Hi michaelsaw my biggest wish is to use custom IP/ranges in LAN Firewall rules.
If not possible, then the ability to configure a group of Hosts would be a workaround for this limitation - we usually register Hosts for the devices controlled by LAN Firewall.
The ability to configure a group of custom IP addresses/ranges (that you described) would be a great enhancement to both options.
I haven't discussed it with anyone from Cato yet. I was wondering if other users face the same problem and how they deal with it, before raising RFE.
This may need clarification from Cato representatives, but from recent meetings we've had I believe there is a plan to move the LAN FW into the general WAN FW rulebase. Not sure if that will solve your issue and allow the use of more advanced source criteria in a FW rule.
