Allow Apple Bonjour to be detected from other zone

Hi TonV,

Apple Bonjour is an Application level software that will communicate on the Transport and Network layer to the other networks and devices. If Bonjour works on a particular service you can simply define those services in the firewall rule or configure a rule to allow ANY communication between the two Networks. 

Thanks

Thank you for the reply, but this does n’t seem to work like this.

I already have 2 firewall rules including any service.

Fw rule 1 LAN_TO_WIFI source:LAN, any host dest:Wifi zone, any host  service: any

Fw rule 2 WIFI_TO_LAN source:wifi zone, any host dest: LAN, any host service: any

Hi Tony,

change the wifi to be bridged to AP LAN and you should not need a firewall rule.

Ian

Hi Tony,

change the wifi to be bridged to AP LAN and you should not need a firewall rule.

Ian

Hi Ian,

I am aware of this, but the whole office is already configured on the seperate zone with its own subnet, so this would be a hassle to change.

Hi,

it would only be an issue if the wifi users are n fixed IP addresses, otherwise a change one night and all machines should pickup the new iP address, unless you are using clientless users rather than AD based authentication?

Ian

Many devices like printers and some computers are configured with static ip's, If this would be easy to change back I would have done this already, but this isn't the case for this particular customer.