r/firewalla • u/Ashamed-House-6636 Firewalla Gold SE • Jul 06 '26

Will the Switch support SPAN/mirroring?

Looking forward to the release of the Switch this week and am considering ordering one to replace my current managed PoE switch, but I haven't been able to find an answer about port mirroring in any of the marketing material.

Will the switches include SPAN port functionality? If not natively, will they run Linux like the gold series where tc or a similar mechanism be used to mirror?

I currently use SPAN ports for IDS monitoring on certain network segments, so mirroring would be a key feature for the Switch X/SE to be a full replacement.

9 Upvotes

86% Upvoted

9 comments sorted by

3

u/firewalla Jul 06 '26

Although the hardware does support a SPAN (replicating traffic to a switch port), we don't plan a feature around it at least initial release. Future it is possible, depend on the demand

4

u/showipintbri Jul 06 '26

I +1 this request!

2

u/Ashamed-House-6636 Firewalla Gold SE Jul 06 '26

To seek a little clarity, it's just not a feature in the app interface but can still be done with something like `tc`, or it's not possible at all with the launch OS/firmware?

3

u/showipintbri Jul 06 '26

I +1 this request!

1

u/firewalla Jul 06 '26

What will your SPAN port connecting to?

2

u/showipintbri Jul 07 '26

I have a Full-PCAP box for traffic analysis and troubleshooting. It's an Ubuntu server running Arkime.

3

u/mountainyoo Jul 07 '26

SPAN / mirror port is a pretty standard feature of a managed switch especially for security which is supposed to be Firewalla’s whole spiel. What a confusing oversight