We'd love to hear about it! Click here to go to the product suggestion community
A client is using Apple HomePod speakers. Do you think that we should remove IPS for these devices? I havent heard complaints from the client for the devices function, but Ι dont know if IPS is needed for this device.
Hi Kostas Backas I think Apple Home POD is IoT device if you want to create a separate firewall rule for this device and you have the IP address of the device, you can create a firewall rule and can decide whether IPS policy required or not.https://community.sophos.com/kb/en-us/123579#Server-based%20routing
In reply to Keyur:
I know how to create policy-based rules. The question is if IPS is needed for this specific kind of devices.
In reply to Kostas Backas:
Hi Kostas Backas There is no thumb rule for it, that depends on your requirement and what kind of traffic being generated by the device. if you want you can apply generalpolicy from IPS policy.
seeing the device is IoT I would definitely have IPS active on its connections. All mine do.
In reply to rfcat_vk:
Do you have a custom IPS filter for these?
I created a custom IPS filter for devices used on my network. The interesting thing is unlike the UTM the refined IPS does not seem to affect the XG performance.
I would suggest you create your own IPS using one of the XG templates.
same here. I had special rules for each and every device, clients, servers, windows, unix, bsd...
A month ago or so I created a All-and-everything rule and assigned it to my fw rules. I even could consolidate some of the rules as the IPS setting was the only difference.
I haven‘t noticed any performance, additonal cpu usage or latency impacts, yet.
In reply to Dom Nik:
Thank you all for your time answering my question.