diff --git a/core/middleware/demo_handle.go b/core/middleware/demo_handle.go
index bbd5fe481..3705a4d0b 100644
--- a/core/middleware/demo_handle.go
+++ b/core/middleware/demo_handle.go
@@ -27,6 +27,11 @@ var demoAllowedRoutes = map[demoRoute]struct{}{
 	{http.MethodPost, "/api/v2/toolbox/clam/base"}:             {},
 	{http.MethodPost, "/api/v2/backups/record/size"}:           {},
 
+	{http.MethodPost, "/api/v2/hosts/firewall/base"}:                {},
+	{http.MethodPost, "/api/v2/hosts/firewall/forward/base"}:        {},
+	{http.MethodPost, "/api/v2/hosts/firewall/rules/native/detail"}: {},
+	{http.MethodPost, "/api/v2/hosts/firewall/rules/sync/preview"}:  {},
+
 	{http.MethodPost, "/api/v2/core/auth/login"}:     {},
 	{http.MethodPost, "/api/v2/core/logs/login"}:     {},
 	{http.MethodPost, "/api/v2/core/logs/operation"}: {},
diff --git a/frontend/src/routers/index.ts b/frontend/src/routers/index.ts
index 1aaf6b974..292eb5c18 100644
--- a/frontend/src/routers/index.ts
+++ b/frontend/src/routers/index.ts
@@ -30,7 +30,8 @@ const clearLoginStatus = () => {
 };
 
 router.beforeEach(async (to, from) => {
-    const { entrance, isEnterprise, isEnterpriseLicenseLoaded, isEnterpriseLicensed, isLogin } = useGlobalStore();
+    const { entrance, isEnterprise, isEnterpriseLicenseLoaded, isEnterpriseLicensed, isLogin, isOnRestart } =
+        useGlobalStore();
     NProgress.start();
     axiosCanceler.removeAllPending();
 
@@ -88,7 +89,7 @@ router.beforeEach(async (to, from) => {
                 params: to.params,
             };
         }
-        if (!isEnterprise.value || isEnterpriseLicensed.value) {
+        if (!isEnterprise.value || (isEnterpriseLicensed.value && !isOnRestart.value)) {
             NProgress.done();
             return { name: 'home' };
         }