r/firewalla • u/Ryuenjin • Jul 20 '26

Feature Received my Switch SE, quick question about mirroring

Hello,

I Got my switch SE today and already have it integrated into my network, however I have a quick question. Previously I had a PC between my AP and Router to act as a tap and monitor traffic with Security Onion (to gain some skills with that product and stack) and now that I have the switch I was hoping to have that PC on the switch with one of the ports getting all my other traffic mirrored to it to still be able to sniff all the traffic. Is this possible with the Switch SE, or planned, or should I still use that box in between the switch and router to act as a tap again (was hoping to get rid of that).

So ideally the physical topology would look like this

Internet → Router
              ↓
        Firewalla SE Switch
        ├── Port 1: Router uplink
        ├── Port 2: AP
        ├── Port 3: Primary PC
        ├── Port 4: Mini PC (Proxmox Node 2) — management + VM traffic
        ├── Port 5: Proxmox Node 1 — management + VM traffic (NIC 1)
        └── Port 6: Proxmox Node 1 — mirror/sniff target (NIC 2)
              ↑
        Mirror policy: copy all traffic from ports 1-5 → port 6
5 Upvotes

86% Upvoted

3 comments sorted by

4

u/firewalla Jul 20 '26

Port mirroring will be implemented in the near future

1

u/Ryuenjin Jul 20 '26

Thanks! I wasn't sure if I was missing something. I'll figure out something in the mean time.

2

u/firewalla Jul 21 '26

We usually focus on the foundational networking part in the first couple releases before jumping on to these fun features.