Guest Networks vs. Monitoring

Comments

6 comments

  • Avatar
    Saurabh Shah

    Confirmed that setting the WAP to Monitoring Off had no effect

    0
    Comment actions Permalink
  • Avatar
    Stew Stryker

    Saurabh, I was interested in your technique of isolating your IoT devices on the guest network. Did you get that working while still monitoring their activity with Firewalla? 

    I'm interested in trying the same, but need the connectivity to be solid.

    Thanks in advance,

    Stew

    0
    Comment actions Permalink
  • Avatar
    Saurabh Shah

    That setup was pre-Firewalla.  That was my first basic attempt at sandboxing the IOT devices.  It did not work for all of them, especially anything that seems to use HomeKit.  Wink and its devices, Nest, and anything that did not require NAT Loopback worked fine.

    Anything on the guest network now is not monitored by Firewalla.  A copy of the 2nd guest network replicated on my Wireless Access Point (not the main Wireless Router) can't connect to the internet at all.

    I don't know what the best approach is.  Waiting for the Firewalla team to respond, but I can imagine bugs and new builds are a higher priority.  I'm ok switching them to in the main network and monitoring them in the short term.

    Thanks,

    Saurabh

    0
    Comment actions Permalink
  • Avatar
    Stew Stryker

    Thanks for the reply.

    I would hope they'd suggest that the Firewalla should be sufficient for protecting your IoT devices, since that's the whole point, right? ;-)

    All the best,

    Stew

    0
    Comment actions Permalink
  • Avatar
    Saurabh Shah

    Firewalla guys.  Any thoughts on the orginal question?

    0
    Comment actions Permalink
  • Avatar
    Firewalla

    We were hoping others can jump in :).  Here is my personal thoughts on this

    • Isolation at the network layer is always good.  This compartmentalizes the problem.   
    • Isolation also creates a problem of managing the devices.  It may be hard to talk to guest network devices or the reverse.

    So if you have time to play with these things, then yes, guest isolation is a good idea.  

     

     

    0
    Comment actions Permalink

Please sign in to leave a comment.

Powered by Zendesk