I personally use a VLAN where I segment all IoT and Smarthome devices and just drop all outgoing internet traffic at the switch level on those VLANs.

However, given the latest Plex exploit incident, I have been thinking how to detect and prevent outgoing anomalous connections…