Add new/ungrouped devices to group when joining WiFi network

Follow

Mike

• January 23, 2025 18:24

There is an option under a WiFi network/SSID to assign a group. This seems to override if the device is already in a group. Would it be possible to add an option to assign a device to a group when joining a WiFi network only if they aren't already grouped? This would allow for moving devices to a specific user group, but new devices could be added to a "quarantine" group. If there is a better way to do this, I would appreciate the details. Thanks!

0

• 

  Mike

  • January 23, 2025 18:47
  • Edited

  I guess what I'm suggesting is New Device Quarantine, but for a specific WiFi network.

  Does New Device Quarantine work with the auto assigned groups from a WiFi network? For example, if New Device Quarantine is enabled and I connect a new device to an SSID that assigns a group, will the device go into the assigned group or Quarantine?

  0

  Comment actions Permalink
• 

  Firewalla

  • January 23, 2025 19:00

  The reason for the logic of "SSID -> Group" overriding default grouping is security-related. Meaning if someone fakes an existing MAC (say your kid) and then log in to his own SSID, he/she will get your access levels. 

  New device quarantine will only deal with new devices that's not automatically grouped. So if you have SSID point to a group, and a new device login to that SSID, it will be assigned to that group. (think of this like a guest network)

  2

  Comment actions Permalink
• 

  Mike

  • January 23, 2025 19:46

  Thanks for the clarification.

  Would it be possible to have an option to assign an SSID group only on new devices? It would be effectively "new device quarantine" for a specific WiFi network.

  I don't want wired devices to be quarantined, only devices connecting to my firewalla WiFi.

  Thanks!

  1

  Comment actions Permalink

Please sign in to leave a comment.