admin → Sentinel → Visitors → Register Visitor

Host: Employee: Sarah Johnson (sarah@acme.com) Department: Engineering

Visitor: Name: Alice Chen Email: alice@vendor.com Company: External Systems Inc. Purpose: Vendor meeting

Visit: Expected arrival: 2024-01-15 10:00 Expected departure: 2024-01-15 14:00

Pre-registration code: VISIT-2024-001 → Emailed to alice@vendor.com → Code expires: 2024-01-15 18:00

Status: Pending ```

Visitor self check-in (kiosk):

``` [Visitor Kiosk - Touch Screen] ┌──────────────────────────────────────┐ │ │ │ Welcome to ACME Industrial │ │ │ │ Enter your pre-registration code: │ │ [ VISIT-2024-001 ] │ │ │ │ [Check In] │ │ │ └──────────────────────────────────────┘

→ Badge code: VISITOR-4521 → Photo capture → NDA signature (draw) → Badge printed → Host notified: "Alice Chen has arrived"

Host: Email: sarah@acme.com "Your visitor Alice Chen has checked in at reception. Time: 10:02 AM" ```

Monitor visitor flow:

``` Admin → Sentinel → Visitors → Today's Visitors

Alice Chen (External Systems Inc.) Check-in: 10:02 AM Host: Sarah Johnson Status: On-site Badge: VISITOR-4521 (expires 6:00 PM)

→ If not checked out by 6 PM: auto-escalate → If badge scanned at restricted zone: alert ```

Cross-Module: Complete Security Automation

All modules working together:

┌─────────────────────────────────────────────────────────────┐ │ Security Event Cascade │ ├─────────────────────────────────────────────────────────────┤ │ │ │ [10:14 PM] Motion detected — Loading Dock │ │ ↓ │ │ [10:14:03] AI person detected — confidence 0.94 │ │ ↓ │ │ [10:14:05] Badge denied — credential not recognized │ │ ↓ │ │ [10:14:07] AI tailgating detected — confidence 0.91 │ │ ↓ │ │ [10:14:10] Incident created: "Unauthorized access attempt" │ │ ↓ │ │ Cross-module cascade: │ │ ┌─────────────────────────────────────────────────────────┐│ │ │ Fleet: fleet.alert.broadcast ││ │ │ → "Facility lockdown — avoid 123 Main St" ││ │ │ → Routes updated for inbound trucks ││ │ ├─────────────────────────────────────────────────────────┤│ │ │ Helpdesk: ticket created ││ │ │ → Priority: High ││ │ │ → Assigned: on-call security ││ │ │ → Linked to incident #INC-2024-001 ││ │ ├─────────────────────────────────────────────────────────┤│ │ │ Smart Spaces: Elevator lockdown ││ │ │ → Loading dock elevator: restricted ││ │ ├─────────────────────────────────────────────────────────┤│ │ │ Notifications: Push + SMS ││ │ │ → Security director notified ││ │ ├─────────────────────────────────────────────────────────┤│ │ │ Collab: #security-incident-20240115 created ││ │ │ → Guards auto-invited ││ │ │ → Live camera feeds shared ││ │ └─────────────────────────────────────────────────────────┘│ │ ↓ │ │ [10:15 PM] Guards join War Room │ │ → Live feeds: Loading dock, exits, parking │ │ → Evidence timeline: all events chronologically │ │ → One-click lockdown all access points │ │ → Attach clips to incident │ │ │ └─────────────────────────────────────────────────────────────┘