I think static IPs and blocking egress traffic only keeps well-behaved devices from doing any harm. It does not protect you from compromised, malicous (IoT) de

I think static IPs and blocking egress traffic only keeps well-behaved devices from doing any harm. It does not protect you from compromised, malicous (IoT) devices. Think about a network printer doing ARP spoofing and MiTM-attacking your VoIP phone or IP cam. E.g. googeling immediately turns up vulnerabilities like this [1] one. A properly configured VLAN setup can help to prevent or limit this threat. [1] https://www.scmagazine.com/home/network-security/hp-officejet-printers-bug-puts-entire-network-at-risk-coupled-with-eternalblue/ https://www.scmagazine.com/home/network-security/hp-officeje...