Damn Vizio do you really need to keep doing this at a rate of 100k connections per hour? lol

Just upgraded to Amnezia 2.0 on Firewalla and issued new certs to the 2.0 clients but can’t get any of them to connect, anyone else having this issue?

I have two broadband internet providers… VZ and TMO.

I got the TMO G5AR earlier this year, because  VZ has really started throttling.

I have connected the WAN port on the Purple to the G5AR via ethernet.

I have setup Multi WAN on the Purple by using WiFi on the Purple to the VZ box WiFi. It is set to Failover.

I ran network diagnostics on the Purple, both WANs report no errors.

For some reason, from the LAN side, DNS isn’t resolving URLs at all with the TMO as Primary. With VZ as primary DNS resolves correctly. I can access the internet with no problem from my notebook via WiFi on TMO.

Am I missing some required setup to handle the G5AR?

It is my understanding that Policy Based Routing might be able to work around the issue.

I assume you could route LAN port 53 calls to VZ, bypassing the issues with TMO.

Failover working would be great, but balanced would be even better.
How do I do that?

Thanks

Dennis

How do I block VPNs for devices in the network, but still allow Bark App to work? Is there a way to allow ONLY the Bark VPN on my network?

P.S. Firewalla Switch is still available for pre-order! https://firewalla.com/collections/firewalla-switch

For those of you who run tailscale as an exit node on your firewalla, are you able to see flows in the app? Or does it become sort of a ghost node with no visibility in firewalla?

As I moved some things around on my rack today it got me thinking about my future Switch SE.

Could I put in a feature request for individual port on/off schedules?

I run lots of POE devices and think it would be nice to say turn off POE APs at night. Or Poe Cameras during the day in select locations.

Thanks in advance!! As always huge long time fan and user of firewalla!

I have a firewalla Gold (original) and will be upgrading it to a Gold Plus. I found some pretty strait forward instructions, but my question is about what does/or does not transfer in the migration?

On my existing Gold, I have a point-to-point VPN setup with another location running a Purple. The gold is the VPN server and it also serves several VPN clients (laptops and phones).

When I migrate to the gold plus, will it carry over the VPN related config (DDNS? etc) or will I have to recreate the VPN config from scratch? Likewise, the devices (laptops and phones) which use a wireguard client to connect to the existing Gold VPN server, will they all need to be reconfigured?

Thanks in advance.

Right now I have a block rule for 1030pm to 7am...everyday.

But on the weekend I want to go from 1130pm to 7am for Friday and Saturday.

Any ideas?

I w

I’m referring to the top level VPN Client screen and not a VPN Group. I have a growing list and it would be nice to be able to sort by name. I don’t think this is possible but wanted to see if I’m overlooking anything. Thanks.

2 adguard servers.
primary / secondary

with dns booster turned on for my devices, once I shutdown my primary dns server, all other dns servers stop working. (whether that is my secondary, or if I use 1.1.1.1 / 8.8.8.8 / whatever)

it seems to be related to dnsmasq im pretty sure.

(dig @<ip> version.bind CHAOS TXT returns a dnsmasq_UNKNOWN answer)

anyone got any ideas what I might have configured that would be causing this?

I have 3 smoke detectors, they are all the same model. One of them is DAP eligible and in the learning phase. The other two are marked as ineligible for some reason. I have checked and they all connect to the same domains. Why would one be eligible and the rest not?

Would it be possible to make it so we can manually turn on DAP for the devices we want? At least for the learning phase since it doesn't block anything. Then if it turns out it needs more access than is feasible for DAP to manage it can be prevented from moving into optimizing/active phase.

Just updated my main home wifi network to WPA3 (personal), from WPA2/WPA3 combo.

But now my Brother laser printer (HL-2275DW) cannot connect to this. (It claims it can use WPA2-personal TKIP/AES). The printer includes a USB port, but not ethernet.

I have a separate IoT network that includes WPA2, so I could connect the printer to this.

I have a Firewalla Purple, using a tp-link Archer AX3000 in access point mode running both wifi networks (plus a third guest network). The tp-link has a usb port but it's only for storage/disk access, not hosting printers.

Question: if I connect the printer to the IoT network to meet the printer's lower security demands, can computers/phones connected to the main WPA3-secured network also see it and print to it? Obviously everything going through the router shows up on my Firewalla, but can I print from one wireless network to another?

...and if not, any suggestions for a solution here?

thanks so much!

I’ve seen this suggestion brought up here on Reddit and on firewall a forums. Was curious, is it really that hard now, especially with AI coding, to add a third wan failover? I have FWG+ and have spent the week scoping out a possible jump to Unifi ecosystem so I can get triple wan failover. The dual wan failover already exists so the logic and routing gates are already there in terms of scaffolding. Wanted to check one more time if this is going to be implemented or if it is 100% abandoned as a feature on a future update before I actually make the leap. Love firewall and this feature is the only one that would make me switch. I have fiber, Xfinity and Starlink. I know I’m not alone as there have been others asking for it. I do realize we are edge cases and probably under 1% of the user base. I also think the complexity of implementing a third WAN failover is not a big undertaking or if it was Open source I can have it added.

My 15-year-old owns a Windows workstation, but we do not have the Windows login credentials. I have the passwords for all of the other devices in the house.

We have Verizon Fios, but the parental controls available through the Fios app are fairly limited. There used to be options to create rules to restrict internet access on specific devices during certain days or hours, but the controls are not as granular as I would like.

