{ "api_version": "1", "kind": "dse_post", "self": "https://update.dsesecurity.com/api/v1/posts/distinguish-axis-raw-tcp-serial-access-from-remote-port-framing/", "item": { "id": "https://update.dsesecurity.com/updates/distinguish-axis-raw-tcp-serial-access-from-remote-port-framing/", "slug": "distinguish-axis-raw-tcp-serial-access-from-remote-port-framing", "url": "https://update.dsesecurity.com/updates/distinguish-axis-raw-tcp-serial-access-from-remote-port-framing/", "alternate_urls": { "markdown": "https://update.dsesecurity.com/updates/distinguish-axis-raw-tcp-serial-access-from-remote-port-framing.md", "json": "https://update.dsesecurity.com/api/v1/posts/distinguish-axis-raw-tcp-serial-access-from-remote-port-framing/" }, "title": "Distinguish Axis raw TCP serial access from remote port framing", "summary": "Distinguish Axis Generic TCP/IP serial access from the specially framed remote-port function for multi-CPU encoders before choosing a network-to-serial integration path.", "format": { "slug": "guide", "name": "Guide" }, "priority": { "slug": "advisory", "name": "Advisory" }, "featured": false, "image": { "theme": "physical-security", "label": "Physical security", "alt": "Integrated video surveillance and controlled entry at a modern commercial facility.", "card_url": "https://update.dsesecurity.com/assets/editorial/physical-security-card.webp?v=1.8.20", "hero_url": "https://update.dsesecurity.com/assets/editorial/physical-security-hero.webp?v=1.8.20", "social_url": "https://update.dsesecurity.com/assets/editorial/physical-security-social-v2.jpg?v=1.8.20", "width": 2400, "height": 1350 }, "topics": [ { "slug": "networks-infrastructure", "name": "Networks & Infrastructure", "url": "https://update.dsesecurity.com/topic/networks-infrastructure/" }, { "slug": "video-surveillance", "name": "Video Surveillance", "url": "https://update.dsesecurity.com/topic/video-surveillance/" } ], "author": { "name": "DSE Security Editorial Team", "url": "https://update.dsesecurity.com/#editorial-team", "type": "Organization" }, "publisher": { "name": "Detection Systems & Engineering", "url": "https://dsesecurity.com/" }, "published_at": "2026-10-29T17:41:17+00:00", "modified_at": "2026-10-29T17:41:38+00:00", "reviewed_on": "2026-10-29", "reading_minutes": 3, "word_count": 565, "potentially_affected": "Axis products exposing the documented Serial port API interface; confirm actual device, hardware and software applicability before applying the proposed checks.", "dse_recommendation": "DSE recommends documenting the expected framing at both ends before enabling a network-to-serial path.", "primary_source": { "name": "Axis Communications — Serial port API", "url": "https://developer.axis.com/vapix/network-video/serial-port-api/", "published_on": null, "authority": "Axis Communications" }, "publishing_principles": "https://update.dsesecurity.com/updates/dse-updates-editorial-methodology/", "usage_info": "https://update.dsesecurity.com/usage/", "copyright_notice": "Copyright © 2026 Detection Systems & Engineering. All rights reserved.", "content_html": "

Bottom line: Match the network client’s serial data expectations to the documented port function. Do not assume a remote-port connection is a raw TCP serial tunnel merely because both use a network socket.

\n

Source fact: documented behavior

\n

Axis’s Serial port API describes physical serial ports and remote-port clients, with a port manager able to share a port for uses such as PTZ control from multiple video channels.

\n

The remote-port function is intended only for multi-CPU video encoders and adds a protocol header to its data payload beyond Generic TCP/IP.

\n

In the Generic TCP server example, connected clients can send and receive raw data forwarded to and from the serial port.

\n

What the source does not establish

\n

Do not infer serial electrical compatibility, a third-party protocol implementation or safe network exposure from these descriptions. Obtain the exact product’s serial-port and connected-equipment documentation. Keep a raw-data path distinct from support for the attached equipment’s commands, and do not copy example listener ports or payloads into an active installation.

