Smoothwall UTM/SWG

Any and all ideas and feedback for Smoothwall

You've used all your votes and won't be able to post a new idea, but you can still search and comment on existing ideas.

There are two ways to get more votes:

  • When an admin closes an idea you've voted on, you'll get your votes back from that idea.
  • You can remove your votes from an open idea you support.
  • To see ideas you have already voted on, select the "My feedback" filter and select "My open ideas".
(thinking…)

Enter your idea and we'll search to see if someone has already suggested it.

If a similar idea already exists, you can support and comment on it.

If it doesn't exist, you can post your idea so others can support it.

Enter your idea and we'll search to see if someone has already suggested it.

  • Hot ideas
  • Top ideas
  • New ideas
  • My feedback
  1. Filter IDS logs to show Priority 1

    Ability to filter IDS logs to show Priority 1.
    Also make the IDS log searchable.
    Both can be achieved by export, but it would be nice to be able to do it within the web interface.

    1 vote
    Vote
    Sign in
    Check!
    (thinking…)
    Reset
    or sign in with
    • facebook
    • google
      Password icon
      Signed in as (Sign out)
      You have left! (?) (thinking…)
      0 comments  ·  Firewall & Routing  ·  Flag idea as inappropriate…  ·  Admin →
    • SSL VPN Road Warrior - filter by geo location

      We get incessant SSL road warrior connection attempts from hostile IP addresses. I can limit by groups and can block IP's manually via firewall rule, but that's a rough way to cut down on this traffic. The VPN control panel is therefore drowning in "unfinished" road warrior connections. I'd love it if there was a geo location way to filter traffic in general, but more specifically for SSL VPN. Especially useful for an SMB like us who only have employees in the U.S. and can safely block SSL VPN attempts from all other countries

      1 vote
      Vote
      Sign in
      Check!
      (thinking…)
      Reset
      or sign in with
      • facebook
      • google
        Password icon
        Signed in as (Sign out)
        You have left! (?) (thinking…)
        0 comments  ·  Firewall & Routing  ·  Flag idea as inappropriate…  ·  Admin →
      • vpn ssl - control panel

        It would be good to know what time a connection was established

        1 vote
        Vote
        Sign in
        Check!
        (thinking…)
        Reset
        or sign in with
        • facebook
        • google
          Password icon
          Signed in as (Sign out)
          You have left! (?) (thinking…)
          0 comments  ·  Flag idea as inappropriate…  ·  Admin →
        • Subscription Expired

          After subscription expired, what will happen to its functionality? What features will be disabled and what will remains?

          3 votes
          Vote
          Sign in
          Check!
          (thinking…)
          Reset
          or sign in with
          • facebook
          • google
            Password icon
            Signed in as (Sign out)
            You have left! (?) (thinking…)
            0 comments  ·  Guardian Filtering  ·  Flag idea as inappropriate…  ·  Admin →
          • 1 vote
            Vote
            Sign in
            Check!
            (thinking…)
            Reset
            or sign in with
            • facebook
            • google
              Password icon
              Signed in as (Sign out)
              You have left! (?) (thinking…)
              0 comments  ·  Guardian Filtering  ·  Flag idea as inappropriate…  ·  Admin →
            • Auto Blocking IP's based on rules / policy / triggers.

              I spend my mornings checking who has tried to hack us - when I see IP's that have been trying for hours / days I add their IP to my block-list.
              This is now getting too time consuming to manage. Can we not have an auto block to any IP's that continually try to hack us. Maybe we can set some thresholds that when any IP triggers they get an auto block. But going forward I think this is a must.

              I am sure my lfd on my Linux web server auto blocks hack attempts. Would love my Smoothwall to…

              26 votes
              Vote
              Sign in
              Check!
              (thinking…)
              Reset
              or sign in with
              • facebook
              • google
                Password icon
                Signed in as (Sign out)
                You have left! (?) (thinking…)
                1 comment  ·  Firewall & Routing  ·  Flag idea as inappropriate…  ·  Admin →
              • We need LACP

                The LAN bond feature needs to support LACP, so that, if we are using more than 1 Gigabit WAN connection, we can use it! As it is now, we have 2 ISPs, with 1Gb each. However, because there is only 1 LAN connection, at 1Gbps, the maximum we can send/receive from the WAN is 1 gigabit per second. The LAN connection becomes saturated, even though the ISP connections are only at 50%.

                6 votes
                Vote
                Sign in
                Check!
                (thinking…)
                Reset
                or sign in with
                • facebook
                • google
                  Password icon
                  Signed in as (Sign out)
                  You have left! (?) (thinking…)
                  0 comments  ·  Central Management, Clustering & HA  ·  Flag idea as inappropriate…  ·  Admin →
                • OPen up a new window when a link is clicked.

