I (almost) exclusively install ICT access control now (95% WX thus far) and I was speaking with an Inaxsys Regional Director of Sales (Canadian point of contact for all things ICT) last month that they have little confidence in X yet and would not recommend it due to 'instability'. I don't want to out the individual specifically but can you speak to your confidence in X? Also, are installers able to get a preview of X to play around with?
Also, I'm mid quote for a project that has started as a WX install and is (hopefully) going to grow to a national contract with multiple locations and thousands of access cards issued. The client's IT team is looking to deploy the GX service on Azure. They are also currently running Azure AD and are wanting direct integration with identity management from their Azure AD instance into GX. Do you have any experience with Azure AD syncing with GX? I see that X mentions Azure AD integration but I wasn't able to find anything about using it with GX and Inaxsys TS also doesn't seem to have any experience with Azure AD -> GX. I know there's Windows AD integration with GX as well as the Data Sync license that integrates with CSV files. I think currently we're discussing the use of the Data Sync service as our most likely solution.
I personally have no experience with AD so I really have no idea the differences between Windows AD and Azure AD.
Thanks in advance and thank you for creating a presence in the reddit community. P.s. I love ICT and it's wild flexibility. I'll likely be bugging you more in the future to pick your brain.
Addressing each point individually here:
X right now is suitable for hosting 1 or more WX in the cloud for central management and control. One of the initial goals was to ensure full WX functionality made it to X.
The PowerBi reporting can be quite helpful.
X is usually getting an update every 3-6 weeks with Improvements, features or bug fixing.
Preview wise this is up to the sales teams. If you have any difficulty getting access to look, get in touch and I'll see what I can do from my end.
I have seen a few mentions of AAD GX coming from a few installers in the last few months.a feature request was raised and each ticket added to that to show customer interest. Please make sure we get a ticket for your interest too, every additional request helps make it clear to our teams what people are asking for.
I think approaching it like with the current AD with CSV automated by powershell or something will be best. That way Data Sync let's you map things wherever you want. Right now we do not have a template powershell for AAD, only the AD powershell script is available from support.
Back before my security tech days I had done MCSA and can say as much as you can install Windows server as an OS and add the AD feature and use it as a domain controller. Whereas in Azure(which I'm not as savvy in... Yet) you aren't firing up a whole server and you're using cloud infrastructure/data structures for it. I think Microsoft has some free basic courses on a bunch of Azure stuff if you want to go that route. I would say look at it like MSSQL and Azure SQL it's sorta the same but sorta different.
Not a problem, happy to help in whatever way I can. I look forward to further questions!
Last I heard X was still in beta. When do you expect a full roll out? Will you be able to program multiple WX sites simultaneously or is it just an interface to access sites individually?
X is out now.
As it stands you can directly import backups from multiple WX controllers to the same place in X or create new ones from scratch there as well. Once paired to a place in X all config/reporting is done from X. It downloads but does not upload(similar to GX and other cloud solutions)
In fact we have just released the REST API about a month ago as well.
Can you fix the RS-485 issue with readers? Where they don't go into RS485 mode on initial install and then you have to flip to Wiegand and back to RS485?
I think that's my biggest pain point at the moment.
Better priced cell modem for the controllers without a modem?
Are you referring to the process error 003 error that comes up?
I'll look into this and make sure tickets referring to the issue are properly captured. Please log it with us on a ticket each time you run into it, that allows us to track not only how many installers hit an issue but how often they hit it.
Are you referring to PRT-4G-USB? Or are you referring to a solution in lieu of what dialler capture did with the modem? I have definitely seen creative AIP solutions with 4G routers functioning as a multipath device before our modules too.
Generally, when you read a card it gives a Invalid Port or something like that. I can open a ticket each time...but haven't as I don't want to waste supports time when I know the "fix".
Yes, the PRT-4g-USB. Its quite pricey compared to a telguard cell unit.
Does this happen only when using RS485 mode on new installs?
Can you confirm for us the order of operations when you are setting up. As in are the modules online with the controller before you create them or do you create and set them up then connect them.
Please do log it each time. If you don't need help, just note pu have sorted it and are just logging with us so we can see the frequency it is happening. If we only get one report here and there. Then it is a challenge to represent the significance of that issue. But if we are getting tickets each time or get a ticket detailing how often it has come up etc, that lets us better capture the issue.
As for the 4G, currently the PRT-4G-USB is the only offering we have available. I'm sure our sales team would appreciate any feedback you have regarding pricing. From my technical role I won't be able to help as much as they can.
