MSP 2.6.0 is now available to all MSP users!
Firewalla Managed Security Portal (MSP) is our web interface designed for security and infosec professionals to manage multiple Firewalla boxes easily. Learn more about MSP here, and sign up at firewalla.net/plans.
New Features
- Export Data from Flows, Alarms, and Reports
- Target List: Manage App Access
- Block Reason in Flows
- Rules API: Pause/Resume a Rule
1. Export Data from Flows, Alarms, and Reports
Any Report or set of Flows and Alarms can be downloaded as a CSV file with one click.
All your exports will be archived on the Reports -> Exports tab. Before they expire (within 48 hours), you can download them as many times as you want. Note that only up to 20 exports can be generated in a 48-hour span; we may increase this limit in the future.
2. Target List: Manage App Access (Requires Box 1.979)
To help you manage your Target Lists more easily, we're introducing different levels of App Access for MSP-owned target lists in this release.
For Professional MSPs, all MSP-owned target lists can be used on any box. This means that you can now create and edit rules with MSP-owned target lists from both the MSP UI and the Firewalla app, just like you would box- or Firewalla-owned target lists.
For Business MSPs, app access is divided into three types:
- Restricted: Same as before; MSP-owned target lists can only be used/edited on the MSP UI.
- Read-Only: The Firewalla app can create/edit rules using MSP-owned target lists.
- Editable: In addition to creating/editing rules, you can edit the MSP-owned target list by adding domains or IPs to it. Learn more about Updating a Target List.
With the upcoming app 1.62 + box 1.979 release, you'll see your target lists by creating a new rule (Rules -> Add Rule) in the Firewalla app. For the rule target, tap Target List. You'll see all your target lists, including any Local (box-owned), MSP (MSP-owned, with Read-Only or Editable Access), and System (Firewalla-owned) lists.
3. Block Reason in Flows
When troubleshooting blocked flows, you may wonder why a flow was blocked in the first place. With MSP version 2.6.0, we've added a new column to the flows table called Blocked By. This column shows you the reason why a flow was blocked, whether by the Ingress Firewall, Ad Block, a specific block or time limit rule, or some other policy. You can easily see and filter flows by block reason.
4. Rules API: Pause/Resume a Rule
We've expanded MSP API by adding the ability to pause/resume existing rules. For example:
curl --request POST \
--url "https://${msp_domain}/v2/rules/${id}" \
--header "Authorization: Token ${your_personal_access_token}"
Rule ID can be found at the bottom of the rule's detail dialog. For more information, please consult our API Documentation.
Comments
1 comment
Thanks for introducing these changes, some of them long awaited for me!
Please sign in to leave a comment.