                  I enter an IP and when I click on one of the URLs, it opens in the same page and I need to arrow back to get to Smoothwall. From there my results of the IP I entered are gone along with the IP I entered.

                  14 votes
                  Vote
                  Sign in
                  Check!
                  (thinking…)
                  Reset
                  or sign in with
                  • facebook
                  • google
                    Password icon
                    Signed in as (Sign out)
                    You have left! (?) (thinking…)
                    1 comment  ·  Guardian Filtering  ·  Flag idea as inappropriate…  ·  Admin →
                  • Ability to add notes to exception IP addresses

                    Quite often when looking through our Smoothwall boxes we come across IP addresses in the exceptions list that we don't recognise. This may be due to settings being implemented a long time ago, or by another member of the team. Our main concern is that if there is an address that we can't identify we need to make sure that it hasn't been implemented as a quick fix solution to bypassing the firewall, therefore exposing a user to potentially inappropriate material.

                    For example it may be an IP address of the schools boiler monitoring system phoning home, which is fine.…

                    96 votes
                    Vote
                    Sign in
                    Check!
                    (thinking…)
                    Reset
                    or sign in with
                    • facebook
                    • google
                      Password icon
                      Signed in as (Sign out)
                      You have left! (?) (thinking…)
                      7 comments  ·  User Experience  ·  Flag idea as inappropriate…  ·  Admin →
                    • Filtering by MAC Address

                      FIltering by Mac address would be a great idea. It seems that locations can only be IP's. I would like to be able to create a group of Mac Addresses that can be filtered together without having to assign static or reserved IP addresses. This would also allow these machines to have the same filtering rules no matter which network they may be on such as a guest network or the main network.
                      Thanks.

                      6 votes
                      Vote
                      Sign in
                      Check!
                      (thinking…)
                      Reset
                      or sign in with
                      • facebook
                      • google
                        Password icon
                        Signed in as (Sign out)
                        You have left! (?) (thinking…)
                        0 comments  ·  Guardian Filtering  ·  Flag idea as inappropriate…  ·  Admin →
                      • Tick -box for 'Select Safeguarding ruleset' when editing Notifications

                        A Tick-box for 'Select Safeguarding ruleset' when editing Notifications to replace the current drop-down list which only lets you select one option. This would mean we don;t have to create a separate notification for each type of safeguarding alert.

                        4 votes
                        Vote
                        Sign in
                        Check!
                        (thinking…)
                        Reset
                        or sign in with
                        • facebook
                        • google
                          Password icon
                          Signed in as (Sign out)
                          You have left! (?) (thinking…)
                          0 comments  ·  Reporting  ·  Flag idea as inappropriate…  ·  Admin →
                        • Wildcard Usage

                          Please add the ability to use wildcards at least in blocked content. For example: *.fmovies.* If we could just put that in, we wouldn't have to spend more time blocking 5t3.fmovies.com or fmovies.com and .net..whatever. You get the point I am sure. This would ease administration for smaller districts that use your product that don't have someone that JUST handles filtering and firewall operations.

                          7 votes
                          Vote
                          Sign in
                          Check!
                          (thinking…)
                          Reset
                          or sign in with
                          • facebook
                          • google
                            Password icon
                            Signed in as (Sign out)
                            You have left! (?) (thinking…)
                            1 comment  ·  Guardian Filtering  ·  Flag idea as inappropriate…  ·  Admin →
                          • Acceptable Usage Policy Prompt User First Access

                            It would be useful if you could store and electronic version of organisations internet usage policy within Smoothwall and on first access to the internet from a user they are prompted to read and accept the version of the usage policy that is current in the system before being granted internet access.

                            Smoothwall will then log that the policy has been read/ackknowledge by the user for reporting purposes.

                            If the Administrator then updates the usage policy the next time a user attempts to access the internet they are presented with the revised policy to review and accept.

                            46 votes
                            Vote
                            Sign in
                            Check!
                            (thinking…)
                            Reset
                            or sign in with
                            • facebook
                            • google
                              Password icon
                              Signed in as (Sign out)
                              You have left! (?) (thinking…)
                              0 comments  ·  Flag idea as inappropriate…  ·  Admin →
                            • manual exclusions for safeguarding report

                              It would be REALLY useful to be able to go to the Reports>Safeguarding>Exclusions page and manually add domain level exclusions there, rather than have to click through the safeguarding report

                              7 votes
                              Vote
                              Sign in
                              Check!
                              (thinking…)
                              Reset
                              or sign in with
                              • facebook
                              • google
                                Password icon
                                Signed in as (Sign out)
                                You have left! (?) (thinking…)
                                2 comments  ·  Flag idea as inappropriate…  ·  Admin →
                              • Option to schedule updates and releases on custom times.

