This is not a campus NGFW

What Root Lock Firewall is, what it is not, what it complements, and why it sits beside a campus NGFW rather than replacing one.

Prototype: Content on this page reflects current design intent and will be updated as the product matures.

Overview: A listening service on a Linux host accepts inbound packets unless a filter refuses them. Root Lock Firewall is that host-path filter on a closed HeartSuite appliance: observe real traffic, approve a finite allowlist for this box, seal it. The question it answers is not “which application catalog matches this flow?” but “did a human approve this socket on this box, and is that set sealed?” Application identification, TLS interception, and fleet NGFW management are outside its scope. Root Lock by HeartSuite handles execution, files, and per-program outbound destinations on the same image. This page describes what Root Lock Firewall controls, what it leaves open, how it can be defeated, and how to think about complementary controls.


Root Lock Firewall and Root Lock

Three OS-level controls are unrestricted by default on Linux: file access, network communication, and program execution. Inbound reachability is a fourth default: a bound port is open to the routeable world.

Root Lock and Root Lock Firewall share a review grammar and a seal. They close different defaults.

Root Lock is production-ready today on a server or a cloud image. You review programs, file paths, and outbound destinations, then enable Lockdown. Anything not on that allowlist is blocked at the kernel, including from root.

Root Lock Firewall is the host packet filter for a closed appliance. You review inbound and this-host path events, then enable Firewall Lockdown. It does not replace Root Lock. On the appliance they are designed to run together.

AspectRoot LockRoot Lock FirewallWhat this means in practice
Default it closesA program inherits the user’s right to execute, read, write, and connect outA listener accepts inbound packets from anywhere that can route to itApproving curl to one IP does not close port 22. Closing port 22 does not constrain curl.
PlacementKernel on the host you installFilter on the appliance image; workload on that imagev1 is not a box you put in front of another server.
InspectionKernel grants (program, path, literal outbound IP)Stateful packet filter (connection state + sealed allowlist)Neither product is an NGFW.
How you reach itDashboard on the hostDashboard on the console or serial console of the imageNo public administrative VPN as product identity.
SealLockdown on the kernel allowlistFirewall Lockdown on the packet allowlist, paired with LockdownTwo seals, one maintenance path.
Production statusShippedPrototypeDo not treat this section as a GA install guide.

For production deployments today

Root Lock is the shipped product for execution, files, and outbound destinations. Inbound on that deployment remains an OS packet filter or a cloud security group, as the Network page states.

Root Lock Firewall is the prototype that takes inbound on a HeartSuite appliance as its job. Use it when the workload can live on the image and the team wants the same observe → approve → seal act on sockets. Do not use it as a silent rename of Root Lock Lockdown.


What Root Lock Firewall is not

Root Lock Firewall is not an NGFW. It has no application catalog, no TLS interception, no URL cloud, no sandbox blade, no SD-WAN, and no SASE fabric. Enterprise NGFWs sell infinite policy surface and paid inspection. This appliance sells a finite, observed, reviewed, sealed allowlist.

Root Lock Firewall is not a proxy or a WAF. It does not terminate or interpret application payloads. Put a WAF in front of an allowed HTTPS port if that is the requirement.

Root Lock Firewall is not a cloud firewall service. A virtual appliance that boots on AWS, Google Cloud, or Azure is not AWS Network Firewall, Azure Firewall, or Cloudflare. Keep provider controls as an outer layer.

Root Lock Firewall is not an inline perimeter box in v1. It filters this host. FORWARD and NAT are not a product surface yet. Do not place it in front of other machines.

Root Lock Firewall is not UFW, firewalld, or a second filter beside itself. One owner of the host filter. A second manager on the same image is a composition hazard.

Root Lock Firewall is not a drop-in replacement for a vendor web panel. There is no configuration mall and no cluster GUI. The Dashboard writes allowlist entries. Engine internals stay off the glass.

Root Lock Firewall is not Root Lock. Root Lock inbound permits at Lockdown are a thin accept path for SSH and named services. They are not this product.


Why not “the same as Cisco or Fortinet, smaller”

Campus firewalls earned a second job: they became the remote-access concentrator and the administrative website. The packet filter then has to survive bugs in its own VPN web server, cloud SSO, and static accounts. That is a different tool shape from a sealed host filter with a console TUI.

