How can I manually set certain devices as "unlicensed" (not counting towards license)?

Question

Im currently on UTM9 home license (I also have a unused XG home license but im will migrate once XG starts supporting PGP/SMIME) 
 I wonder, whats the recommended solution to set certain IPs/devices as completely blocked & unlicensed? 
 For example, if I have DHCP range 192.168.1.2 to 192.168.1.20, I want to tell the UTM that any device 192.168.1.21 to 192.168.1.254 should be blocked, so if a virus or something starts "IP-scanning" or something, that traffic should be blocked and not counted towards my licensing. 
 If I add a simple firewall "block all" rule, the traffic will be blocked, but all connection attempts will still count towards licensing what I have understand, which will mean the legit 192.168.1.2 to 192.168.1.20 will be ejected from network. 
 Or in other words, I want to prioritize so certain devices on network *ALWAYS* are licensed (counted towards license), so any host above this cannot "steal" licenses. 
 
 Also, I wonder, how do I as an individual upgrade my license to a paid one? All resellers keep rejecting me as a customer due to I don't own any company or corporation... 
 Is there any non-commercial/non-profit pricing available for Home customers with more than 50 devices?

sachingurung · Answer

Hi Sebastian, 
 I see you just want a certain range of IP addresses to connect with the UTM and rest should be rejected. That is possible with XG firewalls under IP Spoofing module but unfortunately, it is not an available feature in UTM. Please raise it as a feature request here . If you are not able to buy a license anywhere, I suggest you directly contact the Sophos sale team. 
 Thanks

sachingurung · Answer

Hi Sebastian, 
 Brilliant idea, subnetting !! I completely missed that one, it was one of my interview questions in Sophos on how to cut half a /24 network into a half. I cracked it that time. 
 Let me know if subnetting works to control the IP addresses. 
 Thanks