​
1. Blazing-Fast Query Speed

  • What’s new: Overhauled the OneFirewall query engine to serve real-time data in 0.32 s on average (down from 12 s).
  • Customer impact: No UI or workflow changes—just dramatically reduced API times.
  • Operational benefit: Significantly less load on your local OneFirewall instances.

​
2. Custom Reserved IPs

  • What’s new: Define your own list of reserved IPs or networks (CIDR format) at the organization level.
  • How it works: Any IP you add will be automatically rejected during submissions, in addition to global reserved-IP rules (e.g. private ranges).
  • Setup steps:
    1. Navigate to Organizations
    2. Click Edit on your target organization (if you are Admin)
    3. Update or add the reserved_ips array in the JSON configuration (as the example below)

​
3. Shared Tags Across the Alliance

  • What’s new: Attach optional tags when submitting IPs, files, domains, or URLs—and share them with the entire OneFirewall community.
  • Example sources: AlienVault threat lists, Cyber Threat Alliance feeds, Tor exit-node indicators, etc.
  • Benefit: Enrich community threat intelligence and receive curated tag data in return.

​
4. Tag-Based Prevention Rules

  • What’s new: The Live Score API (used by the WCF Agent) now supports prevention based on score and specific tags.
  • Use case: Block any IP above a score threshold and matching a given tag (e.g. “malware”, “botnet”).
  • Setup steps:
    1. Navigate to Organizations
    2. Choose your score threshold and/or desired tags (as from the example below)
    3. Save to activate automated blocking