@Clive_A So to check if the Deny works first, I set up the following rule. Using that other post as a guide. First I'm testing the ability to block. With that rule at the top of the list, it should...

@Clive_A Sorry, not getting you. Would you be kind enough to show an example in terms of the rule that you're suggesting and how it would look on the Omada Gateway ACL page?

I tried it with the Block ALL first and then the allow second. Didn't make any difference, I can still ping the unit from any public IP address. Suggested next steps?? Is there anyway to configure...

I currently have the following: Network Security -> Attack Defense -> Packet Anomaly Defense Block PING from WAN is unchecked (as my understanding is that it would take precedence over the Gateway...

I shall check on that and advise.

I'm curious. When it comes to validating compliance with PoE standards such as 802.3bt, do TP Link self certify this or is it validated by a suitable external body? I'm seeing a pattern of behaviour...