Are you specifically blocking outgoing traffic in your router? If not, then the NVR is going out.
I have blocked in and out for all my cameras and NVR and only allow out on certain ports (8888, 2197, 2195, 443, 587, 5223) and to the Apple notificaton range 17.0.0.0/8
The NVR is not blocked in the router... just the cams.
I don't fully understand "Apple notification range". I expect there's the same for Android, but I'm not following how my NVR's notification is identified there as being associated with my mobile or an app on it.
Obviously I'm not Mr Networking and IoT, so apologies to all if I'm coming across quite dull in the head. I appreciate everyone's patience.
Cheers, Steve