Query Speed
The query engine has been overhauled to serve real-time data in 0.32s on average, down from 12s. No UI or workflow changes are required; this also reduces load on local OneFirewall instances.Custom Reserved IPs
Define your own list of reserved IPs or networks (CIDR format) at the organization level. Any IP you add is automatically rejected during submissions, in addition to global reserved-IP rules (e.g. private ranges). To configure: go to Organizations, click Edit on the target organization (Admin only), and update thereserved_ips array in the JSON configuration.
Shared Tags Across the Alliance
Attach optional tags when submitting IPs, files, domains, or URLs, and share them with the OneFirewall community — for example AlienVault threat lists, Cyber Threat Alliance feeds, or Tor exit-node indicators. Tagged submissions contribute to and draw from curated community tag data.Tag-Based Prevention Rules
The Live Score API (used by the WCF Agent) now supports prevention based on score and specific tags — for example, block any IP above a score threshold and matching a tag such asmalware or botnet.
To configure: go to Organizations, set the score threshold and/or desired tags, and save to activate.

