Block "Traffic from Internet" required?

Follow

TeWe

• November 02, 2024 23:16

So, ingress rule of course enabled, but do I really need additional "Traffic from Internet" to be blocked in manually created VLANs and in my network 'Wireguard'?
IoT VLAN is a standard VLAN created without template, Guest VLAN has been created with the 'Guest' template which then created this "Traffic from Internet" blocking rule.

Is it safe to delete those 2 rules in Guest and IoT or should they stay and I should also create one for Wireguard network?

0

• 

  Firewalla

  • November 03, 2024 17:02

  If you have an Ingress Firewall (this is the block traffic from the Internet rule) running over your WAN, then you don't need to add them separately. 

   

  0

  Comment actions Permalink
• 

  TeWe

  • November 03, 2024 17:08

  Thanks for confirming, I thought so 👍

  For me the most confusing part was, that when creating a new VLAN using the Guest template, this rule will automatically be added although Ingress Firewall already protecting everything.

  But hey - sometimes less is more.

  0

  Comment actions Permalink
• 

  Firewalla

  • November 04, 2024 16:39

  The addition is to ensure, even if customer disables Ingress firewall, the guest network is still protected. (and yes, some customer will disable ingress firewall ... for no clear reasoning) 

  0

  Comment actions Permalink
• 

  TeWe

  • November 04, 2024 16:44

  Ah okay, can do, the idea is not too bad.

  Thanks for clarifying.

  0

  Comment actions Permalink

Please sign in to leave a comment.