Security

Security

Security
Security
2025-09-28 13:54:53
Model: Deco BE95  
Hardware Version: V1
Firmware Version: 1.6

After initial install is the Deco firewall configured to accept incoming connections? I dont see any firewall settings available in the App...

  0      
  0      
#1
Options
6 Reply
Re:Security
2025-09-28 18:39:45

  @NukeWorker 

 

By default, Deco Mesh systems do not have any ports actively open on the WAN (Internet) side, which means incoming connections from the Internet are not accepted unless you specifically set up port forwarding. On the LAN (internal network) side, certain ports are open for essential services such as DNS, DHCP, and communication with the Deco app.

Currently, the firewall settings on Deco are not user-configurable, so you won't find any options to adjust firewall rules or block specific ports in the Deco app. If you need to allow access from the Internet to a specific device, you can use the Port Forwarding feature under More > Advanced > NAT Forwarding > Port Forwarding in the Deco app.

Need help with the Deco app, setup, Ethernet backhaul, network switch or rolling back firmware? Router or AP mode? https://community.tp-link.com/us/home/forum/topic/699816?page=1
  1  
  1  
#2
Options
Re:Security
2025-09-29 00:17:38

  @HelpFixDecoApp 

 

Thanks for the clarification.

 

I recently changed my network from a 2015 Google WiFi 5 network to the Deco BE33000 WiFi 7. The new network has the same SSID and PW as the old network. Everything went smooth, all 30+ devices connected from light bulbs to laptops and servers connected to the network without any issues. After about five hours I get an email from TP-Link saying someone 500+ miles away has logged onto my network and suggested I change me PW?? How could that happen with all WAN ports closed? I live out in the stix in Middle Tennessee down by the river. How can I determine the MAC address of the intruder? I do have neighbors but I'm thinking they may not be the type to mess around with hacking networks. Looking for answers. And I'm really not in the mood to change the login on all 30+ devices. 

  0  
  0  
#3
Options
Re:Security
2025-09-29 00:24:43

  @NukeWorker 

 

I believe the email you got was someone getting access to your tp link account and not into your network. I would change your account password ASAP it shouldn't effect your SSID or the password you use for your WiFI 

Need help with the Deco app, setup, Ethernet backhaul, network switch or rolling back firmware? Router or AP mode? https://community.tp-link.com/us/home/forum/topic/699816?page=1
  0  
  0  
#4
Options
Re:Security
2025-09-29 00:26:43

  @NukeWorker 

 

Can you post the email you got? 

Need help with the Deco app, setup, Ethernet backhaul, network switch or rolling back firmware? Router or AP mode? https://community.tp-link.com/us/home/forum/topic/699816?page=1
  0  
  0  
#5
Options
Re:Security
2025-09-29 11:22:17

  @NukeWorker The only way that someone so far away can log in is through the app and with your login credentials.

  0  
  0  
#6
Options
Re:Security
2025-09-29 13:48:22

  @NukeWorker 

 

I sort of think this could be 2 different possibilities why?

 

  1. The email could be a SCAM, especially if there is a LINK in it to make the change?
  2. The unit might have been a RETURN? Somehow linked to the other owner's log-in as well?

 

Just thinking out of the box here.

  0  
  0  
#7
Options