Multi-branch CCTV central monitoring usually means each branch keeps recording on its own NVR, while head office connects to every branch over the internet through video management software (VMS) such as Hikvision HikCentral or Dahua DSS. Whether it works depends on four things: the upload speed at each branch, the stream type used, a secure connection method, and user permissions.
This guide is for retail chains, restaurant groups, schools and warehouse operators who want one monitoring screen for many sites. It ties in with AZEIDK’s security and surveillance systems, which cover CCTV cameras, NVR / DVR recording systems and connecting systems in a control room or central monitoring point.
Key takeaways
- For most chains, recording stays local; head office views live and pulls recordings when needed.
- Live viewing from head office uses the sub-stream. The main stream is requested only when reviewing an incident.
- The real limit is the upload speed of the branch internet line, not the download speed printed on the package.
- Dahua recommends disabling port mapping on the router so internal devices are not reachable directly from the internet.
- Saudi regulation limits access to camera system devices to authorised persons, with an entry and exit log.
In this article
- What does multi-branch CCTV central monitoring mean?
- What does a VMS such as HikCentral or DSS do?
- How much bandwidth (upload speed) does each branch need?
- VPN, P2P cloud or port forwarding?
- How are user permissions and access logs managed?
- How do branch alarms reach head office?
- What should be prepared at each branch before connection?
- Common mistakes when connecting branches
- Frequently asked questions
- Conclusion
What does multi-branch CCTV central monitoring mean?
Each branch has cameras, a recorder, a PoE switch and an internet router. Central monitoring does not replace any of these. It adds a management layer: one interface that shows all branches, receives their alarms, reviews recordings and flags offline devices.
The two basic models differ in where video is recorded:
| Item | Local recording at the branch, central management | Central recording at head office |
|---|---|---|
| Where video is stored | The NVR inside the branch | A recording server at head office |
| Branch internet usage | Only when viewing or retrieving | Continuous, all day, for every camera |
| Effect of an internet outage | Branch keeps recording; head office loses the view | Video stops reaching the central recording server |
| Best fit | Most retail chains, restaurants and schools | Nearby branches on private fibre or high-upload links |
The first model is the usual starting point because it does not load the branch line beyond its capacity.
What does a VMS such as HikCentral or DSS do?
A VMS brings recorders and cameras from many sites into one interface, with users, alarms, maps and device health. Both manufacturers whose surveillance products AZEIDK supplies in Saudi Arabia offer one.
Hikvision HikCentral Professional
The HikCentral Professional documentation describes the Remote Site concept. A HikCentral system with the RSM module (depending on the purchased licence) acts as a Central System, and other HikCentral systems are added to it as Remote Sites. From the Central System you can view a Remote Site’s cameras live and play back their recordings, add and handle its alarms, and set a recording schedule for its cameras with the video stored on a Recording Server added to the Central System. The documentation also states that a Remote Site can belong to only one Central System at a time.
Dahua DSS Professional
The DSS Professional 8.7.0 datasheet describes a Multi-site feature that combines several DSS platforms into one. It also lists an event centre handling more than 200 alarm types, maps where a device icon flashes red on alarm, a maintenance dashboard flagging offline devices and abnormal servers, and the DSS Agile app, which receives alarms.
The limits of each platform (sites, channels, users) and its optional modules are set by the manufacturer in the datasheet and licence for each version. Check them against the version named in the offer.
How much bandwidth (upload speed) does each branch need?
Video travels from the branch to head office, so it uses the branch line’s upload speed, which is lower than download on many packages. Measure actual upload at every branch before design.
Main stream and sub-stream
The Hikvision NVR user manual states that each channel supports dual streaming, and that for live view you choose main stream, sub-stream or Auto for each camera. The sub-stream has lower resolution and a much lower bitrate, so head-office split screens run on sub-streams and the main stream is called up only to verify an incident. The same manual describes Channel-Zero encoding, which combines several channels into one picture to reduce bandwidth for remote viewing.
A quick estimate
Required branch bandwidth = (cameras viewed at the same time × sub-stream bitrate) + (cameras being played back at the same time × main-stream bitrate) + an operating margin. A hypothetical example for illustration only: a branch with eight cameras whose sub-stream is set to 0.5 Mbps needs about 4 Mbps to show all eight at once. If head office also plays back one camera on a main stream set to 4 Mbps, usage rises to about 8 Mbps before margin. Real values come from the camera settings.
The recorder also limits outgoing connections. AZEIDK’s site lists 80 Mbps outgoing bandwidth for the 8-channel Hikvision DS-7608NXI-K1(B) NVR; that is the recorder’s capacity, not the branch internet speed. For per-camera storage and bitrate calculations, see CCTV storage and bandwidth calculation.
| Use at head office | Suitable stream | Effect on branch internet |
|---|---|---|
| Split-screen monitoring of several branches | Sub-stream | Low, continuous while viewing |
| Verifying an alarm or incident | Main stream for one or two cameras | High for a short time |
| Retrieving and downloading a recording | Recorded main stream | High, depending on clip length |
| Continuous central recording | As configured | Continuous, all day |
VPN, P2P cloud or port forwarding?
Three common ways to reach branch devices:
- Port forwarding: router ports at the branch are pointed at the recorder. This exposes the device to the internet. Dahua’s cybersecurity guidance recommends disabling port mapping on the router to prevent direct access from external networks to internal devices, and turning off unneeded services such as UPnP.
- The manufacturer’s P2P cloud service: for example Hik-Connect, which the Hikvision NVR manual lists as supported. Easy to set up and suited to mobile viewing and a few branches, but traffic passes through the manufacturer’s service, so check it against your IT security policy.
- Site-to-site VPN between each branch and head office: an encrypted tunnel between the branch router and the head office router or firewall. The VMS sees branch devices as one internal network with no public ports. It needs VPN-capable routers and a non-overlapping IP plan.
The choice follows branch count and IT policy, but never leave a recorder exposed to the internet on an open port with a default password. Routers, switches and network segmentation are part of AZEIDK’s network and communication systems.
How are user permissions and access logs managed?
The Executive Regulation of the Security Surveillance Cameras Law, published in the Umm Al-Qura gazette on 9 June 2023, requires access to a facility’s camera system devices to be limited to authorised persons, a log of their entry and exit, and recordings to be handed over only on a formal request from law enforcement authorities. For details, see the Saudi Security Surveillance Cameras Law.
In the VMS this becomes:
- Roles, not names: a branch manager sees only that branch, an area supervisor sees the branches in that area, and the control room sees everything without rights to delete recordings or change settings.
- One account per person, never a shared account, so the operation log means something.
- Export rights for few users only.
- Regular log review: Dahua recommends checking device logs to see which IP addresses logged in and what they did, giving each user the minimum set of permissions, and enabling the Allow List.
How do branch alarms reach head office?
The value of central monitoring is in events arriving: after-hours motion, an offline camera, a drive that stopped recording. In HikCentral, a Remote Site’s alarms are added to the Central System and handled there. In DSS, the event centre collects alarms, shows them on the map, and, according to the datasheet, can send device status and events to other systems over protocols including SNMP, Modbus, BACnet and SIA.
To cut the false alarms that flood a control room, use cameras that classify humans and vehicles, as covered in AI CCTV cameras. Agree in advance who receives each alarm type and when.
What should be prepared at each branch before connection?
- Measure actual upload speed and decide between static IP, VPN or the manufacturer’s service.
- A VPN-capable router where needed, with a non-overlapping IP plan.
- A camera network separated from the POS and office network using a VLAN, in line with Dahua’s advice to partition networks according to actual need.
- Updated firmware on recorders and cameras, and default passwords changed.
- All devices on one time source, so recording times match across branches.
- A consistent naming scheme (city code – branch number – location).
- A sub-stream bitrate per camera that suits the upload speed, and a UPS for the router, switch and recorder.
- User and role lists per branch before configuration.
Common mistakes when connecting branches
- Viewing every camera on the main stream, which chokes the branch line and POS.
- Relying on the download speed printed on the package instead of measuring upload.
- Forwarding recorder ports to the internet while keeping the default password.
- One shared account for all branch managers, which makes the operation log useless.
- Not documenting IP addresses, passwords and settings for each branch, which makes later maintenance harder.
Frequently asked questions
Does the branch stop recording if the internet goes down?
No, if recording is local on the branch NVR. What stops is the view and the alarms at head office until the connection returns.
Do I need a VMS to connect only three branches?
Not always. The manufacturer’s app or client may be enough for a few branches; a VMS pays off when managing permissions, alarms and device health across many sites.
Can Hikvision and Dahua devices run on one platform?
It depends on the software, its version and how devices are added. Check the compatible device list in the datasheet or with the manufacturer before buying.
Which is better for branches: VPN or P2P?
P2P is easier to set up and suits a few branches and mobile viewing. VPN gives more control without opening ports and suits larger networks.
Who is allowed to view branch recordings?
The Executive Regulation requires access to be limited to authorised persons with a log of their entry and exit, and recordings are handed over only on a formal request from law enforcement authorities.
Conclusion
Multi-branch CCTV central monitoring is a network and management decision before it is a camera decision. Start with local recording, sub-stream viewing, a secure connection that does not expose devices, and clear roles with an access log; then pick the VMS and licence for your branch and channel count.
Planning to bring your branches onto one monitoring screen? AZEIDK sets up central video management software (VMS) such as HikCentral or DSS, connects each branch’s cameras and recorders to your main monitoring room, and configures user permissions, remote live view and playback of recordings as part of our security and surveillance solutions. Send us your branch list, the number of cameras at each site and the available upload speed at each one, and we will start by reviewing the connection architecture. Talk to the AZEIDK team
