Hi!
First on having access to the camera at any time. I believe the two most effective solutions would be:
- Using remote user access - if your device has a WAN with a public IP address, then you can configure access from an end device (laptop, phone, etc) through OpenVPN, L2TP or PPTP. It’s relatively easy to configure and doesn’t require any additional licenses. We previously had a forum post on how to configure it. While it’s somewhat dated, it should provide enough information. Also if the public IP on your WAN interface is dynamic, you could look into getting a Dynamic DNS entry.
- Using InTouch - if you use our InControl2 platform, then you can configure access to the camera via InTouch. One of our certified partners have made a video on it’s configuration.
Now on limiting the camera access. You need to limit the camera to be able to only send/receive traffic inside your network. This can be done with a firewall rule in the outbound firewall rules section. This rule should drop any traffic originating from your camera’s IP. This will still allow the camera to send/receive traffic on your local network or via an OpenVPN connection.