Firewalla MSP: Mobile App Access Control

With Firewalla Managed Security Portal (MSP), admins can manage the mobile app access of all devices paired to their box, assign appropriate access levels, and ensure each device only sees what they need in the Firewalla mobile app.

• This feature is only available with Firewalla MSP. Get a free 3-month trial of MSP here.
• The paired device must be using App 1.67 or later to support different mobile app access. 

How to Manage Mobile Access

1. Navigate to the All Boxes view of your MSP Portal.
2. Select Inventory on the left navigation panel.
3. Click on the Mobile Access tab.

You'll see a list of all devices and email addresses paired with each of your Firewalla boxes. Each entry displays the following details:

• Box: The Firewalla box the device is paired with
• Email Address: The registered email used in the Firewalla mobile app
• Device Name: The name assigned to the mobile device 
• App ID: The unique ID of the Firewalla mobile app instance
• Access Level: Current access permission
• Last Active: The last time the device accessed the box

Click on any entry. You'll be able to change their Mobile Access Level. (Note: The paired device must be using App 1.67 or later to support different mobile app access.)

Mobile Access Levels

There are three available Access Levels:

1. Full Access: Full administrative control with access to all features and settings.
2. Limited: A simplified mobile app view for managing non-technical settings such as devices, users, alarms, and rules. Sensitive or advanced network configurations are hidden. 
   • Limited only hides advanced settings. It does not fully block technical changes. Users who know where to look may still modify network rules or settings.
   • Even if you set a paired device to Limited, we recommend assigning this level only to trusted users.
3. No Access: The device cannot access the box or view any features or settings. If someone has paired your box without your permission, you can turn their access off by choosing "No Access".

By default, all newly paired devices have Full Access. 

• If the Firewalla mobile app data is reset and paired with the box again, the device will return to Full Access.
• If a box is removed from MSP, all paired devices will also revert to Full Access, even if the box is later re-added to the same MSP instance.
• If the paired device is not using App version 1.67 or later, the device will continue to use Full Access, even if configured to something else in MSP.