I like generic lan-only rtsp poe cameras that are additionally blocked from accessing anything but the box that receives the streams.

I have zero trust in companies so i prefer flashing open source firmware on poe cameras, using open source nvr to record, Cameras are all on a no-internet vlan, One way firewall rule to view from my main vlan, Vpn to my house to view remotely.

Nearly any decent PoE camera. I prefer Ubiquiti and Reolink. With PoE cameras you can control (with a firewall) what gets egress to the outside network. Block egress for every camera. Can even go one step further and block them internally but allow only certain ports needed, like 554 for RTSP and 80/443 for management.

I have a positive experience with Reolink. Not connected to internet at all currently.

Not sure if I will. If I do, will definitely try some firewall stuff. Another part of me is considering not connecting the NVR itself, but taking the video stream from the HDMI and somehow making it so I can see that stream from anywhere. Would miss out on alerts that way though.

Getting a local security camera setup is kind of a pain but do able. Look into the self hosted software Frigate and go with their recommended brands.

How do you define "no posability of internet acess at all?"

• Is networked to a central router that has blocked the devices in software fine?
• Is having network ports but being unplugged fine?

Or do really mean you want CCTV to a local recorder with no cat ports and no WiFi cards at all so that you can't physically connect the cameras to the internet even if you wanted to?

I have several poe reolinks that connect to an NVR which is plugged into my router and blocked from accessing the wider internet. I can use the app just fine at home, but nothing is escaping to the broader web. One could unplug the NVR from the router, thus removing the possibility of leaking to the internet at the expense of needing to use the physical HDMI and USB port when investigating incidents.