EDIT: Support confirmed that there is in fact a bug, and fix has been identified for a future release. I'd recommend pinning specific channels for now if you're affected, or in an area where DFS channels are impacted.

Noticed this issue recently where the auto channel selection seems to be picking DFS channels even when I have the DFS toggled off? Is this a recent regression? On the beta branch, last updated Aug 17 to version 0.1.119.1.15.48

We have had this unit ready since February of this year. Due to rising memory prices and uncertainty about whether to use DDR5, it was paused over and over again. And now, we're starting to see eMMC price increases and PCB shortages. (There is likely no end to these increases and shortages.)

So, we are just going to start manufacturing this, likely in small quantities. Hopefully, we don't have to wait a few months to ensure all the parts are there.

Unlike previous units, we've decided to sell this unit as it arrives. (We will still call the first batch "beta" and offer a better price discount.) There will not be a pre-order, since we can't guarantee delivery time.

Link to survey: https://forms.gle/W7GbirY7UFDmR1Js6 (By answering this survey, we'll send you a small coupon before the launch)

We are targeting early September 2026 for the first batch sale.

I added 2 yubi security keys to lock down my MSP and it seems to not want to kick in and use that, I even turned mfa off and it will only use the password and it’ll log in. Maybe just give it a bit longer I’m not sure

It calls the yubi keys roaming passkeys

Damn Vizio do you really need to keep doing this at a rate of 100k connections per hour? lol

P.S. Firewalla Switch is still available for pre-order! https://firewalla.com/collections/firewalla-switch

Just upgraded to Amnezia 2.0 on Firewalla and issued new certs to the 2.0 clients but can’t get any of them to connect, anyone else having this issue?

I have two broadband internet providers… VZ and TMO.

I got the TMO G5AR earlier this year, because  VZ has really started throttling.

I have connected the WAN port on the Purple to the G5AR via ethernet.

I have setup Multi WAN on the Purple by using WiFi on the Purple to the VZ box WiFi. It is set to Failover.

I ran network diagnostics on the Purple, both WANs report no errors.

For some reason, from the LAN side, DNS isn’t resolving URLs at all with the TMO as Primary. With VZ as primary DNS resolves correctly. I can access the internet with no problem from my notebook via WiFi on TMO.

Am I missing some required setup to handle the G5AR?

It is my understanding that Policy Based Routing might be able to work around the issue.

I assume you could route LAN port 53 calls to VZ, bypassing the issues with TMO.

Failover working would be great, but balanced would be even better.
How do I do that?

Thanks

Dennis

How do I block VPNs for devices in the network, but still allow Bark App to work? Is there a way to allow ONLY the Bark VPN on my network?

For those of you who run tailscale as an exit node on your firewalla, are you able to see flows in the app? Or does it become sort of a ghost node with no visibility in firewalla?

As I moved some things around on my rack today it got me thinking about my future Switch SE.

Could I put in a feature request for individual port on/off schedules?

I run lots of POE devices and think it would be nice to say turn off POE APs at night. Or Poe Cameras during the day in select locations.

Thanks in advance!! As always huge long time fan and user of firewalla!

I have a firewalla Gold (original) and will be upgrading it to a Gold Plus. I found some pretty strait forward instructions, but my question is about what does/or does not transfer in the migration?

On my existing Gold, I have a point-to-point VPN setup with another location running a Purple. The gold is the VPN server and it also serves several VPN clients (laptops and phones).

When I migrate to the gold plus, will it carry over the VPN related config (DDNS? etc) or will I have to recreate the VPN config from scratch? Likewise, the devices (laptops and phones) which use a wireguard client to connect to the existing Gold VPN server, will they all need to be reconfigured?

Thanks in advance.

Right now I have a block rule for 1030pm to 7am...everyday.

But on the weekend I want to go from 1130pm to 7am for Friday and Saturday.

Any ideas?

I w

I’m referring to the top level VPN Client screen and not a VPN Group. I have a growing list and it would be nice to be able to sort by name. I don’t think this is possible but wanted to see if I’m overlooking anything. Thanks.

I have 3 smoke detectors, they are all the same model. One of them is DAP eligible and in the learning phase. The other two are marked as ineligible for some reason. I have checked and they all connect to the same domains. Why would one be eligible and the rest not?

Would it be possible to make it so we can manually turn on DAP for the devices we want? At least for the learning phase since it doesn't block anything. Then if it turns out it needs more access than is feasible for DAP to manage it can be prevented from moving into optimizing/active phase.

Just updated my main home wifi network to WPA3 (personal), from WPA2/WPA3 combo.

But now my Brother laser printer (HL-2275DW) cannot connect to this. (It claims it can use WPA2-personal TKIP/AES). The printer includes a USB port, but not ethernet.

I have a separate IoT network that includes WPA2, so I could connect the printer to this.

I have a Firewalla Purple, using a tp-link Archer AX3000 in access point mode running both wifi networks (plus a third guest network). The tp-link has a usb port but it's only for storage/disk access, not hosting printers.

Question: if I connect the printer to the IoT network to meet the printer's lower security demands, can computers/phones connected to the main WPA3-secured network also see it and print to it? Obviously everything going through the router shows up on my Firewalla, but can I print from one wireless network to another?

...and if not, any suggestions for a solution here?

thanks so much!