\n

Applicability questions

\n\n

DSE recommendation: controlled next steps

\n

The following steps are DSE recommendations based on the cited source.

\n

DSE recommends documenting the expected framing at both ends before enabling a network-to-serial path.

\n
    \n
  1. Draw the intended path from the authorized client to the actual physical serial interface and attached equipment. Identify the selected Axis port function and port-manager relationship through the exact device’s supported configuration. Obtain the client’s documented framing expectation. Stop the design review if the selected function and client expectation cannot be reconciled; do not diagnose that mismatch by repeatedly changing baud rate.
    2. \n
  2. Prepare an isolated test with qualified personnel and a harmless exchange approved for the attached equipment. Record serial settings and intended network restrictions before enabling any listener. Compare the transmitted and received data against the documented framing expectation. Avoid replaying example bytes from the API page when their meaning for the connected device has not been established.
    3. \n
  3. Apply the approved port configuration through the supported workflow and test only the intended access path. Confirm the selected physical port and the allowed consumer, then inspect a permitted trace or equipment response. If another channel shares the port, review its required operation separately. Restore the approved configuration if the framing or equipment response remains uncertain rather than exposing additional listeners to make troubleshooting easier.
    4. \n
\n

Verification and evidence

\n

Retain the topology, exact product/software identity, selected port function, serial settings and references establishing each endpoint’s framing contract. Keep a bounded sanitized exchange with the test input and observed response. Label network connectivity and correct equipment operation as separate outcomes.

\n

Use a proposed desk case that pairs a raw-data client with the specially framed remote-port function and require the reviewer to identify the mismatch before implementation. For the actual pilot, record the approved exchange and any unresolved behavior. This article reports no serial test, protocol compatibility result or accepted network exposure.

\n

Official references

\n\n

Source review completed October 29, 2026. Recheck the official documentation and the deployed device’s capabilities before changing production settings.

