Wiki of WFilter NG Firewall - New pages [en]

Event

2026-05-18T07:20:06Z

WFilter: Created page with "{{DISPLAYTITLE:Events}} "Events List" is used to record various events that occur during system operation. There are three types of event information: "Information", "Alert" ..."

{{DISPLAYTITLE:Events}}

"Events List" is used to record various events that occur during system operation. There are three types of event information: "Information", "Alert" and "Error":

* Information: Log-type event information, such as operation logs, restarts, upgrades, etc.
* Alert: Warning events that require attention.
* Error: Critical events that require immediate action.

= Settings =

* Events to be recorded
* Admin Email(s): forward events to admin email boxes. SMTP settings shall be enabled in "Config->System->Email".
* Events to be forwarded: forward events to a syslog server or webhook service.

[[File: wfilter_event1.png|650px]]

[[File: wfilter_event2.png|450px]]

[[File: wfilter_event3.png|450px]]

SD-WAN

2025-07-06T07:19:03Z

WFilter: /* Cross-Platform clients */

== SD-WAN ==

SD-WAN is an integration of the ZeroTier networking. With SD-WAN, you are able to:
* Network virtualization: setup SD-WAN subnets and join multiple devices/networks together.
* End-to-End encryption
* Set up a VPN without needing a static public IP address.

== Server Settings ==

Server settings of WFilter SD-WAN can be accessed in [http://cloud.wfilterngf.com/management WFilter Cloud Service].

[[File:sdwan001.png|800px]]

=== Networks ===

Click "New network" to create a new sdwan subnet.

[[File:sdwan_network01.png|450px]]

* Net ID: SD-WAN network id
* Net Name: network description
* Start/End IP: DHCP IP address range

[[File:sdwan_network02.png|450px]]

To join multiple networks together, you need to setup routing policies. As shown below, network "192.168.1.0/24" can be reached via "10.200.188.1", while network "192.168.2.0/24" can be reached via "10.200.188.2". So these two networks are reachable from each side.

[[File:sdwan_network03.png|450px]]

== Client Settings ==

In WFilter NGF, you can join SD-WAN networks in the "VPN"->"SD-WAN" module.
* SD-WAN secret: SD-WAN client id
* Zone: zone firewall ACL rules will be applied. Please check [[firewallrule|Firewall Rules]]

[[File:sdwan_client01.png|800px]]

[[File:sdwan_client02.png|800px]]

[[File:sdwan_client03.png|800px]]

Client is denied by default, you also need to authorize clients in the server side.

[[File:sdwan_client04.png|450px]]

== Cross-Platform clients ==

WFilter's SD-WAN networks are compatible with ZeroTier clients, and you may download clients for other operating systems here: [https://www.zerotier.com/download/ zerotier download]

= Links =
* [http://blog.wfilterngf.com/?p=660 How to setup site-to-site VPN with WFilter’s SD-WAN service?]

[[Category:VPN]]

WSGCloud

2025-07-04T08:07:58Z

WFilter: /* Related Links */

{{DISPLAYTITLE:WFilter cloud service}}

= Overview =

The WFilter cloud service offers a centralized service for managing multiple wfilter devices. The following functions can be achieved:
* View device address, system version, IP address, and alert information
* Synchronize configurations
* Access the management interface via Internet

[[File:cloud_dashboard1.png|800px]]

The cloud service has following modules: Devices(management of wfilter devices), Configurations(create and synchronize configurations), and Operators(manage operators of the cloud service).

'''Please note: relaying of wfilter web UI is via our website wfilterngf.com, so the speed is not as fast as direct access.'''

= User Registration =

Click "Sign up" to create a new user. The username must be an email address, which can also be used to reset the password.

[[File:cloud_register.png|450px]]

[[File:cloud_register2.png|450px]]

In "Operators", multiple operators can be added. Operators can manage the devices and configurations under this account.

[[File:cloud_user1.png|800px]]

= Device management =
== WFilter side ==
In WFilter, the SDWAN module shall be enabled and join the cloud service network.(network ID is displayed in the upper right corner of the cloud service webpage).

[[File:cloud_clients3.png|800px]]

== Join WFilter device to the cloud service ==

In the "Devices" of the cloud service, click "New device" and enter the device's SDWAN ID, username, and password. The cloud service will retrieve information such as the status and configuration of the terminal device through WFilter API. So correct username and password shall be provided. If "Set as Template" is selected, you can also create configurations from the template in "Configurations".

[[File:cloud_clients2.png|600px]]

Click the query icon to open the web UI of wfilter device. Please note: Only one web UI can be opened at a time.

[[File:cloud_clients1.png|800px]]

= Configurations =

In "Configurations", click "New configure template" to create a configuration from a template device. As shown in the figure below:

[[File:cloud_settings1.png|800px]]

Click the "Deploy" icon to synchronize the configuration to other devices. As shown in the figure below:

[[File:cloud_settings3.png|800px]]

[[File:cloud_settings2.png|800px]]

'''Please note: synchronizing the network or firewall settings of a device may cause it to lose network connectivity. Use it with caution. You're recommended to test it locally before synchronizing to other terminals.'''

= Restricting login IPs =

If you have restricted the login IP addresses in Config - System - Operators, you need to add the cloud service's IP address (10.192.0.1) to the allowed IP list.

= Related Links =

* [http://cloud.wfilterngf.com/management WFilter Cloud Service]
* [http://cloud.imfirewall.com/management WSG Cloud Service(Chinese version)]
* [http://blog.wfilterngf.com/?p=658 Remote management via the WFilter cloud service.]

[[Category:Solutions]]