Solaredge firewall rules for VyOD

07 Nov, 2026

Even though I prefer local services, I do use the cloud service of my solar inverter. To minimize the risk of becoming part of a botnet, I limit access as stated in the SolarEdge Cybersecurity Technical Overview Aug 2026 (solaredge.com). For now I ignore the optional rules.

I’m using a zone-based firewall, with my inverter in the IOT VLAN which generally does not have WAN access. I identify the traffic by MAC address.

I don’t think Google’s DNS is really on www.google.com using tcp, but then again it should use the DNS provided by the router anyway.

set firewall ipv4 name IOT2WAN rule 220 action 'return'
set firewall ipv4 name IOT2WAN rule 220 source mac-address 'de:ad:be:ee:ee:ef'
set firewall ipv4 name IOT2WAN rule 220 protocol 'tcp'
set firewall ipv4 name IOT2WAN rule 220 description 'solaredge IOT Communication'
set firewall ipv4 name IOT2WAN rule 220 destination fqdn 'prodfqdn.solaredge.com'
set firewall ipv4 name IOT2WAN rule 220 destination port '443'

set firewall ipv4 name IOT2WAN rule 221 action 'return'
set firewall ipv4 name IOT2WAN rule 221 source mac-address 'de:ad:be:ee:ee:ef'
set firewall ipv4 name IOT2WAN rule 221 protocol 'tcp'
set firewall ipv4 name IOT2WAN rule 221 description 'solaredge Secure Onboarding'
set firewall ipv4 name IOT2WAN rule 221 destination port '443'
set firewall ipv4 name IOT2WAN rule 221 destination fqdn 'svcfqdn.solaredge.com'

set firewall ipv4 name IOT2WAN rule 222 action 'return'
set firewall ipv4 name IOT2WAN rule 222 source mac-address 'de:ad:be:ee:ee:ef'
set firewall ipv4 name IOT2WAN rule 222 protocol 'tcp'
set firewall ipv4 name IOT2WAN rule 222 description 'solaredge Time sync'
set firewall ipv4 name IOT2WAN rule 222 destination port '123'
set firewall ipv4 name IOT2WAN rule 222 destination fqdn 'time.google.com'

set firewall ipv4 name IOT2WAN rule 223 action 'return'
set firewall ipv4 name IOT2WAN rule 223 source mac-address 'de:ad:be:ee:ee:ef'
set firewall ipv4 name IOT2WAN rule 223 protocol 'tcp'
set firewall ipv4 name IOT2WAN rule 223 description 'solaredge Time sync backup'
set firewall ipv4 name IOT2WAN rule 223 destination port '80'
set firewall ipv4 name IOT2WAN rule 223 destination fqdn 'www.google.com'

set firewall ipv4 name IOT2WAN rule 224 action 'return'
set firewall ipv4 name IOT2WAN rule 224 source mac-address 'de:ad:be:ee:ee:ef'
set firewall ipv4 name IOT2WAN rule 224 protocol 'tcp'
set firewall ipv4 name IOT2WAN rule 224 description 'solaredge DNS lookup'
set firewall ipv4 name IOT2WAN rule 224 destination port '53'
set firewall ipv4 name IOT2WAN rule 224 destination fqdn 'www.google.com'

set firewall ipv4 name IOT2WAN rule 225 action 'return'
set firewall ipv4 name IOT2WAN rule 225 source mac-address 'de:ad:be:ee:ee:ef'
set firewall ipv4 name IOT2WAN rule 225 protocol 'tcp'
set firewall ipv4 name IOT2WAN rule 225 description 'solaredge Remote installer access'
set firewall ipv4 name IOT2WAN rule 225 destination port '2222'
set firewall ipv4 name IOT2WAN rule 225 destination fqdn 'portia-tu.solaredge.com'

set firewall ipv4 name IOT2WAN rule 226 action 'return'
set firewall ipv4 name IOT2WAN rule 226 source mac-address 'de:ad:be:ee:ee:ef'
set firewall ipv4 name IOT2WAN rule 226 protocol 'tcp'
set firewall ipv4 name IOT2WAN rule 226 description 'solaredge Support remote access'
set firewall ipv4 name IOT2WAN rule 226 destination port '2222'
set firewall ipv4 name IOT2WAN rule 226 destination fqdn 'serminv.solaredge.com'

set firewall ipv4 name IOT2WAN rule 227 action 'return'
set firewall ipv4 name IOT2WAN rule 227 source mac-address 'de:ad:be:ee:ee:ef'
set firewall ipv4 name IOT2WAN rule 227 protocol 'tcp'
set firewall ipv4 name IOT2WAN rule 227 description 'solaredge Software updates'
set firewall ipv4 name IOT2WAN rule 227 destination port '443'
set firewall ipv4 name IOT2WAN rule 227 destination fqdn 'docs.aws.amazon.com'

set firewall ipv4 name IOT2WAN rule 228 action 'return'
set firewall ipv4 name IOT2WAN rule 228 source mac-address 'de:ad:be:ee:ee:ef'
set firewall ipv4 name IOT2WAN rule 228 protocol 'icmp'
set firewall ipv4 name IOT2WAN rule 228 description 'solaredge Connectivity'
set firewall ipv4 name IOT2WAN rule 228 destination address 8.8.8.8

Profit!

#Linux #Networking #Security #Server #Smarthome #Solar #Vyos