Long time lurker, first time poster.
I have a BI server and cameras running on an isolated vlan with no internet access. Remote access has been configured on EdgeRouter 4 to only allow that vlan interface to communicate with connections coming from my MainPC IP address (on different VLAN)...