Device Group allows you to manage a set of devices together with the same rules and features.
When a device is added to a group, all of its existing rules will be removed, and the device will follow the rules defined for the group.
Known Issue: Only devices in the local network can be added to device group. Devices connected from VPN (e.g. OpenVPN, WireGuard) can not be added to device group.
How to create a device group?
You can create a device group from the Devices screen (tap on the Devices button on the main screen), as shown below:
Once a device group is created, it will be listed under Devices. You will be able to manage the device group similar to managing a device, including adding rules, viewing network history, etc.
A device can only belong to one device group.
How to manage a device group?
When you tap on a device group from the device list, you'll see the Device Group detail screen. This screen is similar to the device detail screen, with the following sections:
Devices shows the number of devices in the group. You can view/add/remove devices from the group.
Network Flows shows aggregated traffic statistics from all devices in this group, and detailed activity history in the last 24 hours.
Control Panel shows the shortcut buttons for turning features on/off, or enabling/disabling commonly used blocking rules with one tap.
Rules list all rules applied to this group. You can create/edit/remove the rules.
How to apply features to a device group?
You can apply features to devices groups the same way as to individual devices. Go to Settings > Features, select a feature, and slide the switch to turn on. Then under Apply To, select the device group.
Comments
11 comments
It seems that once you add a device to a group you can no longer set rules for just that device? Is that expected behavior?
Yes; when a device is in a group, it takes on the rules for the group.
sure, but it would be helpful to be able to put an additional layer of rules at the device level.
How about nested groups? That could also be helpful
I have a device group setup for all of my kids devices. However, sometimes I want to disable/enable access to things on a case by case basis to an individual device. For example, I may want to block internet access to one of the devices due to bad behavior or open up access to one device for YouTube to do school work.
I recall being able to do this before, but I think an update has change this behavior.
Please help!
@michael, the blocking of one device while in group feature is coming in app 1.48 (latest 1.49)
Is it possible to forward ports to all devices in a group, for example 2 Xboxes?
Port forward is always to one device only. I think there are some article's from Microsoft on how to deal with multiple xboxes with port forwarding
Thanks
If I have a rule that applies to "All Devices", does that mean that the rule is also applied to the device within a Device Group?
Is there a way to use PBR or other features to send DNS traffic for a device group to an on-device or segmented pi-hole “upstream” while leaving all other traffic to the default Firewalla DNS?
DNS traffic is proxied inside firewalla, so it is not possible to move it using PBR
Please sign in to leave a comment.