Not every device can run its own firewall. IoT devices, NVR systems, etc should be cordoned off from the internet but typically cannot run their own firewall.
Sure, but they sit on an iot vlan where your firewall prevents access except specificly allowed services
Sure, but they sit on an iot vlan where your firewall prevents access except specificly allowed services