@TCrain In most Content/Web Filters, HTTP sites are blocked by examining the Host field of the GET request. HTTPS sites are blocked by examining the Server Extensions field in the Client Hello...

On VLAN 1, tag port 2. On VLAN 11, untag port 2. This should allow all devices connected to port 2 to get an IP from VLAN 11

@TCrain In a URL like https://community.tp-link.com/en/ https:// = Protocol community = Sub-Domain tp-link.com = Domain Name en = Path / = Root Directory of the Path (Web Browsers work with or...

To accomplish this you would use URL Path Mode. The PATHs you specify need to match exactly to what is shown in the browser in order to work. More Information:...

All network devices default to VLAN 1 and it won't be able to be removed. You can determine what ports use each VLAN through VLAN tagging.

@Stanislaw123 What @shberge said is true. VoIP providers always specify those port requirements, but you rarely need to open the ports. Firewall's all act the same out of the box because WAN is...