Firewall Allow by IP Address and Port Between VLAN

Follow

John Nguyen

• October 31, 2020 19:56

Firewalla Gold Configuration.

Are we able to Setup "Allow" firewall rules from a network to a specific host to a specific port?

For example, I have a WiFi controller on VLAN1 with IP address 192.168.100.100.  I have two different guest WiFi, one on VLAN2 and one on VLAN3.  In order for the guests to access the internet they will need to agree to a terms and condition, which when they connect to the wifi they are directed to the WiFi controller over port 8080 or 8443.

I want to be able set a rule to Allow traffic from network VLAN2 and VLAN3 to IP 192.1680.100.100 over port 8080 and 8443.  Traffic to all other ports will be blocked.

 

Thanks, 

 

John

1

• 

  Firewalla

  • November 02, 2020 01:07

  The host+port function in 1.43 (for both iOS and Android apps)

  0

  Comment actions Permalink
• 

  John Nguyen

  • November 02, 2020 03:39

  When will 1.43 be released for the iOS?

  0

  Comment actions Permalink
• 

  Firewalla

  • November 02, 2020 04:40
  • Edited

  1.42 is very close to be released, then it will be 1.43, make sure you join the beta program if you want to see it early  https://help.firewalla.com/hc/en-us/community/posts/360001149673-Beta-Onboarding

  0

  Comment actions Permalink
• 

  RDubbs

  • November 20, 2020 23:29

  Looking forward to this 1.43 release.  Any ETA now that 1.42 is released?

  As of now I can't control access to my internal web services via Cloudflare proxy because of this limitation, which was surprising to see from a team of Cisco ASA engineers (no offense meant at all).  It seems you can only pick one of the options for the inbound list of "allow" rules, not multiple ones as any $100+ firewall does.  I do understand the Firewalla gold is still meant for home use, but now days proper security policies/rules are even more important to allow specific traffic as needed.

  Thanks again for the hard work on Firewalla.  Very impressed with the size/performance of the entire product line!

  0

  Comment actions Permalink
• 

  RDubbs

  • November 29, 2020 18:27

  It doesn't appear Policy-based SNAT or policy-based routing made it into 1.43 release as expected.

  0

  Comment actions Permalink
• 

  Firewalla

  • November 29, 2020 19:56

  Yea, we had to take them out last min.  The team pushed hard on these, but they are just not ready.  1.972 release should have both of those for sure. 

  0

  Comment actions Permalink
• 

  RDubbs

  • December 09, 2020 16:48

  Thanks for the update.  Certainly would rather wait to get it right.

  0

  Comment actions Permalink
• 

  RDubbs

  • January 14, 2021 20:13

  Any ETA on this?  This is the last functional need of Firewalla to have my services back up and running after replacing my previous firewall.  Thanks in advance.

  0

  Comment actions Permalink
• 

  Firewalla

  • January 14, 2021 21:29

  PBR is in app 1.44, if you need access to it, send help@firewalla.com an email with your itunes/google play email.

  SNAT customization is in 1.972, also in early access mode. 

  https://help.firewalla.com/hc/en-us/articles/1500000336261-Firewalla-App-Release-1-44 

  https://help.firewalla.com/hc/en-us/articles/1500000891801

  0

  Comment actions Permalink
• 

  Michael K

  • January 20, 2021 14:48

  I have a blue+ and just learning the ropes. i'd like to allow access to a particular port from a group of ip addresses. i downloaded the beta app on my phone but i'm not seeing a host+port function. any pointers would be appreciated  

  0

  Comment actions Permalink
• 

  Firewalla

  • January 20, 2021 21:04

  see this for example https://help.firewalla.com/hc/en-us/articles/1500000336261-Firewalla-App-Release-1-44

  0

  Comment actions Permalink
• 

  Aaron Carnes

  • February 08, 2021 23:38

  Is the "rules between vlans using both ip and port" available in 1.43 or is that what you were referring to when you said policy base routing (PBR)?  I have 1.43 and I am not seeing it as an option unless you specify the ip along with the port in the ip address option.

  0

  Comment actions Permalink
• 

  Firewalla

  • February 09, 2021 03:35

  You can sign up for beta and try the [ip/domain]:port option 

  0

  Comment actions Permalink

Please sign in to leave a comment.