Axis released hotfixes (11.5.2 and later) that invalidated unauthenticated stream tokens and enforced strict session validation. After applying the patch, live view now requires re-authentication even for previously "whitelisted" IP addresses.
Below is a review-style breakdown of what these patches generally achieve and why they are critical for your security setup. Overview of "Live View" Patches live view axis patched