Advanced IoT Protection

How is Advanced IoT Protection different from Online Protection?

Advanced IoT Protection (AIP) is a security advancement found in Guard on the HomePass app. This provides protection from new, unknown attacks that are currently not part of any known threat intelligence database. It can detect unusual patterns in your IoT device's activity that indicates the device may be infected. 

Advanced IoT Protection is not enabled by default, but can be enabled via the Guard tab from within the main menu. 

I see Advanced IoT Protection blocked an event. Now what do I do?

If there is a suspicious activity blocked event, you probably received a push notification warning you that a smart home device went to a website which is considered unusual compared to its normal behavior. There is no required action on your end other than enjoying the peace of mind that AccessSmart Wi-Fi+ is protecting you and your family!


What if Advanced IoT Protection blocks a site that is actually safe?

When an anomaly is detected, the device will automatically be placed into quarantine to protect the integrity of your network and the devices connected to it. Quarantining the device effectively places "Internet Only" permission on the device, allowing basic functionality while preventing access to your other home devices. 

Advanced IoT Protection (AIP) uses machine learning on device network metadata to establish known behaviors. However, sometimes safe sites can be flagged as a false positive. If a new behavior comes across Plume's large training samples or if device behaviors are updated by their manufacturer, the device may be incorrectly flagged. Learning happens continually to establish new normal behaviors, however can cause some alerts in the interim.  If you trust the website the device is accessing, you can whitelist it for the device and for all devices in the home. 
You should only remove a device from quarantine if you trust the website it was trying to access. On a quarantined device, there is a recommendation which will open a web search for the device's manufacturer website, so you can do more research or find an updated firmware before removing the device from quarantine.
1.    Open the device list and navigate to the Internet Only devices. 
2.    Find the affected device. The affected device will be labelled: Device is quarantined.
3.    Tap on the quarantined device for more options. 

4.    You can choose Unquarantine for 1 hour or Unquarantine permanently.      

I don't see any blocked events in my network. How can I know Advanced IoT Protection is doing its job?

Not to worry! If the feature is enabled, all of your devices are behaving normally! Advance IoT Protection will continue to work to stop any future threats to your network and notify you immediately.