Setting Up a Firewall for Dahua PTZ — Is an Isolated Subnetwork Necessary?

[iSnapper3000]

I'm looking into setting up a firewall for our Dahua PTZ unit. I want to make sure it’s protected from the main network it’s currently hosted on. From what I understand, we’d need to create our own subnetwork, which is then protected independently. We would block any inbound connections, and the only way to connect would be through a secure tunnel.

Does anyone know if this is the best solution?

 

[iwanttosee]

Assign NO gateway address to it and no DNS server. It won't be going to internet and internet can't get to it.

 

[iSnapper3000]

Assign NO gateway address to it and no DNS server. It won't be going to internet and internet can't get to it.

Thanks! We still need connectivity, but we’d like to isolate it so that even if the main network is breached, there’s still a layer of protection in place.

 

[iwanttosee]

Thanks! We still need connectivity, but we’d like to isolate it so that even if the main network is breached, there’s still a layer of protection in place.

Use a VPN or tailscale for remote access.