Skip to main content

Product overview

RUBEZH STRAZH is an access control system based on network controllers with embedded software and access modules. It combines access, personnel and visitor management with event monitoring and integrations with external systems.

The system does not require a dedicated server. Configuration and daily operation use a web interface in a browser on a computer, tablet or smartphone. No separate client application is needed.

  • Embedded software: controllers handle equipment configuration and access control.
  • Distributed system: controllers form a cluster and synchronize data.
  • No workstation licensing: licensing does not limit the number of web clients; Windows, Linux, macOS, iOS and Android are supported with a current browser.

Architecture​

Every RUBEZH STRAZH controller is an independent node with embedded Linux-based software. It stores data, manages access points and communicates with other nodes and external systems. STR20-IP and STR20-IP-Ent controllers can be combined into a cluster.

Data is replicated across controllers instead of being held on a single central node. If one controller fails, the remaining cluster nodes continue operating within the configuration available to them. This does not mean equipment connected to the failed controller automatically continues operating: controller and interface redundancy must be configured separately.

Controllers and web clients communicate over Ethernet. Access modules and compatible peripherals connect over OSDP (RS-485). The diagram also shows Wiegand reader connections, locks and supervised circuits.

RUBEZH STRAZH architecture: web clients and controllers on Ethernet, with access modules, readers, locks and a turnstile on OSDP. Original diagram in Russian.
RUBEZH STRAZH architecture. Original Russian diagram from the RUBEZH knowledge base.

The diagram lists maximum capacities of 30 OSDP devices and 20 readers per controller, and 32 controllers per cluster. Check the controller model, license and operation manual for the configuration supported at a particular site.

Licensing and editions​

The embedded software does not require a dedicated server with separately purchased server software. Client workstations do not require licenses. This removes the need to install and maintain separate access control server and client applications.

System capabilities still depend on the controller edition. A standard STR20-IP controller can be upgraded to Enterprise without replacing the hardware when the site needs Enterprise features, including integration with external software.

The RUBEZH STRAZH API is available on STR20-IP-Ent network controllers and on the STR20-1AP-IP-M and STR20-2AP-IP-M metal-enclosure models. Methods and supported versions are documented in the API reference.

Main tasks​

RUBEZH STRAZH is used to:

  • configure controllers, network settings, date and time, data buses, and peripherals;
  • combine controllers into a cluster;
  • configure access points, access levels, schedules, and the personnel structure;
  • manage personnel, cards, identifiers, and access profiles;
  • monitor equipment status, faults, and events;
  • export data for reporting and time and attendance;
  • integrate with external systems through the REST API.

Capabilities​

Access and identification​

  • Pass office, personnel and visitor management.
  • Individual access algorithms, schedules, local and global anti-passback.
  • Card and mobile identifiers, including BLE and NFC.
  • Face, fingerprint and palm vein recognition with the corresponding equipment.

Monitoring and reporting​

  • Equipment status and event monitoring.
  • Photo verification of passages and a security desk workstation.
  • Reporting, time and attendance, and event exports to external systems.

Integrations and expansion​

  • Hardware integration with RUBEZH R3 intrusion detection, including through R3-Link.
  • Integration with 1C and other third-party software through the REST API.
  • Video surveillance and license plate recognition integration.
  • Support for OSDP devices, Wiegand readers and addressable peripherals.
  • Controller and interface redundancy, scaling and geographically distributed access control systems.

System components​

ComponentPurpose
Network controllers with embedded softwareData storage and synchronization, access and equipment control
Access modulesExpanding equipment connectivity for controllers
Readers and identifiersIdentifying employees and visitors
Locks and turnstiles, including OSDP devicesAccess point actuators
Web clientsSystem configuration and operator access through a browser
External systemsVideo surveillance, intrusion detection, business software and other integrations

System resources​