Firewalla & Ubiquiti Compatibility?

Follow

W PJ

• October 27, 2021 13:14

Sorry if this has been asked before..but tried searching on this subject but didn't find any posts specific to my questions...

I have a Ubiquiti Dream Machine (Router/firewall) along with Ubiquiti APs & Switches.

I use a Firewalla Red on a wireless vlan segment off the UDM to provide better traffic monitoring and restrictions for my family.   However, I've been disappointed with the overall functionality of the UDM and it's lack of logging visibility (firewall), poor traffic queuing & no web/app filtering options.   I'm considering replacing the UDM with a Firewalla Gold or Purple that way I can do vlan segmenting and have all the monitoring/app protection for all segments.  

My questions are: 

 - Can I still use the Ubiquiti AP and switches (vlan tagging 802.1q) with the Firewallas?

 - Does the Firewalla Gold/Purple provide any decent firewall logging interface/tools?  (For example,  If I have two vlans and need to troubleshoot why certain traffic is not passing from one to another and need to see what ports are being blocked?)

Does anyone else use a similar setup?

Cheers!

 

 

 

 

0

• 

  W PJ

  • October 27, 2021 13:33

  After reading some more posts in the Support/Community sections it sounds like basic firewall/router logs between segments (WAN<->LAN, LAN<->Wireless,  LAN1<->LAN2) does not really exist even in the Gold. Seems like some people have figured our work arounds to pipe log traffic to a SIEM or syslog.  

  Is this still the case or has there been new features showing logs in recent updates?

  0

  Comment actions Permalink
• 

  Firewalla

  • October 27, 2021 15:16

  1. Only the Gold and Purple supports VLAN; each of the ports on the Gold/Purple are trunk or tagged ports. 

  2. You can see the flows in the app or on the web interface. The system only logs LAN<->WAN traffic, VLAN to VLAN traffic, I think it is there, just not displayed. If you are just doing debugging, the best way is go into the Gold/Purple, and then do a tcpdump 

  0

  Comment actions Permalink
• 

  W PJ

  • October 28, 2021 14:57

  Firewalla,   If you have Vlan to Vlan traffic on the Gold/Purple are you able to setup firewall rules between those segments?  Block/Allow rules, TCP/UDP ports...etc.   I just assumed you could, but wanted to make sure this was the case.   Thanks,

  0

  Comment actions Permalink
• 

  Firewalla

  • October 28, 2021 14:59

  Yes, you should be able to control VLAN to VLAN traffic. 

  some examples here https://help.firewalla.com/hc/en-us/articles/4408644783123-Building-Network-Segments

   

  0

  Comment actions Permalink

Please sign in to leave a comment.