I just ran into this after upgrading my xfinity connection. I have the default plex port forwarded but have to allow ever pubic IP and these only work for 30 days before they have to be allowed again. There is a option in the xfi app under my services to turn the advanced security off. Working well so far with it disabled.
