It should be configurable from the web console since all platforms don't and cannot have an app (e.g. NAS). Not being able to control the firewall means I always keep it disabled

I'd like this too. On the website would be fine. I like the nat firewall but would like to let some services through. By device would be even better mobile vs nas vs pc

Why not both? App for single device and website for global?

In app would be better because it would simplify separate settings on a device by device basis... Also a UPnP option so applications like uTorrent can auto map a random port every time they run.

I agree. I like the idea of a firewall, but want to be able to let certain services through. Right now, I am all off or all on, so I have to choose all off. Not good.

Perhaps 10 to 20 rules or ports that we can configure to always pass or always block.

at a minimum at the website. also multiple possible profiles for different uses might be interesting. at lest two or 3. eg, one for the router, one if in use with phone, one for use with laptop. or for different usecases.

both in app and website would be a great feature

Both.

For BitTorrent, one needs to be able to specify the port to use. Since resetting the port every-time I connect is a huge PITA it needs to be saved with the account.

If privacy is an issue, reroute the customers static port to a random port number on the public facing side.

I agree the firewall needs some option to control it. I tried it but cancelled it when there was no option to open a port, etc. I don't mind where it's controlled from. Even the option to open one port could get me to use it.

As it could be useful even for people connecting without the app(linux for example). It should be configurable on the Golden Frog website at the minimum but in a second time having it on the application seems to be a nice feature.