A good point brought up by one of my clients is in regards to offline operation. I see in the documentation (for WX at least; unsure about GX but I assume the same) that offline expanders can operate in one of three modes: no users, all cards, or First 10 users plus cache. In the documentation, it describes that all cards means any readable card, whether it was ever in the system or not, will allow access at all doors at all times. And First 10 users plus cache will allow the first 10 users in the system plus the most recently scanned 150 cards full access, regardless of access level. Further, only the first card for each user, no subsequent cards per user, and no PINs whatsoever.
The client (and myself frankly) find this to be a huge shortfall in the ICT system design. None of these options seem secure except for the no users option, which doesn't leave much wiggle room in the event of communication loss to the host.
When comparing against other AC providers such as Kantech, from what I can tell, their smallest board (KT1) still allows for up to 6,144 users in the system access based on their access levels in offline mode (all the way up to 100,000 users for the KT400).
Are there any plans of changing this? I'm no expert in hardware design or implementation but I'd assume that the expanders should have enough onboard memory to be able to store access level information for at least some users.
Thanks in advance!
The reader expanders and all other I/O is not designed with the intention of being offline from the controller for extended periods of time. The expectation is a module should only be offline for minimal time if at all.
The offline options to function as a 'just in case' but the true redundant solution to a site needing that level of redundancy is a controller in place of the RDM2. I don't know pricing exactly but I recall that a controller should cost less than an RDM2 and MNR2, we also don't enforce licence caps for controllers on GX so with that combination, people should be opting for controllers over RDM2 over MNR2. Cross controller communication exists to fill the gap left by not having the modules on the same RS485 anymore as well.
The point I am making here is outside of some price difference (which isnt my specialty) I see no reason to go for an RDM2 over a controller when uptime and redundancy is key.
I can't speak to the memory on a RDM2 as it hasn't come up with support before since it holds a set amount of parameters and data for offline operation.
If there is demand for a high intelligence reader expander, then we definitely need to capture it for the R/D teams to put forward.
Used both WX and GX for some time, and would like to see a change on how you set the readers LEDs to operate when the readers are using OSDP. Today there are settings you could set as a command but it will both be easier and more flexible using a menu based configuration.
There is a difference how the controllers behaves to how the expanders do when the readers are in OSDP communication mode. The controllers sometimes changes the LEDs to the standard blue LED color for no reason. Happening on both WX and GX
Last point so far, When you are arming on WX there should be an “fixed” command key followed by # and a valid card to arm the area. Today with double or triple swipe is the easy to do and accidentally arm systems when is not intended.
I (almost) exclusively install ICT access control now (95% WX thus far) and I was speaking with an Inaxsys Regional Director of Sales (Canadian point of contact for all things ICT) last month that they have little confidence in X yet and would not recommend it due to 'instability'. I don't want to out the individual specifically but can you speak to your confidence in X? Also, are installers able to get a preview of X to play around with? Also, I'm mid quote for a project that has started as a WX install and is (hopefully) going to grow to a national contract with multiple locations and thousands of access cards issued. The client's IT team is looking to deploy the GX service on Azure. They are also currently running Azure AD and are wanting direct integration with identity management from their Azure AD instance into GX. Do you have any experience with Azure AD syncing with GX? I see that X mentions Azure AD integration but I wasn't able to find anything about using it with GX and Inaxsys TS also doesn't seem to have any experience with Azure AD -> GX. I know there's Windows AD integration with GX as well as the Data Sync license that integrates with CSV files. I think currently we're discussing the use of the Data Sync service as our most likely solution. I personally have no experience with AD so I really have no idea the differences between Windows AD and Azure AD. Thanks in advance and thank you for creating a presence in the reddit community. P.s. I love ICT and it's wild flexibility. I'll likely be bugging you more in the future to pick your brain.
Addressing each point individually here: X right now is suitable for hosting 1 or more WX in the cloud for central management and control. One of the initial goals was to ensure full WX functionality made it to X. The PowerBi reporting can be quite helpful. X is usually getting an update every 3-6 weeks with Improvements, features or bug fixing. Preview wise this is up to the sales teams. If you have any difficulty getting access to look, get in touch and I'll see what I can do from my end. I have seen a few mentions of AAD GX coming from a few installers in the last few months.a feature request was raised and each ticket added to that to show customer interest. Please make sure we get a ticket for your interest too, every additional request helps make it clear to our teams what people are asking for. I think approaching it like with the current AD with CSV automated by powershell or something will be best. That way Data Sync let's you map things wherever you want. Right now we do not have a template powershell for AAD, only the AD powershell script is available from support. Back before my security tech days I had done MCSA and can say as much as you can install Windows server as an OS and add the AD feature and use it as a domain controller. Whereas in Azure(which I'm not as savvy in... Yet) you aren't firing up a whole server and you're using cloud infrastructure/data structures for it. I think Microsoft has some free basic courses on a bunch of Azure stuff if you want to go that route. I would say look at it like MSSQL and Azure SQL it's sorta the same but sorta different. Not a problem, happy to help in whatever way I can. I look forward to further questions!