\n", "content_text": "Bottom line: Match the network client’s serial data expectations to the documented port function. Do not assume a remote-port connection is a raw TCP serial tunnel merely because both use a network socket.\nSource fact: documented behavior\nAxis’s Serial port API describes physical serial ports and remote-port clients, with a port manager able to share a port for uses such as PTZ control from multiple video channels.\nThe remote-port function is intended only for multi-CPU video encoders and adds a protocol header to its data payload beyond Generic TCP/IP.\nIn the Generic TCP server example, connected clients can send and receive raw data forwarded to and from the serial port.\nWhat the source does not establish\nDo not infer serial electrical compatibility, a third-party protocol implementation or safe network exposure from these descriptions. Obtain the exact product’s serial-port and connected-equipment documentation. Keep a raw-data path distinct from support for the attached equipment’s commands, and do not copy example listener ports or payloads into an active installation.\nApplicability questions\n\nWhich exact Axis product, physical serial interface and attached equipment are in scope?\nDoes the client expect raw serial payloads or the documented remote-port framing?\nIs this a multi-CPU encoder use case or an external integration needing a different supported path?\nWho approves serial settings, network access and the harmless test exchange?\n\nDSE recommendation: controlled next steps\nThe following steps are DSE recommendations based on the cited source.\nDSE recommends documenting the expected framing at both ends before enabling a network-to-serial path.\n\nDraw the intended path from the authorized client to the actual physical serial interface and attached equipment. Identify the selected Axis port function and port-manager relationship through the exact device’s supported configuration. Obtain the client’s documented framing expectation. Stop the design review if the selected function and client expectation cannot be reconciled; do not diagnose that mismatch by repeatedly changing baud rate.\nPrepare an isolated test with qualified personnel and a harmless exchange approved for the attached equipment. Record serial settings and intended network restrictions before enabling any listener. Compare the transmitted and received data against the documented framing expectation. Avoid replaying example bytes from the API page when their meaning for the connected device has not been established.\nApply the approved port configuration through the supported workflow and test only the intended access path. Confirm the selected physical port and the allowed consumer, then inspect a permitted trace or equipment response. If another channel shares the port, review its required operation separately. Restore the approved configuration if the framing or equipment response remains uncertain rather than exposing additional listeners to make troubleshooting easier.\n\nVerification and evidence\nRetain the topology, exact product/software identity, selected port function, serial settings and references establishing each endpoint’s framing contract. Keep a bounded sanitized exchange with the test input and observed response. Label network connectivity and correct equipment operation as separate outcomes.\nUse a proposed desk case that pairs a raw-data client with the specially framed remote-port function and require the reviewer to identify the mismatch before implementation. For the actual pilot, record the approved exchange and any unresolved behavior. This article reports no serial test, protocol compatibility result or accepted network exposure.\nOfficial references\n\nSerial port API — Axis Communications; official VAPIX documentation.\n\nSource review completed October 29, 2026. Recheck the official documentation and the deployed device’s capabilities before changing production settings.", "content_markdown": "Bottom line: Match the network client’s serial data expectations to the documented port function. Do not assume a remote-port connection is a raw TCP serial tunnel merely because both use a network socket.\n\n## Source fact: documented behavior\n\nAxis’s [Serial port API](https://developer.axis.com/vapix/network-video/serial-port-api/) describes physical serial ports and remote-port clients, with a port manager able to share a port for uses such as PTZ control from multiple video channels.\n\nThe remote-port function is intended only for multi-CPU video encoders and adds a protocol header to its data payload beyond Generic TCP/IP.\n\nIn the Generic TCP server example, connected clients can send and receive raw data forwarded to and from the serial port.\n\n## What the source does not establish\n\nDo not infer serial electrical compatibility, a third-party protocol implementation or safe network exposure from these descriptions. Obtain the exact product’s serial-port and connected-equipment documentation. Keep a raw-data path distinct from support for the attached equipment’s commands, and do not copy example listener ports or payloads into an active installation.\n\n## Applicability questions\n\n- Which exact Axis product, physical serial interface and attached equipment are in scope?\n\n- Does the client expect raw serial payloads or the documented remote-port framing?\n\n- Is this a multi-CPU encoder use case or an external integration needing a different supported path?\n\n- Who approves serial settings, network access and the harmless test exchange?\n\n## DSE recommendation: controlled next steps\n\nThe following steps are DSE recommendations based on the cited source.