Apple HomePod rule, No IPS?

Hi Kostas Backas 

I think Apple Home POD is IoT device if you want to create a separate firewall rule for this device and you have the IP address of the device, you can create a firewall rule and can decide whether IPS policy required or not.

https://community.sophos.com/kb/en-us/123579#Server-based%20routing

Thank you,

I know how to create policy-based rules. The question is if IPS is needed for this specific kind of devices.

best regards

K

Hi Kostas Backas 

There is no thumb rule for it, that depends on your requirement and what kind of traffic being generated by the device. if you want you can apply generalpolicy from IPS policy.

Hi,

seeing the device is IoT I would definitely have IPS active on its connections. All mine do.

Ian

Thank you,

Do you have a custom IPS filter for these?

Best regards

K

Hi,

I created a custom IPS filter for devices used on my network. The interesting thing is unlike the UTM the refined IPS does not seem to affect the XG performance.

I would suggest you create your own IPS using one of the XG templates.

Ian

Hi,

same here. I had special rules for each and every device, clients, servers, windows, unix, bsd...

A month ago or so I created a All-and-everything rule and assigned it to my fw rules. I even could consolidate some of the rules as the IPS setting was the only difference.

I haven‘t noticed any performance, additonal cpu usage or latency impacts, yet.

Best Regards

Dom

Hi,

same here. I had special rules for each and every device, clients, servers, windows, unix, bsd...

A month ago or so I created a All-and-everything rule and assigned it to my fw rules. I even could consolidate some of the rules as the IPS setting was the only difference.

I haven‘t noticed any performance, additonal cpu usage or latency impacts, yet.

Best Regards

Dom

Thank you all for your time answering my question.