Dear @trimmkm,

I am trying to limit outbound traffic for most IoT devices, but have a small group that needs internet access.  I want to set up ACL rules that are limited to the servers/ports required.  Can I monitor or log outbound traffic on the WAN port to see what servers/ports these specific devices are contacting? 

Perhaps you could capture the traffic on the WAN port to have a try, need to configure port mirror on the router, install Wireshark on a PC to start capturing when the specific devices are working, then you may see what you want. Sounds complicated. The easiest way always is to contact the support of the specific devices to know what servers or ports they are using. Good luck.