Firewall on Homelab Journal

How I Got Every Device Named in My Firewall Logs (Without Active Directory)

Wed, 01 Apr 2026 00:00:00 +0000

TL;DR
#

A Python script that identifies every device on your network in PAN-OS traffic logs, without Active Directory. Combines Pi-hole DNS, UniFi Controller, and DHCP leases into one priority merge. 124 devices named on my PA-440.

Before:

1
2
3


192.168.10.128 → 8.8.8.8 user: unknown
192.168.30.240 → 1.1.1.1 user: unknown
172.30.50.77 → 52.26.132.60 user: unknown

After:

Security

Sat, 31 Jan 2026 00:00:00 +0000

Enterprise security principles applied to a homelab. This wiki covers the layered security architecture — from next-gen firewall policies to XDR threat detection to certificate lifecycle automation.

Firewall Architecture
#

The Palo Alto Networks PA-440 provides the network security foundation with App-ID, zone-based policies, and centralized logging. Full details in the Networking wiki — including security zones, VLAN trust levels, and DNS proxy configuration.

Networking

Mon, 01 Jan 0001 00:00:00 +0000

My homelab network is segmented into 5 VLANs with a multi-tier DNS architecture and high-availability reverse proxy. This wiki covers the design decisions and implementation details.

Complete Network Topology
#

⛶ Click to expand

VLAN Design
#

VLAN	Subnet	Purpose	Key Services	Security Level
10	192.168.10.0/24	Management & Core	NAS, DNS HA, KVM devices	🔒 High
30	192.168.30.0/24	Server Network	Proxmox, Docker, Apps	⚙️ Medium
40	172.30.40.0/24	Isolated Services	Restricted access	🔸 Low
50	172.30.50.0/24	IoT Devices	Smart home	📱 Minimal
254	10.254.254.0/24	Firewall Management	Out-of-band mgmt	🔐 Critical

Design principle: Servers (VLAN 30) can reach management (VLAN 10), but management devices are protected from server-initiated connections. IoT devices are fully isolated—they cannot initiate connections to any other VLAN.

Firewall on Homelab Journal

How I Got Every Device Named in My Firewall Logs (Without Active Directory)

TL;DR #

Security

Firewall Architecture #

Networking

Complete Network Topology #

VLAN Design #

TL;DR
#

Firewall Architecture
#

Complete Network Topology
#

VLAN Design
#