Firewalla under alarms

Follow

Helena Choo

• January 18, 2018 16:02

Hello!

I wanted to ask if it is safe to allow the firewalla device? I currently blocked it just in case as it said "This behavior was detected to be abnormal by the firewalla..."  but if it is legitimate I'll change the settings and allow it.

Thank you!

H

 

 

0

• 

  Firewalla

  • January 18, 2018 22:44
  • Edited

  Are you using VPN? if you do that much traffic will be coming from Firewalla.   If not, keep this blocked unless you see some problems.

  Now, to be clear, these are behavior alarms, that is, they may be legit;  the reason we were saying something on this is due to software.  Our software is still improving (heck, we are not even sure if there are anything out there that's 100% accurate).

  0

  Comment actions Permalink
• 

  Helena Choo

  • January 22, 2018 16:48

  Hello!!

  Yes I was using VPN that day. This morning I got a few more from firewalla. I also blocked these just in case. I was wondering, if they are all safe, would it be a good idea to separate them in a category where it wouldn't show as "abnormal upload"? 

  Thank you!!

  H

  

   

  0

  Comment actions Permalink
• 

  Firewalla

  • January 24, 2018 06:00

  Helena, better remove these blocks, they are servers needed to keep the box running.  The reason they are there is due to a bug in our system, they should be ignored.   

  Reason for the upload is described 

  https://help.firewalla.com/hc/en-us/community/posts/115007681113-What-is-being-uploaded-to-firewalla-com-

  We will clean this up next time.  

  0

  Comment actions Permalink
• 

  Helena Choo

  • January 24, 2018 15:24
  • Edited

  Thank you! I have unblocked them. Quick question though.. they show as Access Blocked under the Archived Alarms.. ?

  

  0

  Comment actions Permalink
• 

  Support Team

  • January 24, 2018 17:28

  Hi Helena,

   

  The archived alarms is designed to be read only, even if you unblocked it from "blocked sites", here it will still show "access blocked".

  There are some complicated reasons that it was designed like this. It may change in the future.

  Thanks for the feedback!

  Melvin

  0

  Comment actions Permalink
• 

  Topher

  • February 25, 2018 18:37

  What does the link "Provide Feedback" do? There are two options, one is the dismiss and the other to Provide Feedback and I'd appreciate a better understanding of what that option does.

  I occasionally have alarms showing a device uploaded 2 or 3 megs of data to www.googleapis.com

  How can users determine "what" data has been uploaded? If using Google Photos to auto upload photos to your account, this would seem to be expected but these Alarms do not appear to be photos so wondering how to investigate or determine "what data" has been sent.

  0

  Comment actions Permalink
• 

  Support Team

  • February 26, 2018 03:41

  Topher,

   

  Sorry for the confusion, it was a mistake. The "provide feedback" is still an internal testing feature yet, the button was open to users by mistake. It does nothing today by tapping on it.

   

  The purpose for this feature is to collect user feedback, e.g. alarm info was wrong, this can help improve the learning algorithm in the cloud.

   

  As of today, Firewalla does not apply deep packet inspection, so it can't tell what actual data was really uploaded. How to investigate what happened is indeed challenging, we are trying hard to see if we can make something useful but simple enough for consumers.

  0

  Comment actions Permalink

Please sign in to leave a comment.