\n\nDSE recommends documenting the expected framing at both ends before enabling a network-to-serial path.\n\n- Draw the intended path from the authorized client to the actual physical serial interface and attached equipment. Identify the selected Axis port function and port-manager relationship through the exact device’s supported configuration. Obtain the client’s documented framing expectation. Stop the design review if the selected function and client expectation cannot be reconciled; do not diagnose that mismatch by repeatedly changing baud rate.\n\n- Prepare an isolated test with qualified personnel and a harmless exchange approved for the attached equipment. Record serial settings and intended network restrictions before enabling any listener. Compare the transmitted and received data against the documented framing expectation. Avoid replaying example bytes from the API page when their meaning for the connected device has not been established.\n\n- Apply the approved port configuration through the supported workflow and test only the intended access path. Confirm the selected physical port and the allowed consumer, then inspect a permitted trace or equipment response. If another channel shares the port, review its required operation separately. Restore the approved configuration if the framing or equipment response remains uncertain rather than exposing additional listeners to make troubleshooting easier.\n\n## Verification and evidence\n\nRetain the topology, exact product/software identity, selected port function, serial settings and references establishing each endpoint’s framing contract. Keep a bounded sanitized exchange with the test input and observed response. Label network connectivity and correct equipment operation as separate outcomes.\n\nUse a proposed desk case that pairs a raw-data client with the specially framed remote-port function and require the reviewer to identify the mismatch before implementation. For the actual pilot, record the approved exchange and any unresolved behavior. This article reports no serial test, protocol compatibility result or accepted network exposure.\n\n## Official references\n\n- [Serial port API](https://developer.axis.com/vapix/network-video/serial-port-api/) — Axis Communications; official VAPIX documentation.\n\nSource review completed October 29, 2026. Recheck the official documentation and the deployed device’s capabilities before changing production settings." }, "json_ld": { "@context": "https://schema.org", "@graph": [ { "@type": "Organization", "@id": "https://dsesecurity.com/#organization", "name": "Detection Systems & Engineering", "alternateName": "DSE Security", "url": "https://dsesecurity.com/", "logo": { "@type": "ImageObject", "url": "https://update.dsesecurity.com/assets/dse-logo-20260812.png?v=1.8.20" } }, { "@type": "Organization", "@id": "https://update.dsesecurity.com/#editorial-team", "name": "DSE Security Editorial Team", "url": "https://update.dsesecurity.com/", "parentOrganization": { "@id": "https://dsesecurity.com/#organization" } }, { "@type": "WebSite", "@id": "https://update.dsesecurity.com/#website", "name": "DSE Updates", "alternateName": "DSE Security Knowledge Hub", "url": "https://update.dsesecurity.com/", "inLanguage": "en-US", "publisher": { "@id": "https://dsesecurity.com/#organization" }, "potentialAction": { "@type": "SearchAction", "target": { "@type": "EntryPoint", "urlTemplate": "https://update.dsesecurity.com/?q={search_term_string}" }, "query-input": "required name=search_term_string" } }, { "@type": "WebPage", "@id": "https://update.dsesecurity.com/updates/distinguish-axis-raw-tcp-serial-access-from-remote-port-framing/", "url": "https://update.dsesecurity.com/updates/distinguish-axis-raw-tcp-serial-access-from-remote-port-framing/", "isPartOf": { "@id": "https://update.dsesecurity.com/#website" }, "lastReviewed": "2026-10-29" }, { "@type": "BreadcrumbList", "@id": "https://update.dsesecurity.com/updates/distinguish-axis-raw-tcp-serial-access-from-remote-port-framing/#breadcrumbs", "itemListElement": [ { "@type": "ListItem", "position": 1, "name": "DSE Updates", "item": "https://update.dsesecurity.com/" }, { "@type": "ListItem", "position": 2, "name": "Networks & Infrastructure", "item": "https://update.dsesecurity.com/topic/networks-infrastructure/" }, { "@type": "ListItem", "position": 3, "name": "Distinguish Axis raw TCP serial access from remote port framing", "item": "https://update.dsesecurity.com/updates/distinguish-axis-raw-tcp-serial-access-from-remote-port-framing/" } ] }, { "@type": [ "Article", "TechArticle" ], "@id": "https://update.dsesecurity.com/updates/distinguish-axis-raw-tcp-serial-access-from-remote-port-framing/#article", "identifier": "https://update.dsesecurity.com/updates/distinguish-axis-raw-tcp-serial-access-from-remote-port-framing/", "url": "https://update.dsesecurity.com/updates/distinguish-axis-raw-tcp-serial-access-from-remote-port-framing/", "headline": "Distinguish Axis raw TCP serial access from remote port framing", "description": "Distinguish Axis Generic TCP/IP serial access from the specially framed remote-port function for multi-CPU encoders before choosing a network-to-serial…", "abstract": "Distinguish Axis Generic TCP/IP serial access from the specially framed remote-port function for multi-CPU encoders before choosing a network-to-serial integration path.", "articleBody": "Bottom line: Match the network client’s serial data expectations to the documented port function. Do not assume a remote-port connection is a raw TCP serial tunnel merely because both use a network socket.