Ann, a Physical Security Manager, is ready to replace all 50 analog surveillance cameras with IP cameras with built-in web management. Ann has several security guard desks on different networks that…

A Network Intrusion Prevention System detects and blocks malicious or anomalous traffic patterns but cannot enforce user authentication for legitimate, authorized access requests to the camera streams.

Restricting access to SSL-only encrypts video streams in transit but does not authenticate which users are permitted to view them, since the cameras themselves cannot validate credentials regardless of transport security.

Deploying a reverse proxy in front of the isolated IP camera network intercepts all incoming access requests from security guard workstations and enforces credential validation before forwarding the video stream to the client. This compensates for the camera vendor's lack of built-in user authentication while still allowing guards on different network segments to access the feeds through the authenticated proxy. Isolating the cameras on a dedicated network additionally limits their exposure so that only proxy-mediated, authenticated traffic can reach them.

Restricting camera access to a single management host would prevent the security guards stationed at multiple network locations from viewing the cameras, directly contradicting the stated operational requirement.