Firewalla rules for local traffic

Follow

CJ

• March 23, 2025 00:26

Is there a way to only allow traffic to be sourced from a certain device and not both directions? Meaning can we setup the ability for a computer to start to communicate with a printer while not allowing the printer to start the communication? I realize you can make a printer group, turn on VqLAN, turn on Device Isolation, and then add a device under Allowed Devices. But I believe this will allow the source to be either the computer or printer and over ANY/ANY protocol/port. Would really like to pick protocol and port. The goal would be to limit east/west traffic even more. Is this already possible?

0

• 

  Firewalla

  • March 23, 2025 04:27

  VqLAN operates at layer 2, it doesn't have layer 3/4 session concepts of a direction. If you really want directional allows, you can use VLAN's;

  0

  Comment actions Permalink
• 

  CJ

  • March 23, 2025 12:33

  Thanks for the reply. I can do that with VLAN’s and two AP7’s?

  0

  Comment actions Permalink

Please sign in to leave a comment.