Yes, of course, you can buy a ready-made unit like that - and if you’ve found the Firewalla solution to be fairly easy to set up and manage, all the better. But there are plenty of such solutions on the market, varying in how easy they are to configure and administer. Some users might prefer OPNsense, OpenWrt, or IPFire, for instance. Personally, I find IPFire easier to manage than OPNsense, for example. But those are just individual preferences.
Theoretically, you could also install Firewalla on your own suitable hardware; after all, Firewalla is open source.
I just wanted to prevent @JPmedia from spending money unnecessarily, only to potentially realize later that it doesn't actually help with his NVR issue. After all, simply placing an NVR behind an extra router and/or into a VLAN - without first considering the implications for access from various clients - isn't the right approach. That is precisely why I suggested that @JPmedia should familiarize himself with the subject matter a bit more first.
Edit @JPmedia
Is this about your (or a) Dahua NVR - the one you mentioned in other posts? If so:
1. I find it hard to imagine there would be an admin user that you cannot delete.
2. Depending on the firmware version, a Dahua NVR already has certain basic, built-in firewall functions. For example, you can restrict access to specific IP addresses within the LAN.
Furthermore, unless you have set up a port forwarding rule for the NVR in your router, or enabled UPnP for it, or are using P2P or some other method for remote access, no one can access the NVR from the internet anyway. Access attempts from the WAN (internet) to your LAN are typically blocked by default, unless you have manually lifted or relaxed that restriction. Consequently, WAN access to the NVR wouldn't be possible - unless the NVR itself initiated an outbound connection to the internet that could then be exploited by someone else.
Last edited:
