Hello everyone,

I recently upgraded from a TP-Link Deco 4G+ (no HomeShield) to a Deco X50 5G (for 5G SA reception), and I've been experiencing a frustrating issue affecting several smart devices ever since — despite everything working perfectly on the previous Deco and on a standard 5G mobile hotspot with the exact same SSID and password.

My setup:

• Deco X50 5G in "Router mode" (not AP), acting as the Mesh primary node
• Secondary nodes: Deco X20 units connected via 100 Mbps wired LAN backhaul
• Wi-Fi broadcast: 2.4 GHz, WPA2/WPA3 Personal — all devices connect without issue
• 5G SA coverage confirmed, ~50 Mbps down / 5–10 Mbps up

Affected devices:

1. Zendure residential battery — Connects to Wi-Fi ✅, syncs data to its cloud app ✅, but OTA firmware update fails: the device detects that an update is available but cannot download it from the internet through the Deco.

2. Shelly Pro 3EM smart meter — Same behaviour as above: cloud data sync works ✅, but firmware download is blocked.

3. Somfy Link Advanced alarm system — Cannot complete initial cloud registration at all. The device is unable to subscribe to Somfy's cloud infrastructure when going through the Deco.

Key diagnostic finding:
When I replicate my network (same SSID + password) using a 5G mobile hotspot on my smartphone (Deco switched off), all three devices work flawlessly: OTA updates download and apply, and the Somfy alarm registers and subscribes to the cloud without any issue. Returning to the Deco breaks the same functions again.

What I've already tried:
- Tested the IoT (Id0) Network feature → same failures
- Read that the Guest Network might bypass some filtering, but haven't tested it as it doesn't match my use case anyway

I suspect HomeShield (now baked into the X50 firmware) is silently blocking specific outbound traffic — likely certain ports, protocols, or destination domains — used by these devices for firmware downloads and cloud registration, even though basic cloud communication (telemetry/data sync) is unaffected. This behaviour was absent on the Deco 4G+ and on an Orange Flybox 5G (Nokia) running the same network configuration, confirming the issue is specific to the Deco X50 5G.
Is there a way to permanently and reliably disable or whitelist this filtering for specific devices or traffic types on the Deco X50 5G? Ideally without having to fully disable HomeShield globally.

Any help would be greatly appreciated. Thank you!