![chatgpt.com](https://cdn.oaistatic.com/_next/static/media/chatgpt-share-og.49cbbffe.png)
In short, having Blue Iris on a separate user account that does not have network access to the LAN (other than the router), and using a reverse proxy with 2fa authentication is basically 10/10 bullet proof and should function just like using the port forward method once the device is authenticated.
Just having the LAN access restricted (either through making a new user account or putting a firewall/router in front of the server) should prevent further damage should the server become compromised. With the reverse proxy service you can add 2fa authentication so that you would need to verify by email to allow that device to have network access to the BI server.
Last edited: