Firewalla MSP: Mobile App Access Control

With Firewalla Managed Security Portal (MSP), admins can manage the mobile app access of all devices paired to their box, assign appropriate access levels, and ensure each device only sees what they need in the Firewalla mobile app.

This feature is only available with Firewalla MSP Professional or Business. Try 3 months for the price of 1. Cancel anytime.

The paired device must be using App 1.67 or later to support different mobile app access. 

• How to Manage Mobile Access
• Mobile Access Levels
• Grant Permanent Mobile Access (Business Only)

How to Manage Mobile Access

1. Navigate to the All Boxes view of your MSP Portal.
2. Select Inventory on the left navigation panel.
3. Click on the Mobile Access tab.

You'll see a list of all devices and email addresses paired with each of your Firewalla boxes. Each entry displays the following details:

• Box: The Firewalla box the device is paired with
• Email Address: The registered email used in the Firewalla mobile app
• Device Name: The name assigned to the mobile device 
• App ID: The unique ID of the Firewalla mobile app instance
• Access Level: Current access permission
• Last Active: The last time the device accessed the box

Click on any entry. You'll be able to change their Mobile Access Level. (Note: The paired device must be using App 1.67 or later to support different mobile app access.)

Mobile Access Levels

There are three available Access Levels:

1. Full Access: Full administrative control with access to all features and settings.
2. Limited: A simplified mobile app view for managing non-technical settings such as devices, users, alarms, and rules. Sensitive or advanced network configurations are hidden. 
   • Limited only hides advanced settings. It does not fully block technical changes. Users who know where to look may still modify network rules or settings.
   • Even if you set a paired device to Limited, we recommend assigning this level only to trusted users.
3. No Access: The device cannot access the box or view any features or settings. If someone has paired your box without your permission, you can turn their access off by choosing "No Access".

By default, all newly paired devices have Full Access. 

• If the Firewalla mobile app data is reset and paired with the box again, the device will return to Full Access.
• If a box is removed from MSP, all paired devices will also revert to Full Access, even if the box is later re-added to the same MSP instance.
• If the paired device is not using App version 1.67 or later, the device will continue to use Full Access, even if configured to something else in MSP.

Grant Permanent Mobile Access (Business Only)

Unlike Temporary Access, which previously allowed users to manage a box for 24 hours via the mobile app, Mobile Access can give permanent access.

This is great for scenarios where you may have lost previous box pairings on your phone, or if you'd like to remotely give users access to a Limited view of a box.

Only MSP Owners on the Business Plan can grant Mobile Access. To grant access,

1. Click Inventory on the left navigation bar.
2. Click the Mobile Access tab, then click Add Mobile Access.
   
    
3. Select the Firewalla to grant access to, and choose Full Access or Limited for the Access Level.
   

Then, open the Firewalla App on the mobile device, tap [--] in the top left corner, and scan the QR Code generated by MSP. 

(Firewalla App must be using App 1.68 to pair with Firewalla using the MSP-generated QR Code.)