Okay, so I realize I'm just talking to myself here, but for the record:
I've now discovered that if I configure my device under the IP of my NVR on my local network, I have the issues - HOWEVER if I configure the device to use the domain of my dynamic DNS forwarding service which redirects to...