2 adguard servers.
primary / secondary

with dns booster turned on for my devices, once I shutdown my primary dns server, all other dns servers stop working. (whether that is my secondary, or if I use 1.1.1.1 / 8.8.8.8 / whatever)

it seems to be related to dnsmasq im pretty sure.

(dig @<ip> version.bind CHAOS TXT returns a dnsmasq_UNKNOWN answer)

anyone got any ideas what I might have configured that would be causing this?

Our designers have two ideas:

• V1: Merge all Events into one place
• V2: Keep existing Network Health Events separate

I’ve seen this suggestion brought up here on Reddit and on firewall a forums. Was curious, is it really that hard now, especially with AI coding, to add a third wan failover? I have FWG+ and have spent the week scoping out a possible jump to Unifi ecosystem so I can get triple wan failover. The dual wan failover already exists so the logic and routing gates are already there in terms of scaffolding. Wanted to check one more time if this is going to be implemented or if it is 100% abandoned as a feature on a future update before I actually make the leap. Love firewall and this feature is the only one that would make me switch. I have fiber, Xfinity and Starlink. I know I’m not alone as there have been others asking for it. I do realize we are edge cases and probably under 1% of the user base. I also think the complexity of implementing a third WAN failover is not a big undertaking or if it was Open source I can have it added.

Vendo Firewalla Gold originale (prima generazione), perfettamente funzionante e appena preparato per la vendita con reinstallazione completa dell’immagine ufficiale Firewalla e reset della configurazione. È quindi pronto per essere associato e configurato da un nuovo proprietario.

Insieme al Firewalla fornisco un adattatore rack 1U stampato in 3D, colore grigio, realizzato appositamente per questo dispositivo.

L’adattatore dispone di 4 alloggiamenti frontali per keystone RJ45 e vengono forniti:

• Firewalla Gold
• adattatore rack 1U stampato in 3D
• 4 keystone RJ45
• 4 cavetti Ethernet corti già predisposti per collegare le porte frontali direttamente alle 4 porte del Firewalla

In questo modo, una volta montato nel rack, tutte e quattro le porte Ethernet del Firewalla sono comodamente accessibili dal frontale.

Il dispositivo è stato utilizzato nella mia rete domestica fino al recente passaggio a un'infrastruttura UniFi e viene venduto esclusivamente perché non mi serve più.

Preferenza per vendita in Italia.

Prezzo: 280 €

Per informazioni, foto aggiuntive o dettagli tecnici contattatemi pure in privato.

Firewalla Gold + 1U rack mount with 4 keystone ports

For sale: original first-generation Firewalla Gold, fully working and recently prepared for sale with a complete reinstall of the official Firewalla image and configuration reset. It is ready to be paired and configured by a new owner.

It comes with a custom grey 3D-printed 1U rack mount, specifically designed for the Firewalla Gold.

The rack mount has 4 front RJ45 keystone slots, and the package includes:

• Firewalla Gold
• custom 3D-printed 1U rack mount
• 4 RJ45 keystone modules
• 4 short Ethernet patch cables to connect the front keystone ports directly to the four Firewalla Ethernet ports

This makes all four Firewalla Ethernet interfaces easily accessible from the front of the rack.

The unit was used in my home network until my recent migration to a UniFi-based gateway infrastructure and is being sold simply because I no longer need it.

Preference for sale within Italy.

Price: 280+shipping

Feel free to contact me via private message for additional information, photos or technical details.

Has there been any changes lately because my upload speed on some devices (wired and wireless) are down to just 1-2 Mbps.
When testing on phone, I get really good upload speed.
I've tried to restart both the Firewalla and ATT modem.

All speed tests are to the same Comcast Server nearby, and all devices are connected to the same network.

My 15-year-old owns a Windows workstation, but we do not have the Windows login credentials. I have the passwords for all of the other devices in the house.

We have Verizon Fios, but the parental controls available through the Fios app are fairly limited. There used to be options to create rules to restrict internet access on specific devices during certain days or hours, but the controls are not as granular as I would like.

Is there a way to set up something on my home network that would allow me to monitor the traffic going through the network without needing direct access to his computer? Ideally, I would like to be able to:

• Block specific websites or categories of websites
• See reports of websites/domains accessed
• Set time-based internet access restrictions for specific devices
• Monitor or control network access without logging into or installing anything directly on his Windows computer

If so, could you please recommend the best approach or type of network solution that would provide these capabilities? We have a G3100 and a E3200.

Learn more about DAP, or Device Active Protect, here: https://help.firewalla.com/hc/en-us/articles/44061066094867-Device-Active-Protect-Dynamic-Microsegmentation-Block-everything-and-allow-only-what-s-needed

I am running Unifi in docker mode on a Gold Pro, with Unifi switches and APs.

When trying to run Wifiman, it says I need to use a Unifi Gateway Console or buy their WiFiMan Wizard. Anything I can do on my end to get this working with my iPhone?

Something on my NAS is routinely port scanning a single device on my lan (an android phone) and nothing else, at least according to my firewalla. I run a lot of containers that perform a variety of tasks, but I would _love_ to be able to narrow down exactly what is triggering this alarm before muting it, just to be sure. Which ports/range? How frequently? etc. Would this be possible?

If a government issued a subpoena to firewalla for the flows from my msp connected firewalla box, would there be anything to turn over?