VqLAN and Device Isolation enabled but allowing flows

Follow

steve mcgee

• January 08, 2026 17:28

I have a few network segments but using the device isolation and VqLAN settings, my Roku device and a Roku TV keep talking to each other when no flows should be allowed.

I'm using the original Firewalla Gold with a ceiling AP7 and desktop AP7. Is this not realistic? Do i need to put every device in its own segment for this to work? I like to have my TVs grouped together due to data/time limits around the house.

0

• 

  Firewalla CM

  • January 08, 2026 17:54

  Hi Steve, just to confirm:

  1. Do you have any Allowed Devices or Allow Rules on the group?
  2. Are your Roku device and Roku TV both connected to Firewalla Wi-Fi? (not wired via Ethernet)
  3. Are both devices on the same network? (LAN or VLAN)

   

   

  0

  Comment actions Permalink
• 

  steve mcgee

  • January 08, 2026 18:37

  thank you CM.

  1. No

  2. Yes

  3. They are on one VLAN i created for TV.

  3 may be the problem and if so, it's my own ignorance. I felt that using the VqLAN and Device Isolation toggled, they wouldnt communicate regardless. 

   

  appreciate your time.

  0

  Comment actions Permalink
• 

  Firewalla CM

  • January 08, 2026 18:52
  • Edited

  Hi Steve,

  VqLAN and Device Isolation should still work if the devices are on the same VLAN. See the full article for more details: VqLAN Firewalla Microsegmentation

  VqLAN and Device Isolation will still allow Internet access, so if you're looking to block all flows, you may need a separate Firewalla Rule for that. 

  You could try this test to validate if VqLAN and Device Isolation are working: How to validate Firewalla features

  And if it still doesn't work, feel free to reach out to us at help@firewalla.com, and our engineers can take a closer look.

  0

  Comment actions Permalink

Please sign in to leave a comment.