In that case, you simply add a second ethernet port on it (less than $20) and then you can completely isolate the cameras from the internet by having all of the cameras connect to one NIC and the internet to the other NIC.
It is called a dual NIC system and is a quick, simple, and easy way to keep cameras off the internet. Much simpler than VLANs.
Dual NIC setup on your Blue Iris Machine
In making your system more secure this is a great option to eliminate your cameras calling home / connecting to the internet This is a great place to start to setup a bit more secure network and learn more about IP/Subnets etc. before adding dual NICs: Router Security - Subnets and IP addresses...ipcamtalk.com
So you lost 8k but are balking at spending more than 800?
The WIKI can give you a lot of info on camera selection. @wittaj has given you lots of links to other threads that you really should read through about securing the network etc.
It is hard to respond to being violated in a less than quick fashion. We want to quickly solve the issue. Sometimes that causes us to make rash decisions.
Think about where the intrusion took place. What video would have been important to have? Where would you need to have cams mounted to get that video? What focal length lens would you have needed? You may find it difficult to answer those questions without any prior security cam experience. It might help to use a smartphone camera or DSLR camera to take some pictures of where the intrusion took place and shots of where you think cams should be placed and post them here for people to help give you direction.
I'll probably go with the dual NIC system then! just to confirm its just one other NIC card I need as opposed to the existing Ethernet ports on the machine?
In regards to where the cameras will be placed... I'm planning to have one covering the front w/ two way audio, one covering the back and one covering the porch as in the three instances we've been burgled, theyve opened the front porch door and smashed in the front door.