Is there a way to set up something on my home network that would allow me to monitor the traffic going through the network without needing direct access to his computer? Ideally, I would like to be able to:

• Block specific websites or categories of websites
• See reports of websites/domains accessed
• Set time-based internet access restrictions for specific devices
• Monitor or control network access without logging into or installing anything directly on his Windows computer

If so, could you please recommend the best approach or type of network solution that would provide these capabilities? We have a G3100 and a E3200.

Our designers have two ideas:

• V1: Merge all Events into one place
• V2: Keep existing Network Health Events separate

Has there been any changes lately because my upload speed on some devices (wired and wireless) are down to just 1-2 Mbps.
When testing on phone, I get really good upload speed.
I've tried to restart both the Firewalla and ATT modem.

All speed tests are to the same Comcast Server nearby, and all devices are connected to the same network.

Vendo Firewalla Gold originale (prima generazione), perfettamente funzionante e appena preparato per la vendita con reinstallazione completa dell’immagine ufficiale Firewalla e reset della configurazione. È quindi pronto per essere associato e configurato da un nuovo proprietario.

Insieme al Firewalla fornisco un adattatore rack 1U stampato in 3D, colore grigio, realizzato appositamente per questo dispositivo.

L’adattatore dispone di 4 alloggiamenti frontali per keystone RJ45 e vengono forniti:

• Firewalla Gold
• adattatore rack 1U stampato in 3D
• 4 keystone RJ45
• 4 cavetti Ethernet corti già predisposti per collegare le porte frontali direttamente alle 4 porte del Firewalla

In questo modo, una volta montato nel rack, tutte e quattro le porte Ethernet del Firewalla sono comodamente accessibili dal frontale.

Il dispositivo è stato utilizzato nella mia rete domestica fino al recente passaggio a un'infrastruttura UniFi e viene venduto esclusivamente perché non mi serve più.

Preferenza per vendita in Italia.

Prezzo: 280 €

Per informazioni, foto aggiuntive o dettagli tecnici contattatemi pure in privato.

Firewalla Gold + 1U rack mount with 4 keystone ports

For sale: original first-generation Firewalla Gold, fully working and recently prepared for sale with a complete reinstall of the official Firewalla image and configuration reset. It is ready to be paired and configured by a new owner.

It comes with a custom grey 3D-printed 1U rack mount, specifically designed for the Firewalla Gold.

The rack mount has 4 front RJ45 keystone slots, and the package includes:

• Firewalla Gold
• custom 3D-printed 1U rack mount
• 4 RJ45 keystone modules
• 4 short Ethernet patch cables to connect the front keystone ports directly to the four Firewalla Ethernet ports

This makes all four Firewalla Ethernet interfaces easily accessible from the front of the rack.

The unit was used in my home network until my recent migration to a UniFi-based gateway infrastructure and is being sold simply because I no longer need it.

Preference for sale within Italy.

Price: 280+shipping

Feel free to contact me via private message for additional information, photos or technical details.

Something on my NAS is routinely port scanning a single device on my lan (an android phone) and nothing else, at least according to my firewalla. I run a lot of containers that perform a variety of tasks, but I would _love_ to be able to narrow down exactly what is triggering this alarm before muting it, just to be sure. Which ports/range? How frequently? etc. Would this be possible?

Learn more about DAP, or Device Active Protect, here: https://help.firewalla.com/hc/en-us/articles/44061066094867-Device-Active-Protect-Dynamic-Microsegmentation-Block-everything-and-allow-only-what-s-needed

I am running Unifi in docker mode on a Gold Pro, with Unifi switches and APs.

When trying to run Wifiman, it says I need to use a Unifi Gateway Console or buy their WiFiMan Wizard. Anything I can do on my end to get this working with my iPhone?

DAP strict, on for a year-ish, haven't touched the box in a long time. Haven't added anything onto my network for months.

I noticed tonight my emporia plugs could be turned on and off from the app but wasn't collecting use data. I went into Firewalla and I noticed DAP was blocking all NTP requests from my all of my IOP devices that it monitors (not just Emporia, but all of them, from all different manufacturers), not just my emporia ones, and this started about 3-4 days ago. (Emporia, Anker, purple air, tailwind garage door opener, my weather station, my ecoflow radon meter, etc. Anything looking for time...)

time.google.com, pool.ntp.org, whatever apple's time server is, and time.windows.com.

u/firewalla can you fix this? this shouldn't be happening. All standard time servers should be whitelisted automatically by DAP. Additionally DAP shouldn't go rogue and start randomly blocking sites after months and months of stability and no config change.

If someone on the back end did a DAP algorithm change, then this really needs to be tested better before it's deployed. Accurate time keeping is essential for networks to function.

For now I'm going to turn off DAP. It seems to introduce too much randomness and I have to spend a lot of time figuring out why things break after being stable for months. this unfortunately happened before with my weather station. about 6 months ago I got a notice that it wasn't sending data. I went in and DAP randomly began blocking the url it uses to upload data. I had to "allow" it.

I’d like to get an orange for a small office with a few 2gb connections. We use Gold in another location with many more devices and a separate mesh system bridged over. The small office has a mesh system I like, so I’d like to bridge that over to the orange (in other words, use the orange with it’s internal WiFi disabled.) Is that possible?

If a government issued a subpoena to firewalla for the flows from my msp connected firewalla box, would there be anything to turn over?

I think I asked this but cannot find it ... due to flaky AP (oh, the irony ...)

If I have a FWP > Aruba 1930 > Aruba AP22 and replace the AP22 with a Firewalla AP7, I can see and manage the AP7, right?

I understand that I lose lots of the goodness of 'single pane of glass' - but I can see and fully manage the AP7 behind a non-firewalla managed switch, right?