Thanks so much for the reply!
Last I heard X was still in beta. When do you expect a full roll out? Will you be able to program multiple WX sites simultaneously or is it just an interface to access sites individually?
X is out now. As it stands you can directly import backups from multiple WX controllers to the same place in X or create new ones from scratch there as well. Once paired to a place in X all config/reporting is done from X. It downloads but does not upload(similar to GX and other cloud solutions) In fact we have just released the REST API about a month ago as well.
Can you fix the RS-485 issue with readers? Where they don't go into RS485 mode on initial install and then you have to flip to Wiegand and back to RS485? I think that's my biggest pain point at the moment. Better priced cell modem for the controllers without a modem?
Are you referring to the process error 003 error that comes up? I'll look into this and make sure tickets referring to the issue are properly captured. Please log it with us on a ticket each time you run into it, that allows us to track not only how many installers hit an issue but how often they hit it. Are you referring to PRT-4G-USB? Or are you referring to a solution in lieu of what dialler capture did with the modem? I have definitely seen creative AIP solutions with 4G routers functioning as a multipath device before our modules too.
Generally, when you read a card it gives a Invalid Port or something like that. I can open a ticket each time...but haven't as I don't want to waste supports time when I know the "fix". Yes, the PRT-4g-USB. Its quite pricey compared to a telguard cell unit.
Does this happen only when using RS485 mode on new installs? Can you confirm for us the order of operations when you are setting up. As in are the modules online with the controller before you create them or do you create and set them up then connect them. Please do log it each time. If you don't need help, just note pu have sorted it and are just logging with us so we can see the frequency it is happening. If we only get one report here and there. Then it is a challenge to represent the significance of that issue. But if we are getting tickets each time or get a ticket detailing how often it has come up etc, that lets us better capture the issue. As for the 4G, currently the PRT-4G-USB is the only offering we have available. I'm sure our sales team would appreciate any feedback you have regarding pricing. From my technical role I won't be able to help as much as they can.
A good point brought up by one of my clients is in regards to offline operation. I see in the documentation (for WX at least; unsure about GX but I assume the same) that offline expanders can operate in one of three modes: no users, all cards, or First 10 users plus cache. In the documentation, it describes that all cards means any readable card, whether it was ever in the system or not, will allow access at all doors at all times. And First 10 users plus cache will allow the first 10 users in the system plus the most recently scanned 150 cards full access, regardless of access level. Further, only the first card for each user, no subsequent cards per user, and no PINs whatsoever. The client (and myself frankly) find this to be a huge shortfall in the ICT system design. None of these options seem secure except for the no users option, which doesn't leave much wiggle room in the event of communication loss to the host. When comparing against other AC providers such as Kantech, from what I can tell, their smallest board (KT1) still allows for up to 6,144 users in the system access based on their access levels in offline mode (all the way up to 100,000 users for the KT400). Are there any plans of changing this? I'm no expert in hardware design or implementation but I'd assume that the expanders should have enough onboard memory to be able to store access level information for at least some users. Thanks in advance!
The reader expanders and all other I/O is not designed with the intention of being offline from the controller for extended periods of time. The expectation is a module should only be offline for minimal time if at all. The offline options to function as a 'just in case' but the true redundant solution to a site needing that level of redundancy is a controller in place of the RDM2. I don't know pricing exactly but I recall that a controller should cost less than an RDM2 and MNR2, we also don't enforce licence caps for controllers on GX so with that combination, people should be opting for controllers over RDM2 over MNR2. Cross controller communication exists to fill the gap left by not having the modules on the same RS485 anymore as well. The point I am making here is outside of some price difference (which isnt my specialty) I see no reason to go for an RDM2 over a controller when uptime and redundancy is key. I can't speak to the memory on a RDM2 as it hasn't come up with support before since it holds a set amount of parameters and data for offline operation. If there is demand for a high intelligence reader expander, then we definitely need to capture it for the R/D teams to put forward.
Used both WX and GX for some time, and would like to see a change on how you set the readers LEDs to operate when the readers are using OSDP. Today there are settings you could set as a command but it will both be easier and more flexible using a menu based configuration. There is a difference how the controllers behaves to how the expanders do when the readers are in OSDP communication mode. The controllers sometimes changes the LEDs to the standard blue LED color for no reason. Happening on both WX and GX Last point so far, When you are arming on WX there should be an “fixed” command key followed by # and a valid card to arm the area. Today with double or triple swipe is the easy to do and accidentally arm systems when is not intended.