\nSource fact: documented behavior\nAxis’s Serial port API describes physical serial ports and remote-port clients, with a port manager able to share a port for uses such as PTZ control from multiple video channels.\nThe remote-port function is intended only for multi-CPU video encoders and adds a protocol header to its data payload beyond Generic TCP/IP.\nIn the Generic TCP server example, connected clients can send and receive raw data forwarded to and from the serial port.\nWhat the source does not establish\nDo not infer serial electrical compatibility, a third-party protocol implementation or safe network exposure from these descriptions. Obtain the exact product’s serial-port and connected-equipment documentation. Keep a raw-data path distinct from support for the attached equipment’s commands, and do not copy example listener ports or payloads into an active installation.\nApplicability questions\n\nWhich exact Axis product, physical serial interface and attached equipment are in scope?\nDoes the client expect raw serial payloads or the documented remote-port framing?\nIs this a multi-CPU encoder use case or an external integration needing a different supported path?\nWho approves serial settings, network access and the harmless test exchange?\n\nDSE recommendation: controlled next steps\nThe following steps are DSE recommendations based on the cited source.\nDSE recommends documenting the expected framing at both ends before enabling a network-to-serial path.\n\nDraw the intended path from the authorized client to the actual physical serial interface and attached equipment. Identify the selected Axis port function and port-manager relationship through the exact device’s supported configuration. Obtain the client’s documented framing expectation. Stop the design review if the selected function and client expectation cannot be reconciled; do not diagnose that mismatch by repeatedly changing baud rate.\nPrepare an isolated test with qualified personnel and a harmless exchange approved for the attached equipment. Record serial settings and intended network restrictions before enabling any listener. Compare the transmitted and received data against the documented framing expectation. Avoid replaying example bytes from the API page when their meaning for the connected device has not been established.\nApply the approved port configuration through the supported workflow and test only the intended access path. Confirm the selected physical port and the allowed consumer, then inspect a permitted trace or equipment response. If another channel shares the port, review its required operation separately. Restore the approved configuration if the framing or equipment response remains uncertain rather than exposing additional listeners to make troubleshooting easier.\n\nVerification and evidence\nRetain the topology, exact product/software identity, selected port function, serial settings and references establishing each endpoint’s framing contract. Keep a bounded sanitized exchange with the test input and observed response. Label network connectivity and correct equipment operation as separate outcomes.\nUse a proposed desk case that pairs a raw-data client with the specially framed remote-port function and require the reviewer to identify the mismatch before implementation. For the actual pilot, record the approved exchange and any unresolved behavior. This article reports no serial test, protocol compatibility result or accepted network exposure.\nOfficial references\n\nSerial port API — Axis Communications; official VAPIX documentation.\n\nSource review completed October 29, 2026. Recheck the official documentation and the deployed device’s capabilities before changing production settings.", "datePublished": "2026-10-29T17:41:17+00:00", "dateModified": "2026-10-29T17:41:38+00:00", "mainEntityOfPage": { "@id": "https://update.dsesecurity.com/updates/distinguish-axis-raw-tcp-serial-access-from-remote-port-framing/" }, "inLanguage": "en-US", "isAccessibleForFree": true, "author": { "@type": "Organization", "name": "DSE Security Editorial Team", "url": "https://update.dsesecurity.com/#editorial-team" }, "publisher": { "@id": "https://dsesecurity.com/#organization" }, "image": { "@type": "ImageObject", "@id": "https://update.dsesecurity.com/updates/distinguish-axis-raw-tcp-serial-access-from-remote-port-framing/#primaryimage", "url": "https://update.dsesecurity.com/assets/editorial/physical-security-social-v2.jpg?v=1.8.20", "contentUrl": "https://update.dsesecurity.com/assets/editorial/physical-security-social-v2.jpg?v=1.8.20", "width": 1200, "height": 630, "caption": "Distinguish Axis raw TCP serial access from remote port framing" }, "articleSection": [ "Networks & Infrastructure", "Video Surveillance" ], "keywords": [ "Networks & Infrastructure", "Video Surveillance", "Guide", "Advisory priority" ], "genre": "Guide", "about": [ { "@type": "Thing", "name": "Networks & Infrastructure", "url": "https://update.dsesecurity.com/topic/networks-infrastructure/" }, { "@type": "Thing", "name": "Video Surveillance", "url": "https://update.dsesecurity.com/topic/video-surveillance/" } ], "wordCount": 565, "timeRequired": "PT3M", "publishingPrinciples": "https://update.dsesecurity.com/updates/dse-updates-editorial-methodology/", "usageInfo": "https://update.dsesecurity.com/usage/", "copyrightHolder": { "@id": "https://dsesecurity.com/#organization" }, "copyrightNotice": "Copyright © 2026 Detection Systems & Engineering. All rights reserved.", "citation": { "@type": "CreativeWork", "name": "Axis Communications — Serial port API", "url": "https://developer.axis.com/vapix/network-video/serial-port-api/" } } ] } }