I'm setting up my z100g for the first time. Main reason for purchase was parental controls for kids. Things were going well until I tried to access a restricted site from my kids wireless laptop (work fine from the wired computer). Instead of getting a response from the z100 stating the page was blocked I got a "page could not be displayed" message back from the browser. Further checking and reviewing other posts here, it appears the z100 default rules do not allow access to the "my.firewall" dns alias which points to the router from the WLAN. I looked at the z100 router logs and indeed it logged the laptop connection on port 80 as blocked. So it appears by default the parental controls will not work properly on wireless laptops.

Now I can understand why you probably don't want a wireless user to get to the admin pages, but the way the z100 works it has to be able to respond on the WLAN to put up parental control messages like this url: http://my.firewall/pub/ufpblock.html?badsite.com

The work around I found was to create a custom rule to allow port 80 access from the wlan to the gateway, now it works fine but I've defeated the default rule which is probably not a good idea.

I wanted to understand if this is known behavior of the router, and if there is a better work around than the rule I defined.

Other than this I'm pretty impressed with the product so far.

Your right on track. The wireless integrity is less than the wired integrity. By allowing access to the firewall settings through a wireless connection, you definitely have made yourself more vulnerable, but only if someone was able to attach to the wireless subnet. You're not any more exposed from the internet side.

I have seen the same thing from the wireless computers getting a Page cannot be displayed rather than the blocking message. It would be more useful to know that it was blocked.