I am trying to provide VPN access to an employee from Win10 without putting a hardware tunnel appliance at his house. I am testing at my house, where I do have a pfsense box, but I've disabled the ...

I recommend also not allowing any outbound traffic from those devices. Or better yet, don't allow them to have any outside access and just access the nvr from outside to view them. Then your only weak ...