port mirror - which config?

Follow

adj

• July 16, 2025 16:16

I have my setup where a router can port-mirror all ingress and egress for its connection to the rest of my network (a switch).   
To be clear, only one port from my router is connected to a switch, which has all of my network on it.
I want to mirror the port on my router that connects to that switch, and send the mirror to my firewalla. Wouldn't that be workable? and if so, which configuration/mode do I use for that?

0

• 

  Firewalla

  • July 16, 2025 16:22

  You mean creating a SPAN port? If you are already doing that on your switch, it is probably much more efficient to do that there.

   

  0

  Comment actions Permalink
• 

  adj

  • July 16, 2025 16:24

  I am indifferent if my router or my switch does the SPAN port. But for the mirroring port, I assume that connects to my firewalla (purple).. but then which mode and which port?

  0

  Comment actions Permalink
• 

  Nick Betts

  • December 15, 2025 20:37

  Were you ever able to get this working? I have a Purple SE and I was thinking about setting up a SPAN'd port on my switch to see if I could get Firewalla to monitor that. I don't need blocking, just the monitoring. I haven't messed with it yet but I would be interested in what mode the device would be in for this to work.

  0

  Comment actions Permalink
• 

  Firewalla

  • December 16, 2025 19:02

  There is "analysis" only mode on the firewalla. Meaning, you can't just pump traffic to it without having it doing any type of routing. 

  0

  Comment actions Permalink

Please sign in to leave a comment.