MSP 2.11 is now available to all MSP users!

Firewalla Managed Security Portal (MSP) is our web interface designed for security and infosec professionals to manage multiple Firewalla boxes easily. Learn more about MSP here, and sign up at firewalla.net/plans.

1. New Features
   • More Feature Parity with the Firewalla App
2. Enhancements
3. Bug Fixes

New Features

More Feature Parity with the Firewalla App

Previously, many of the Firewalla App features were only configurable from the mobile app. In this release, the Firewalla MSP web interface now supports more App features, including:

1. Routes
2. Smart Queue
3. Services
4. Data Usage
5. DDNS
6. Controls
7. Ad Block
8. Protect (Multi-Engine Active Protect, Device Active Protect)
9. Scan
10. VPN Server

Note:

• Requires MSP Professional or MSP Business. Sign up at https://firewalla.net. Try 3 months for the price of 1. Cancel anytime.
• These features are only available from the Single Box View. If you have multiple Firewalla Boxes, click All Boxes in the drop-down menu and select a Firewalla.

1. Routes

Create, manage, and delete Routes to easily send specific types of traffic to certain VPNs or WANs. Click Routes under Networks in the left navigational panel.

Learn more about Firewalla Policy & Content-Based Routing.

2. Smart Queue

Click Smart Queue in the left navigation panel to manage your Smart Queue settings:

• Select between Static or Adaptive mode.
• Choose FQ_Codel or CAKE for your Active Queue Management type.
• Create and manage Smart Queue rules to prioritize or rate limit specific traffic.

Learn more about Firewalla Feature: Smart Queue.

3. Services

Click Services to configure your DNS and NTP services via MSP and protect your privacy online:

• DNS over HTTPS
• Unbound
• Custom DNS Rules
• NTP Intercept

4. Data Usage

Navigate to Data Usage to easily monitor your Firewalla's data usage, manage your Monthly Data Plan, and view usage from the past 12 months.

By leveraging MSP's extended flow storage and exportability, we've also added a few more features:

• Click Export to download a CSV of your daily data usage from the past 12 months. 
• Click any daily data usage bar in the chart to view all the flows from that date. Note that how far back you can view flows depends on your Firewalla Box's seat type (30-day or 180-day Flows Seat).

Learn more about Bandwidth Usage Monitoring.

5. DDNS

Click on DDNS to manage your Dynamic DNS. DDNS can help you access devices or services on your network with a consistent hostname. This is particularly useful when hosting a server.

Learn more about Firewalla DDNS.

6. Controls

In App 1.69, we introduced Controls, which bundles existing Firewalla features into one screen, so you can enable them with a single tap instead of building rules manually. 

In MSP 2.11, we've brought the same features to the web interface so you can easily manage them in one place. On the left navigation panel, click Controls under Rules, and you'll be able to configure:

• Advanced Threat Filtering
• Region Blocking
• Bypass Prevention
• Content Filtering
• Safe Search

Learn more about Firewalla Feature: Controls Center.

7. Ad Block

Click Ad Block to easily enable/disable the feature, select modes, and apply it to specific devices on your network.

Learn more about Firewalla Ad Block.

8. Protect (Multi-Engine Active Protect, Device Active Protect)

Protect now supports the rest of the features from the Firewalla App:

Multi-Engine Active Protect

Manage your Multi-Engine Active Protect, including the Default Engine, Suricata (Gold Pro only), and MSP Engine, all from one Protect page.

Device Active Protect

Manage and view more details on Device Active Protect and your protected devices. 

• Click Protected Devices to view all your eligible devices, or click on Learning, Optimizing, Active, or Disabled to quickly filter them by DAP status.

• For eligible devices, a new "Device Active Protect" section is available on the device detail page. Click into any target to view more details about the recent flows.

Learn more about Firewalla Protect.

9. Scan

Click Scan under Security on the left navigation panel. To help you assess your network security and identify potential weaknesses, you can:

• Scan for External Open Ports
• Manage your System Vulnerability Scan, including the Scan Scope and Automatic Scan schedules
• Quickly view how many Port Forwardings are present, and quickly link to MSP's Network Manager
• Manage Firewalla's Device Port Scan (also known as Device Open Ports)

Learn more about Firewalla Feature: Scan.

10. VPN Server

We now support Firewalla VPN Server in the MSP interface. Click VPN Server under VPN on the side menu, and you'll see WireGuard, AmneziaWG, and OpenVPN.

• Manage each VPN server directly from MSP.
• Add and manage clients for WireGuard and AmneziaWG Servers.

Learn more about Firewalla VPN Server.

Enhancements

• Supported MSP API to mute alarms, archive alarms, and delete rules. 

Bug Fixes

• Fixed a bug where if the search domain of any device is set to empty, it would also set DHCP option 119 to 0. With the new MSP, setting the search domain to empty should now clear DHCP option 119.
• Fixed a bug where Alarm Webhooks may generate duplicate alarms for certain alarm types. 
• Fixed a bug where certain alarms are not sent via Alarm Webhooks when Alarm Optimizer is enabled.
• Fixed a bug where deleting an alarm in the Firewalla mobile app may not reflect as deleted on MSP.
• Fixed a bug where, on some Professional MSPs, target lists managed by "My Portal" are shown instead of those managed by MSP. 

• Other UI improvements and minor bug fixes.