An agent rebuilt my home network firewall. The score went from 70 to 93.
His home network had eight VLANs and no firewall rules between them, scoring 70 out of 100 on an audit with segmentation at 0 of 25. The AI, working through a UniFi MCP server, designed a default deny zone setup, previewed each rule, and wrote it only after he confirmed. Three audit runs took the score to 93, though one change briefly broke DNS on a live VLAN before it was rolled back.
How it works
- The agent reads the live UniFi state through an MCP server
- It designs one zone per trust level with default deny between zones
- Each rule is previewed and written only when he confirms
- One change briefly breaks DNS on a live VLAN and is rolled back
- Repeat audits move the score from 70 to 83 to 93, with segmentation at 25 of 25
Why it’s worth knowing
The agent did not hand him a plan to type in. It read the live controller, proposed each rule, and wrote it to his real network once he said yes.
Where it’s from
Summarized from a public post on uncommonengineer.com. See the original ↗