It's not described well, is it.   The cameras only need to be able to connect out.  They will establish an outbound TCP connection and reply traffic has to be allowed in. Every Internet-facing firewall uses stateful rules for this, so simply allowing the traffic out implies that want to allow the reply traffic to come back in. ... View more