Ok, but then wouldn't vlan 4 need to be not isolated from the internet? The BI PC would need to have some connectivity to the internet, correct? I am working under the assumption that I don't want the IP cameras exposed to the internet at all. So in this case a firewall rule allowing only the BI...