Tutorials · Video Surveillance
How to Access CCTV Remotely Without Port Forwarding
Port-forwarding an NVR to the Internet invites attacks. Use a VPN instead and keep cameras invisible from outside.
Before you start
- A gateway or firewall with VPN support
- The NVR on a dedicated VLAN
Step by step
Remove existing port forwards
Delete any NAT rules exposing ports such as 80, 554, 8000 or 37777 to the NVR or cameras. Disable UPnP on the router.
Set up a remote-access VPN
Configure an IPsec or SSL client VPN on the gateway and create individual accounts for each viewer.
Allow VPN users to the NVR only
Firewall rules should allow VPN users to reach the NVR's web and streaming ports, not the whole network.
Install the viewer
Connect the VPN on the phone or laptop, then open the NVR address or viewing app.
Audit
Review VPN logins regularly and remove accounts that are no longer needed.
Pro tips
- Enable 2FA for VPN accounts.
- Keep NVR firmware current even when it is not exposed to the Internet.
FAQ
Frequently asked questions
Is P2P cloud access safe?
It depends on the vendor's security. A VPN under your control is the safest general option.
Keep learning
Related guides
Segment IoT and CCTV
Read more →IoT and camera botnets
Read more →How to Set Up IP Cameras With a PoE Switch and NVR
From unboxing to recording: plan IP addresses, power cameras with PoE, add them to the NVR and set recording and retention.
Read more →How to Configure NVR Storage, RAID and Retention
Install surveillance drives, choose RAID, set recording quotas and confirm you keep footage for the required number of days.
Read more →How to Configure PTZ Camera Presets, Patrols and Auto-Tracking
Make PTZ cameras work for you: save presets, build patrol tours, set park positions and use smart tracking where supported.
Read more →Stuck on a step?
Ask Navijin technical support or an authorised partner for help with your configuration.