Securing Wyze Solution (or any IoT solution)





I hope you guys don't be mad at me for this xD, but I am kind of engage on SET the devices a acquired in the most "reliable, secure & easy (if posible)" way.
As per the first topic to discuss, I have already set up all my devices and they are: 4 bulbs, 2 contacts sensors,1 motion sensor, 1 Pan Cam, 1 Cam v2 (just miss the plugs because they weren't available at the moment of purchase

I have played around with some automation from within the WyzeApp and IFTTT as an alone service and in combination with Location and Fing services. (I have lots of questions on this specific topic, but there is something for the next time). My concern this time is "security". I have read a lot of you guy/girls than you prefers your IoT devices isolated from your "personal" devices, so.. how to accomplish that?
First with NO more equipment than the already existing on a average network (as per modem, router, AP's/mesh nodes, FingBox). Second with the least change on network equipment. And Third the most over the hill solution the experts could think xD.
Comments
-
Great question. I am looking to do just this.
it would be neat if a Fingbox could somehow do this for you. Home networks are getting ever more complicated and what home users actually need is some kind of VLAN management, but this is way too complicated for the average user (including myself) to be able to understand.
Even most moderate home-networkers now have so many devices on their network that you really want to be to restrict that traffic. Do your guests only really need internet access, or would it be nice if they could see your Hue Bridge too? They certainly don’t need to be able to see my NAS. There are so many combinations of how you might want traffic to be managed but as far as I can tell no one makes a device that easily allows you to do this.
3 -
Can I suggest a viewing of the Three Dumb Routers solution that was on twit.tv some time back.
It is by no means a perfect solution, and it does require some additional hardware (albeit the cheapest dumbest routers you can lay your hands on) but it was a solution implemented and it was quite fun and interesting learning.
i ended up buying another FingBox to ensure both my networks were covered.
2 -
One way or another, your network equipment (probably your router) needs to isolate your IoT devices from your real, personal devices.
If your wireless hardware supports it, you can create a "guest" network, and put your less trusted devices on it. If those devices don't need to talk directly to each other, or you, but need to be able to connect to a cloud-based service, this might work. But if devices need to communicate locally (on your home network), this won't work. (But it's still a great solution for your house guests.)
The "traditional" solution (that is, beloved by network engineers and incomprehensible by most others) is to create an isolated network, either physically (expensive, problematic) or virtually using VLANs (free if your network hardware supports it, expensive/impossible otherwise). Both require you to set up mechanisms to "route" network traffic between the networks. (If you want to be able to access your camera, Sonos, or whatever you've jailed over in the other network.) Those mechanisms are...complicated to understand.
The latest solutions are things like Eero's protection service, Eero Secure (available today), or Apple's new HomeKit for routers (available ???), https://www.engadget.com/2019/06/03/apple-homekit-secure-video-routers/. That's the best bet for "mere mortals".
Where Fing fits in all of this, I'm not sure. So far as I've been able to tell, Fing doesn't support VLANs. (It certainly stops seeing the devices I've moved to my IoT VLAN.) And since it's not "in the middle" of your network traffic, it's hard for it to participate in the isolation. I think the best it can do today is disable rogue (unidentified) devices from using your network.2
Categories
- 5.8K All Categories
- 2.8K Ask about Connected Technology
- How To...
- 1.1K Devices & Security
- 1.6K Network Troubleshooting & Connectivity
- 114 General Discussion, Weird & Wonderful
- 45 Network Infrastructure
- 5.4K Ask about Fing
- 545 Fing Account Change Request
- 1.1K Fing Desktop
- 1.4K Fing App
- 1.7K Fingbox
- 534 Announcements, Beta Testing & Release Notes
- 158 Community Updates
- 29 Getting started
- 13 Community User Guides