I looked into it and Phoenix Contact has a PlugTrab. They are not cheap. I'm hoping for a better solution, product, or technical reason that can get me out of this.
Every IO port already has effective protection. Your concern is a rare transient - maybe once every seven years - that can overwhelm that already robust protection.
Anything adjacent to the IO port must already be inside that IO port. The tranient that can cause damage must exist when transients enter. First and foremost is single point earth ground. Second, every wire inside every incoming cable must make a low impedance (ie less than 10 foot) connection to single point ground. Any wire that does not is then the incoming path that subverts all protection.
TV cable must already have that best protection. A hardwire must connect a coax cable low impedance (ie less than 10 feet) to the one and only earth ground. Then a surge incoming on cable need not be inside hunting for earth destructively via all electornics.
Telephone cannot be connected directly to earth. So the telco installed a 'whole house' protector for free. And again, it is hardwired low impedance (no sharp bends or splices) to what defines all protection - earth ground.
AC electric is not required by code to have effective protection. You must connect every AC wire (again low impedance) to earth. AC wire cannot connect directly. So a 'whole house' protector (from manufacturers known for integrity - Isobar is not) does that earth ground connection.
Lightning can be 20,000 amps. So a minimal 'whole house' protector is 50,000 amps. Because effective protectors do not fail and remain functional for decades. And because 20,000 amps must connect to an earth ground so that it does not overwhelm superior protection already inside all electronics.
This is what they mean by all IO ports must be surge protected. A surge must not enter a structure. Otherwise that surge will hunt for connections to earth destructively via electronics. That Isobar may even make surge damage easier. Obviously. Its best connection to earth can be destructively via nearby electronics.
Any incoming wire (security alarm, radio antenna, etc) must connect to that single point earth ground - directly or via protector. Then tens or 100 times less money is spent on what actually provides protection. Provided by over 100 years of science and experience.
Manufacturers of integrity include Intermatic, Square D, Ditek, Siemens, Polyphaser (an industry benchmark), Syscom, Leviton, ABB, Delta, Erico, General Electric, and Cutler-Hammer (Eaton). However THE most critical item in every protection 'system' is THE item that harmlessly absorbs hundreds of thousands of joules.
Protection is always defined by an answer to this question. Where do hundreds of thousands of joules harmlessly dissipate. A protector is only as effective as its earth ground. A protector without that low impedance (ie hardwire not inside metallic conduit) connection to earth does not claim to protect from these potentially destructive surges.