Re: Security? We've heard of it.
For anywhere that matters - are you really allowing your cameras on the same VLAN as anything other than other cameras? Are you really giving that VLAN Internet access? And do you really need to allow viewing of those cameras remotely from random IPs requiring port-forwarding etc. that you couldn't just do over an approved VPN to the right VLAN?
Yes on all counts. This was the way it was set up by the security company that provided and installed the camera (not a Xiongmai system, though I don't have too much faith that it's any better) and alarm systems. As it happens, we know enough to know that it's probably not ideal, and will probably get around to making things more secure, but I suspect 90% of smaller businesses getting a system installed would have no idea. Small businesses typically have limited in-house IT expertise, and use kit in whatever configuration suppliers set up for them, like it or not, so it would be really helpful if kit was at least a little bit secure out of the box.