It'd be nice for you to create a video that illustrates a "starter" position of how the firewall needs to be setup if the defaults are not good enough for security. Thanks for your content sir.
Awesome video sir. Only time we block out bound traffic is on our Point of Sale side but we are starting to get out of being that tight because it can become a huge hassle.
What I'd like to see is a segment on LAN IN vs LAN OUT firewall rules explaining why you would or wouldn't set a FW rule on the LAN OUT as opposed to setting it on the LAN IN in the firewall - All my rules are set on the LAN IN as that was the way I learned and i don't know the purpose or use case where you'd set a FW rule on the LAN OUT - Thanks
It would be great if you can make a video about fw rules, for example: You have a UDM Pro, NAS, Plex app... so to allow Plex running on a NAS and get access from the outside.
Willie - I've had a UDM Pro for a couple of years. I cannot for the life of me figure out how to disable port 80 from outside. THe admin interface of the UDM is wide open from the internet. On most firewalls I've ever worked on, you can enable/disable WAN access to the admin interface. It's driving me nuts. I can hit my UDM from work, from a phone, wherever. Obvi, I'm testing from outside. The cable modem is in WAN1. I do have several port forwards enabled that go to internal resources on 80, but the external side of all those is 8080,8081, etc. It seems crazy that a security oriented device like the UDM would disable this by default. When I got the UDM, I disabled the remote access completely. What am I missing here? Thanks, and great channel!
@@WillieHowe Got 2 GWN7062 from our training class. Was not shure if it would be a big enough router for the network. Was also thinking about Synology RT6600ax but might be overkill. If you could make a video on how you would go about choosing the right router for different application it would be great.
Very helpful, thanks a lot! I was told the exact opposite: oh no you can’t start UniFi, you need to set your rules before, otherwise your a** will be wide open in the internet. Good to see that someone could proof them wrong!
InterVLAN traffic for Guest networks is blocked by default when they're used (default restrictions block RFC1918 addresses and are controlled by Authorization Access in Hotspot Manager). ... and the restrictions are enforced by both the firewall and AP when wireless is used (which is where people struggle... they change the firewall rule and wonder why the traffic isn't passing).
@@WillieHowe understood, and I don't disagree with anything you said, but when people enable a default guest network, this is their problematic reality.
![BLACK BAG - Official Trailer [HD] - Only in Theaters March 14](http://i.ytimg.com/vi/Du0Xp8WX_7I/mqdefault.jpg)
![Seungmin "그렇게, 천천히, 우리(As we are)" | [Stray Kids : SKZ-PLAYER]](http://i.ytimg.com/vi/kAzmhLHePqU/mqdefault.jpg)
Thanks Willi ! Very helpful - yes like to see more on creating rules and maybe some good to block things!😮
It'd be nice for you to create a video that illustrates a "starter" position of how the firewall needs to be setup if the defaults are not good enough for security. Thanks for your content sir.
Agreed 👍🏽 he’s a genius and I’m definitely here to learn
I must say just watched '2023 Firewall Features Compared' from lawrence systems and it raised exactly that question you now answer in this video, THY
My comparison is coming soon.
Good video. The built in app blocking traffic control is pretty slick and they added a bunch of new ones with the 3.x updates.
Awesome video sir.
Only time we block out bound traffic is on our Point of Sale side but we are starting to get out of being that tight because it can become a huge hassle.
Thanks Willie for a great explanation, I would like to see more videos on the new UniFi OS and firewalls. Keep up the good work!
Basics to remember, thanks. This is for TCP. For UDP, is the internet incoming traffic blocs unless it is a response from an internal request ?
It's all traffic.
Excellent video and topic Willie. Thanks you 😊
What I'd like to see is a segment on LAN IN vs LAN OUT firewall rules explaining why you would or wouldn't set a FW rule on the LAN OUT as opposed to setting it on the LAN IN in the firewall - All my rules are set on the LAN IN as that was the way I learned and i don't know the purpose or use case where you'd set a FW rule on the LAN OUT - Thanks
It would be great if you can make a video about fw rules, for example: You have a UDM Pro, NAS, Plex app... so to allow Plex running on a NAS and get access from the outside.
Any rules that would help access to the cloudkey for CCTV? great vid
You mentioned you are not using IPv6. Is there anything special you have to do to prevent IPv6 traffic from making it on or out of your network?
If you don't want/need IPv6, on a lot of the firewalls mentioned, you pretty much just uncheck the box that routes/permits IPv6.
Willie - I've had a UDM Pro for a couple of years. I cannot for the life of me figure out how to disable port 80 from outside. THe admin interface of the UDM is wide open from the internet. On most firewalls I've ever worked on, you can enable/disable WAN access to the admin interface. It's driving me nuts. I can hit my UDM from work, from a phone, wherever. Obvi, I'm testing from outside. The cable modem is in WAN1. I do have several port forwards enabled that go to internal resources on 80, but the external side of all those is 8080,8081, etc. It seems crazy that a security oriented device like the UDM would disable this by default. When I got the UDM, I disabled the remote access completely. What am I missing here? Thanks, and great channel!
Create a WAN_LOCAL rule that blocks 80 and 443
@@WillieHowe Thanks - I have an "Internet Local" rule to try and block it, I assume that's what WAN_LOCAL is called now? No joy on that, either.
Does unifi offer a way to do firewall management by cli
No
I liked your way of explanation
Thanks Willie for the video. Any thoughs on the best routeur to setup a Voip, cameras, and computer network?
How big is the network?
@@WillieHowe 20 Voip grandstream, 2 ucm6302 for high avaibility, 4 cameras, about 20 computers.
Also 3 GWN7803P.
@@55555Luc333 I'm probably sticking a Grandstream router in there.
@@WillieHowe Got 2 GWN7062 from our training class. Was not shure if it would be a big enough router for the network. Was also thinking about Synology RT6600ax but might be overkill. If you could make a video on how you would go about choosing the right router for different application it would be great.
Looks good to me !
Very helpful, thanks a lot! I was told the exact opposite: oh no you can’t start UniFi, you need to set your rules before, otherwise your a** will be wide open in the internet. Good to see that someone could proof them wrong!
can only hear by default mentioned 2million times - 6 min just to be told if u want to block out bond traffic you must creat rule - okay cool thanks
InterVLAN traffic for Guest networks is blocked by default when they're used (default restrictions block RFC1918 addresses and are controlled by Authorization Access in Hotspot Manager).
... and the restrictions are enforced by both the firewall and AP when wireless is used (which is where people struggle... they change the firewall rule and wonder why the traffic isn't passing).
We didn't talk about that -- we talked about oobe
@@WillieHowe understood, and I don't disagree with anything you said, but when people enable a default guest network, this is their problematic reality.
@@stevenmishosSending you a virtual beer for this comment!
Absolutly non sensical
first lol