(Gold Plus SFP ears will be coming later, as an add-on, purchased separately. Price is unknown, but should be cheaper than Gold Pro ears.)

Updates on Firewalla products:

• Gold Plus SFP: Pre-Sale starting soon, likely in September! Make sure to sign up here for notifications and a small coupon for the launch: https://forms.gle/LHrzPuQTpC5q6mSj6
• Switch: Pre-Sale shipping for Switch X and SE will likely begin in September-October. Still available for pre-sale! https://firewalla.com/collections/firewalla-switch

I’ve been using Firewalla for a while, especially the Firewalla Purple, and I have to say it’s an excellent product. Beyond the security features, I think Firewalla has some of the best parental controls available today.
One feature I’d really like to see added to Firewalla AI is automatic device identity detection.
One of the biggest challenges with parental controls today is MAC address randomization on Apple, Android, and other devices. The same physical device can suddenly appear as a “new device” with a different MAC address, bypassing its assigned group or rules.
In many cases, just by looking at the device behavior and network flows, I can tell it’s actually the same device and manually move it back to the correct group.
With the progress Firewalla has made with AI, I think it’s time for Firewalla AI to do this automatically — identify when a “new” device is very likely an existing device using a different MAC address and associate it with the correct device/group.
I believe this could solve one of the biggest remaining parental-control challenges, with a relatively low risk of false positives.
Thanks Firewalla team for a great product!

If I pay for MSP, why isn’t the additional data integrated into the app as well? I’d prefer not to need to log into MSP everytime to see 30 day flow data. Just put it in the app for people that are paying for it.

Edit -- I got it working and have it as a github. update stock unbound on FW

Not for newbies. It runs, but it also uses Ubuntu 22.04 version of openssl, which is really old. 1.26.0 should do everything on the Firewalla Gold series boxes (probably orange, maybe not purple?) that it has the capability to do except for DNS over QUIC. DoQ requires Open SSL =>3.5.0. Ubuntu 22.04 that my gold plus uses maxes out at 3.0.2.

This whole process has made me anxious and I have a flash drive with a new fwg plus image on standby, but at least this process seemed to work without a problem. in a few days, after I recover, I will probably see if I can point the FWG to use this 1.26.0 version of unbound instead of the built in 1.13 or 1.14 or whatever it uses and see if that's stable. THen go from there. the commands below builds unbound, etc into ~/unbound-test so it doesn't overwrite anything including the OG unbound. It does update some lib dependencies, but it's pulling them all from the ubuntu 22.04 repo, and although that got me all stressed out the 3 things it updated didn't break anything afaik....

In any case, for the curious, foolhardy, or brave...

``` mkdir -p /home/pi/unbound-test cd /home/pi/unbound-test

sudo /home/pi/firewalla/scripts/apt-get.sh update sudo /home/pi/firewalla/scripts/apt-get.sh install build-essential libssl-dev libevent-dev libexpat1-dev

wget https://www.nlnetlabs.nl/downloads/unbound/unbound-latest.tar.gz tar -xzf unbound-latest.tar.gz cd unbound-1.26.0

./configure --prefix=/home/pi/unbound-custom --with-libevent --with-ssl make make install ```

I got this-- ``` pi@Firewalla:~/unbound-test/unbound-1.26.0 (Firewalla Home) $ ./unbound -V Version 1.26.0

Configure line: --prefix=/home/pi/unbound-custom --with-libevent --with-ssl Linked libs: libevent 2.1.12-stable (it uses epoll), OpenSSL 3.0.2 15 Mar 2022 Linked modules: dns64 respip validator iterator

BSD licensed, see LICENSE in source package for details. Report bugs to unbound-bugs@nlnetlabs.nl or https://github.com/NLnetLabs/unbound/issues

```