Named incidents (vendor advisories, not HeartSuite testing):

YearWhat was exposedAdvisory
2024Cisco FTD on Firepower 1000/2100/3100/4200 shipped static accounts with hard-coded passwords. A local attacker who could reach the CLI (serial or SSH, which is on by default on the management interface) could log in as those accounts.CVE-2024-20412
2025Cisco Secure Firewall ASA/FTD VPN web server: crafted HTTP to the SSL VPN / AnyConnect path, arbitrary code as root, exploited as a zero-day. CISA issued Emergency Directive 25-03.CVE-2025-20333, ED 25-03
2026Persistence in the FXOS base OS survived upgrade to the September 2025 fixed releases. Cisco’s recommended removal is a reimage. A reboot CLI command is not enough.cisco-sa-asaftd-persist-CISAED25-03
2026FortiOS and related tools: FortiCloud SSO let an attacker with a FortiCloud account and a registered device log into other customers’ devices when that SSO toggle was on. Fortinet documents that registering the device in the GUI enables the toggle unless you turn it off. Operators then downloaded configuration and created local admin accounts. Exploited in the wild.CVE-2026-24858

Root Lock Firewall is designed without those surfaces: no VPN web server as identity, no cloud SSO into the filter, no vendor-static administrative accounts, console or serial as the administrative path, HeartSuite as the update authority, seal plus a custom kernel under the filter.

That is a smaller remote attack surface. It is not a claim that this prototype has no bugs, and it is not a claim that it replaces a FortiGate or a Cisco Secure Firewall in a campus or inline role. See Recent firewall campaigns for the honest residual on each incident.


What Root Lock Firewall complements

Gap Root Lock Firewall leaves openComplementary control
Program execution, file access, per-program outbound IPsRoot Lock
Application content on an allowed portWAF / application hardening
Ports the image left open to any sourceNot produced by observation. Seal keeps them. Narrow through Maintenance.
Detection, correlation, incident responseSIEM, NDR, EDR hunting — forward events; do not expect a SOC console here
Volumetric DDoS and provider edgeCloud security groups, provider DDoS, CDN
Inline NAT, HA pairs, SD-WAN, site-to-site VPNThe existing campus or DC firewall
Who may open the serial or hypervisor consoleCloud IAM, hypervisor ACL, locked rack

Root Lock Firewall and Root Lock address complementary OS-level defaults. Root Lock Firewall covers inbound and this-host path at the packet filter. Root Lock covers execution, files, and outbound destinations at the kernel.


Root Lock Firewall alone vs with Root Lock

Root Lock Firewall alone is not a planned customer shape. The image includes the Root Lock kernel. A packet filter on a general-purpose kernel you already run is a different product, and it is not this one.

Root Lock alone is the shipped shape for servers that need execution and outbound control and already have an inbound filter (OS or cloud). That remains valid.

Both on the appliance is the intended Root Lock Firewall deployment: kernel grants under a sealed host filter.


Positioning relative to common categories

CategoryDoes Root Lock Firewall apply?Notes
Host inbound allowlist on a closed applianceYes — the jobObserve, approve, seal
Stateful inspectionYesConnection state, not a stateless ACL box
Virtual appliance deliveryYes (v1)QCOW2 / OVA; hardware later
NGFW / App-ID / TLS MITMNoRefused as identity
WAF / proxyNoNo payload interpretation
Cloud FWaaSNoMay run on IaaS; is not the provider’s policy plane
Inline DC / branch edge (v1)NoHost-shaped; no FORWARD/NAT surface
UFW-on-Ubuntu replacementNoImage, not a package
SIEM / NDR / EDRComplementsForward events; do not replace the SOC

How Root Lock Firewall can be circumvented. Under Firewall Lockdown paired with Root Lock Lockdown, an attacker who already has remote root cannot rewrite the sealed allowlist. Changing it takes Maintenance on the console or serial console. SSH is not enough. The question is no longer whether they can turn the filter off. It is whether you approved too wide a rule, whether an allowed port is still a hole in the application, whether the filter program can be killed, and whether someone who holds the hypervisor owns the disk. Physical presence, cloud serial, or hypervisor control returns the box to whoever holds it. That is how customers evaluate fit, not a footnote.

Every security system has a known way to be taken out of the picture. Being explicit about it is how customers evaluate fit.


Last modified August 18, 2026: update (843543a)