I have a mix of IoT devices at home. Alexas, WiFi PLugs, Smartthings (with related Z-Wave/Zigbee devices). I've been on the hunt for a solution to monitor what these devices send out and secure data sent if needed. Here's what I've tried...
CujoAI - the device did not tell me what it was doing. Gave me vague alerts that a laptop was trying to access a known malware site and it was blocked. Nothing about IoT, though it's sold to protect IoT devices. The unit used cloud-based analytics seemingly creating additional holes/attack surface when it came to my home network.
BitDefender BOX2 - Was better than CujoAI, but not by much. It completely disabled my Orbi WiFi mesh features and did not provide a lot of value or information on traffic coming and going in the network.
Dumped both for pfSense, thinking I could customize and install packages as needed. My current setup is pfSense Firewall, connected to the Orbi Mesh. I have Squid and lightsquid installed. Over the last few days I don't see much going on. Usual traffic but nothing that I can see too bad.
I don't want to go back to black box solutions to secure my network and IoT, as I have before, but don't want to completely roll my own either.
Is there a combination of pfsense packages (squid, pfBlockerNG, SquidGuard, Snort and maybe Wireshark) that will give me monitoring and control I need? Better yet is there a guide out there for setting something like this up? I also have MacMini on the network, with VMware so I can spin up servers or other devices as needed.
If pfSense and its packages is not the right solution, I don't mind buying or building something else. I want to make sure I'm on the right track.