                                Option to schedule updates and releases on custom times. And maybe to plan on specific day.
                                Our customer wants update the machine when they have lunchtime.(12:30h)

                                8 votes
                                Vote
                                Sign in
                                Check!
                                (thinking…)
                                Reset
                                or sign in with
                                • facebook
                                • google
                                  Password icon
                                  Signed in as (Sign out)
                                  You have left! (?) (thinking…)
                                  0 comments  ·  User Experience  ·  Flag idea as inappropriate…  ·  Admin →
                                • Display a Filter List Description in the Portal

                                  When users are using the portal they currently cannot see the descriptive comments in the "Manage Filter Lists" that set in the admin console under Guardian > Policy Objects > Categories in the Comment field. It would be beneficial that portal users who can edit the Lists know what each of he lists do in order to aid them using the right filter list. Displaying this comment under the title would achieve this

                                  3 votes
                                  Vote
                                  Sign in
                                  Check!
                                  (thinking…)
                                  Reset
                                  or sign in with
                                  • facebook
                                  • google
                                    Password icon
                                    Signed in as (Sign out)
                                    You have left! (?) (thinking…)
                                    0 comments  ·  User Experience  ·  Flag idea as inappropriate…  ·  Admin →
                                  • User Breakdown Report

                                    This report can help admins see which individual websites, users spend the most time on during the day or a period of time.

                                    A list of 10,20,50,100..etc users can be run to show (per individual user) the breakdown of the Time Spent Browsing.

                                    Example - User John Smith

                                    Site - Time Spent
                                    BBC - 3hrs 3mins
                                    Twitter - 2hrs 35mins
                                    YouTube - 39mins
                                    etc...

                                    This will allow admins to find out what sites certain users enjoy frequently browsing and to prove if someone is potentially not doing the correct thing at the correct time (Games at school) (Social Media at…

                                    6 votes
                                    Vote
                                    Sign in
                                    Check!
                                    (thinking…)
                                    Reset
                                    or sign in with
                                    • facebook
                                    • google
                                      Password icon
                                      Signed in as (Sign out)
                                      You have left! (?) (thinking…)
                                      0 comments  ·  Reporting  ·  Flag idea as inappropriate…  ·  Admin →
                                    • Guest Portal

                                      Add a guest portal that allows us to authenticate external users by registering for an account, that then can be reported on by name rather than just MAC address. Need for liability coverage and identification.

                                      14 votes
                                      Vote
                                      Sign in
                                      Check!
                                      (thinking…)
                                      Reset
                                      or sign in with
                                      • facebook
                                      • google
                                        Password icon
                                        Signed in as (Sign out)
                                        You have left! (?) (thinking…)
                                        0 comments  ·  Authentication  ·  Flag idea as inappropriate…  ·  Admin →
                                      • Traffic Graph scaling

                                        Traffic graphs have been changed recently to adjust from 100Mbps to 1Gbps when 100Mbps is exceeded. Can this be changed to a user defined value. Eg we have a 200Mbps link and if we could have the graph only go this high it would show us more accurately when our connection is being saturated. Its currently hard to tell when its scaling to 1Gbps. Thanks/

                                        9 votes
                                        Vote
                                        Sign in
                                        Check!
                                        (thinking…)
                                        Reset
                                        or sign in with
                                        • facebook
                                        • google
                                          Password icon
                                          Signed in as (Sign out)
                                          You have left! (?) (thinking…)
                                          0 comments  ·  Flag idea as inappropriate…  ·  Admin →
                                        • bandwidth module improvements "Policing"

                                          The current Bandwidth Module provides "shaping" which is only good for outbound connections. Its a store and forward from my understanding.

                                          Policing on the other hand can be applied to both inbound and outbound connections. It relies on IP (i believe) to slow down the connection by dropping packets. (Would only be good for TCP) It would be great if we could limit inbound and outbound based on External and Internal ip addresses. Currently inbound connections can flood the whole RED adapter.

                                          Example an internal address requests data from say Microsoft Updates. The Max connection rate will be used to…

                                          6 votes
                                          Vote
                                          Sign in
                                          Check!
                                          (thinking…)
                                          Reset
                                          or sign in with
                                          • facebook
                                          • google
                                            Password icon
                                            Signed in as (Sign out)
                                            You have left! (?) (thinking…)
                                            1 comment  ·  Firewall & Routing  ·  Flag idea as inappropriate…  ·  Admin →
                                          • Don't see your idea?

                                          Feedback and Knowledge Base