firewall-manager

Convert natural-language requests into UniFi firewall policy operations with previews and rollback snapshots.

1|Updated Apr 6, 2025
One-click install
npx skills add https://github.com/david-driscoll/stargate-command-cluster --skill firewall-manager
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: firewall-manager
Source: https://github.com/david-driscoll/stargate-command-cluster/tree/main/.agents/skills/firewall-manager
Command: npx skills add https://github.com/david-driscoll/stargate-command-cluster --skill firewall-manager

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

It helps you translate firewall intent into correct UniFi firewall policy changes while preventing mistakes by requiring previews and roll-back snapshots.

Core Features & Use Cases

  • Natural-language to firewall policies: Convert requests to create, update, and toggle UniFi firewall policies.
  • Template-driven and schema-correct rule building: Use policy-templates.yaml when applicable, otherwise build rules following firewall-schema.md.
  • Safety-first change management: Snapshot firewall state before every mutation, preview changes before confirming, and diff state after the change.

Quick Start

Ask the AI to block TikTok from a specific VLAN by creating a previewed rule set with a snapshot and then execute only after you confirm.

Frequently Asked Questions about firewall-manager

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I safely create and update UniFi firewall policies using natural language?

You can create and update UniFi firewall policies by stating your intent, which the tool converts into safe operations. It requires a preview and rollback snapshot before applying any changes to ensure accuracy.

Can I block specific applications like TikTok on a UniFi network via AI?

Yes, you can block specific applications on a UniFi network by translating your request into a previewed rule set. The tool uses DPI and template references to build the correct blocking policies.

Does managing UniFi firewall rules require a specific MCP server setup?

Yes, managing UniFi firewall rules requires the unifi-network MCP server. The tool leverages this server to apply V2 zone-based payloads and perform state snapshot and diff validation around mutations.

What is the best way to rollback a firewall policy change on a UniFi network?

The best way to rollback a firewall policy change is through the tool's automatic state snapshot feature. It captures the firewall state before every mutation, allowing safe recovery if needed.

How do I enforce time-based access controls in UniFi firewall rules?

You can enforce time-based access controls by converting your scheduling intent into UniFi firewall policies. The tool builds schema-correct rules and validates the state diff after applying the time constraints.