Firewall based on network location

How can I assign different firewall profiles based on the network I am in (home, office or public). This was not optimal in the old protection but the new one does not even include an option to do this?

Comments

  • PetriKuikka
    PetriKuikka W/ Member Posts: 236 Threat Terminator

    Hi,

     

    in the Computer Protection profiles under Firewall, you can enable this feature in "Select F-Secure firewall profile" dropdown by selecting "Automatic selection".

     

    Petri

  • NicknameThatIsN
    NicknameThatIsN W/ Alumni Posts: 12 Security Scout

    Follow-up:

     

    I understand that I can create an empty profile by "Choose a custom profile to create all the rules without any predefined rules." but how can I create let's say 5 new profiles BASED on the normal workstation profile?

     

     

  • NicknameThatIsN
    NicknameThatIsN W/ Alumni Posts: 12 Security Scout

    Also, how can I manually choose these profiles in the client? Or even see which profile is active?

  • fedool
    fedool W/ Staff, W/ Article Coordinator Posts: 162 W/ Staff

    wrote:

    Follow-up:

     

    I understand that I can create an empty profile by "Choose a custom profile to create all the rules without any predefined rules." but how can I create let's say 5 new profiles BASED on the normal workstation profile?

     

     


    You cannot copy firewall profiles currently (you would need to recreate rules if you want a copy of normal profile) and cannot have more than 2 custom profiles.

    Do you need more? We can add more if it's required.

     

     

  • fedool
    fedool W/ Staff, W/ Article Coordinator Posts: 162 W/ Staff

    wrote:

    Also, how can I manually choose these profiles in the client? Or even see which profile is active?


    You cannot choose profiles in client. It's controlled only by admin on server side.

  • NicknameThatIsN
    NicknameThatIsN W/ Alumni Posts: 12 Security Scout

    I can live with two custom profiles, sad that they cannot be renamed though.

     

    What actually would be very needed is more rule options to choose the profile. I would like to see DNS suffix, WINS-server and SSID. DHCP and gateway are very likely the same (and thus the other one redundant in most cases) and many times rules based on these are too simple and might very well trigger where not needed. 

     

    Also some means to trigger a profile based on whether or not a VPN is in use would be more than useable.

  • fedool
    fedool W/ Staff, W/ Article Coordinator Posts: 162 W/ Staff

    Thank you for a good idea.

    I've created a feature request, we will see when we have time to implement it.

This discussion has been closed.