Results 1 to 4 of 4
  1. #1
    Untangler
    Join Date
    Jan 2021
    Posts
    44

    Default Has anyone created a WAN Policy for the WAN interface?

    and if so, what do they use it for? I'm guessing for hosting resources in your network but I'm not exactly sure.

  2. #2
    Master Untangler
    Join Date
    Jul 2010
    Location
    Nanaimo B.C
    Posts
    866

    Default

    A wan policy ? Nope, but I create IOT policys that say this network can go OUT and then block subnets around it. The policy also forces the traffic through the policy so it can push content or application monitoring etc etc.
    MP715 likes this.
    Started Youtube Channel, Have a question about Untangle Ask me : jason @ jasonslab.ca
    https://www.youtube.com/c/jasonslabvideos << Please like and subscribe, helps me out !!

  3. #3
    Untangler
    Join Date
    Jan 2021
    Posts
    44

    Default

    Quote Originally Posted by dashpuppy View Post
    A wan policy ? Nope, but I create IOT policys that say this network can go OUT and then block subnets around it. The policy also forces the traffic through the policy so it can push content or application monitoring etc etc.
    Ok, that makes me feel better. I'm doing the same thing. I have several VLANs setup on one UniFi access point that are isolated. I use Filter Policies as I don't have a managed switch so Untangle is doing everything. I have a few policies setup but they all use the default policy as it's parent. My default policy has very basic rules, blocking ads is about it. My kids policy is more restrictive. Is that a good practice?

    I installed Lubuntu on a really old Dell XPS M1330 laptop acting as my "Server". It's running my Unifi Controller and it's just humming away. I'm actually pretty proud of it. It struggles running java but so far so good.

    2022-07-28 23_05_16-Untangle - untangle715 — Mozilla Firefox.png 2022-07-28 23_10_13-Untangle - untangle715 — Mozilla Firefox.png

    2022-07-28 23_08_32-Untangle - untangle715 — Mozilla Firefox.png 2022-07-28 23_12_01-Untangle - untangle715 — Mozilla Firefox.png
    Last edited by MP715; 07-28-2022 at 09:25 PM.

  4. #4
    That Which Lurks Below
    Join Date
    Jul 2018
    Posts
    66

    Default

    Quote Originally Posted by MP715 View Post
    I have a few policies setup but they all use the default policy as it's parent. My default policy has very basic rules, blocking ads is about it. My kids policy is more restrictive. Is that a good practice?
    That's the general intent of Policy Manager! The alternative approach is to make your Default Policy more draconian, so that any traffic you haven't specifically moved into another policy is highly restricted or blocked altogether. This allows you to vet traffic in the network: everything is blocked until you explicitly allow it (by moving it into a less-restrained policy).
    dashpuppy and MP715 like this.
    Grζme Ravenscroft • Technical Marketing Engineer
    ('gram', like the unit of measurement)
    he/him
    Please don't reboot your NGFW.
    How can we make Arista ETM products better?

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  

SEO by vBSEO 3.6.0 PL2