5. Firewall¶
Pro's firewall supports custom rules scoped per zone, in addition to the sane default rules created automatically at install (each zone can reach the internet via WAN1; zones cannot reach each other unless a rule explicitly allows it).
The WireGuard VPN tab under Firewall is read-only and auto-managed — VPN traffic rules are maintained automatically as you add or remove peers under VPN, rather than requiring manual firewall rule authoring.
Firewall Rules
Bellow example of WIFI-GUEST firewall rule:
WIFI-GUEST Firewall Rules