Comment Re:Reccomended (Score 1) 24
The basics are pretty easy to guide someone through, but the maintaining and dealing with tuning what traffic can go to trusted networks gets pretty complicated (especially with IPv6, at least for me). I have a few lazy cop-outs (HomeAssistant server has two interfaces (IoT and LAN) rather than being in its own VLAN with traffic rules to address specific ports and applications. (At one point I had a server VLAN that it sat in, but it has different needs than Influx or the PiHole or the NAS.)
Proper security requires vigilance and that is much harder to train.