MSP 2.11.1  is now available to Early Access MSP users!

To join our Early Access Program:

• Go to your MSP Settings page (top right corner of your MSP Interface) > scroll down to MSP Update > select Early Access for the Release. Your MSP Instance will be automatically updated in the next 3- 4 weekdays.

Firewalla Managed Security Portal (MSP) is our web interface designed for security and infosec professionals to manage multiple Firewalla boxes easily. Learn more about MSP here, and sign up at firewalla.net/plans.

2.11.1 New Features

1. New MSP Login with Passkey Support
2. Switch Management Support
3. Improved Firewalla Box and AP7 Management Display
4. Enhancements
5. Known Issues

2.11.0 New Features

1. New Features - More Feature Parity with the Firewalla App
2. Enhancements
3. Bug Fixes

2.11.1 New Features

1. New MSP Login with Passkey Support

• For all MSP Users (Lite, Professional, Business)

Firewalla MSP now supports passkeys! 

Navigate to Account Settings (by clicking Account Settings in the top right corner), click Add Passkey. The next time you log in to MSP, you can use your passkey for easier sign-in and better security.

Account Settings (now moved to account.firewalla.net) lets you manage/create multiple passkeys, and also supports turning 2FA on/off and changing your Authenticator App configuration for your MSP account.

2. Switch Management Support

• For MSP Professional and Business Users

With the new Topology page on the MSP Interface, manage your Firewalla Switch just like you would on the app, including Switch port types and PoE management.

To manage your Switch, go to your Single Box view and click Topology under Networks.

3. Improved Firewalla Box and AP7 Management Display

• For MSP Professional and Business Users

Along with Firewalla Switch management, the Topology page is also improved to support your Firewalla Box and AP7 management.

• Firewalla AP7 management is now handled on the Topology page.
• The Firewalla Box detail page now displays port speeds and connected devices for each port more clearly.
• The Firewalla AP7 detail page has also been enhanced, with a better display of connected devices for each frequency band and an improved overall BSSID display.
• The Devices List can now show the uplink device and port used for each local device on your networks.

Enhancements

• (MSP Professional and Business) Added support for creating and managing AmneziaWG VPN Client from the MSP interface.
• (MSP Professional and Business) Optimized the display of tables and "Matched By" column in Flows.

Known Issues

• Issue: The box detail page may show an empty topology section if the box's WAN connection is VLAN-tagged. 
  How to Fix: This issue is fixed in 2.11.1 Early Access.

2.11.0 New Features

More Feature Parity with the Firewalla App

Previously, many of the Firewalla App features were only configurable from the mobile app. In this release, the Firewalla MSP web interface now supports more App features, including:

1. Routes
2. Smart Queue
3. Services
4. Data Usage
5. DDNS
6. Controls
7. Ad Block
8. Protect (Multi-Engine Active Protect, Device Active Protect)
9. Scan
10. VPN Server

Note:

• Requires MSP Professional or MSP Business. Sign up at https://firewalla.net. Try 3 months for the price of 1. Cancel anytime.
• These features are only available from the Single Box View. If you have multiple Firewalla Boxes, click All Boxes in the drop-down menu and select a Firewalla.

1. Routes

Create, manage, and delete Routes to easily send specific types of traffic to certain VPNs or WANs. Click Routes under Networks in the left navigational panel.

Learn more about Firewalla Policy & Content-Based Routing.

2. Smart Queue

Click Smart Queue in the left navigation panel to manage your Smart Queue settings:

• Select between Static or Adaptive mode.
• Choose FQ_Codel or CAKE for your Active Queue Management type.
• Create and manage Smart Queue rules to prioritize or rate limit specific traffic.

Learn more about Firewalla Feature: Smart Queue.

3. Services

Click Services to configure your DNS and NTP services via MSP and protect your privacy online:

• DNS over HTTPS
• Unbound
• Custom DNS Rules
• NTP Intercept

4. Data Usage

Navigate to Data Usage to easily monitor your Firewalla's data usage, manage your Monthly Data Plan, and view usage from the past 12 months.

By leveraging MSP's extended flow storage and exportability, we've also added a few more features:

• Click Export to download a CSV of your daily data usage from the past 12 months. 
• Click any daily data usage bar in the chart to view all the flows from that date. Note that how far back you can view flows depends on your Firewalla Box's seat type (30-day or 180-day Flows Seat).

Learn more about Bandwidth Usage Monitoring.

5. DDNS

Click on DDNS to manage your Dynamic DNS. DDNS can help you access devices or services on your network with a consistent hostname. This is particularly useful when hosting a server.

Learn more about Firewalla DDNS.

6. Controls

In App 1.69, we introduced Controls, which bundles existing Firewalla features into one screen, so you can enable them with a single tap instead of building rules manually. 

In MSP 2.11, we've brought the same features to the web interface so you can easily manage them in one place. On the left navigation panel, click Controls under Rules, and you'll be able to configure:

• Advanced Threat Filtering
• Region Blocking
• Bypass Prevention
• Content Filtering
• Safe Search

Learn more about Firewalla Feature: Controls Center.

7. Ad Block

Click Ad Block to easily enable/disable the feature, select modes, and apply it to specific devices on your network.

Learn more about Firewalla Ad Block.

8. Protect (Multi-Engine Active Protect, Device Active Protect)

Protect now supports the rest of the features from the Firewalla App:

Multi-Engine Active Protect

Manage your Multi-Engine Active Protect, including the Default Engine, Suricata (Gold Pro only), and MSP Engine, all from one Protect page.

Device Active Protect

Manage and view more details on Device Active Protect and your protected devices. 

• Click Protected Devices to view all your eligible devices, or click on Learning, Optimizing, Active, or Disabled to quickly filter them by DAP status.

• For eligible devices, a new "Device Active Protect" section is available on the device detail page. Click into any target to view more details about the recent flows.

Learn more about Firewalla Protect.

9. Scan

Click Scan under Security on the left navigation panel. To help you assess your network security and identify potential weaknesses, you can:

• Scan for External Open Ports
• Manage your System Vulnerability Scan, including the Scan Scope and Automatic Scan schedules
• Quickly view how many Port Forwardings are present, and quickly link to MSP's Network Manager
• Manage Firewalla's Device Port Scan (also known as Device Open Ports)

Learn more about Firewalla Feature: Scan.

10. VPN Server

We now support Firewalla VPN Server in the MSP interface. Click VPN Server under VPN on the side menu, and you'll see WireGuard, AmneziaWG, and OpenVPN.

• Manage each VPN server directly from MSP.
• Add and manage clients for WireGuard and AmneziaWG Servers.

Learn more about Firewalla VPN Server.

Enhancements

• Supported MSP API to mute alarms, archive alarms, and delete rules. 

Bug Fixes

• Fixed a bug where if the search domain of any device is set to empty, it would also set DHCP option 119 to 0. With the new MSP, setting the search domain to empty should now clear DHCP option 119.
• Fixed a bug where Alarm Webhooks may generate duplicate alarms for certain alarm types. 
• Fixed a bug where certain alarms are not sent via Alarm Webhooks when Alarm Optimizer is enabled.
• Fixed a bug where deleting an alarm in the Firewalla mobile app may not reflect as deleted on MSP.
• Fixed a bug where, on some Professional MSPs, target lists managed by "My Portal" are shown instead of those managed by MSP. 

• Other UI improvements and minor bug fixes.