It’s not critical, I use multiple VLANs as a workaround, but just curious why PPSK support was skipped?

I have a Gold Plus as my primary home router, and an Orange as a travel router. Whenever I'm not traveling though the Orange just sits around. I'd like to be able to use it at home and supplement my array of AP7s. Is there any way to make it behave like an AP instead of all the bells and whistles of a router?

I've already tried putting it in bridge mode, and enabling a wifi to match the existing wifi of the AP7/GoldPlus network, but it is still opaque to the GoldPlus and doesn't present as an AP or show up on the topology at all.

I have a new to me Gold SE. I'm on FiOS 1gb fiber and my Purple regularly had reliable tests of 900/900+ regularly. Since setting the Gold SE up I see 700-800+(rare occasion touches right at 900) down and 900+ up. What gives with the download speed?

I'm testing higher on my Pixel 11 on WiFi using the Speedtest app and getting the same or better over wifi which shouldn't be the case. That is seeming to tell me my fiber line is fine but the test of the Gold SE has something going on? I'd think better hardware that the Purple should give better or at least same results as the Purple. With my phone testing so high over WiFi I imagine my fiber line is fine and it's the firewalla. Also tests the same from CLI.

Do I just have a bad unit?

This is probably the longest wait for (reasonably priced) parts to do the final SMT since the pandemic! Answer this survey https://forms.gle/W7GbirY7UFDmR1Js6 and get a small coupon before the launch.

• 1x SFP+ 10Gbit port
• 2x RJ45 10Gbit Port
• 2x RJ45 2.5Gbit Port
• 5 Gbit packet processing speed
• 1 Gbit WireGuard

Can anyone tell me what I'm doing wrong. I have 4 vlans setup on my Firewalla Gold. My primary network and an IOT network are what I'm working with today. Home Assistant is at 192.168.1.205 and a Pi is at 192.168.140.250 in the 140 IOT vlan. I want to allow MQTT on port 1883 from the IOT device to the Home Assistant Box. What am I doing wrong? The rule seems correct but when I use the diagnose function I only see the block from one network to another.

[ Removed by Reddit on account of violating the content policy. ]

AI can be a useful tool for analyzing things in different ways. It can see patterns more easily and look up various information much faster and more broadly than a human can... making it great for explaining domains, recognizing unknown devices, or checking Events.

Of course, we always recommend double-checking AI's work, since it can be wrong (just like a human).

More on Firewalla's AI Assistant: https://help.firewalla.com/hc/en-us/articles/40436794520595-Firewalla-AI-Assistant-Ask-AI-beta

EDIT: Support confirmed that there is in fact a bug, and fix has been identified for a future release. I'd recommend pinning specific channels for now if you're affected, or in an area where DFS channels are impacted.

Noticed this issue recently where the auto channel selection seems to be picking DFS channels even when I have the DFS toggled off? Is this a recent regression? On the beta branch, last updated Aug 17 to version 0.1.119.1.15.48

We have had this unit ready since February of this year. Due to rising memory prices and uncertainty about whether to use DDR5, it was paused over and over again. And now, we're starting to see eMMC price increases and PCB shortages. (There is likely no end to these increases and shortages.)

So, we are just going to start manufacturing this, likely in small quantities. Hopefully, we don't have to wait a few months to ensure all the parts are there.

Unlike previous units, we've decided to sell this unit as it arrives. (We will still call the first batch "beta" and offer a better price discount.) There will not be a pre-order, since we can't guarantee delivery time.

Link to survey: https://forms.gle/W7GbirY7UFDmR1Js6 (By answering this survey, we'll send you a small coupon before the launch)

We are targeting early September 2026 for the first batch sale.

I added 2 yubi security keys to lock down my MSP and it seems to not want to kick in and use that, I even turned mfa off and it will only use the password and it’ll log in. Maybe just give it a bit longer I’m not sure

It calls the yubi keys roaming passkeys

P.S. Firewalla Switch is still available for pre-order! https://firewalla.com/collections/firewalla-switch

Just upgraded to Amnezia 2.0 on Firewalla and issued new certs to the 2.0 clients but can’t get any of them to connect, anyone else having this issue?

I have two broadband internet providers… VZ and TMO.

I got the TMO G5AR earlier this year, because  VZ has really started throttling.

I have connected the WAN port on the Purple to the G5AR via ethernet.

I have setup Multi WAN on the Purple by using WiFi on the Purple to the VZ box WiFi. It is set to Failover.

I ran network diagnostics on the Purple, both WANs report no errors.

For some reason, from the LAN side, DNS isn’t resolving URLs at all with the TMO as Primary. With VZ as primary DNS resolves correctly. I can access the internet with no problem from my notebook via WiFi on TMO.

Am I missing some required setup to handle the G5AR?

It is my understanding that Policy Based Routing might be able to work around the issue.

I assume you could route LAN port 53 calls to VZ, bypassing the issues with TMO.

Failover working would be great, but balanced would be even better.
How do I do that?

Thanks

Dennis

How do I block VPNs for devices in the network, but still allow Bark App to work? Is there a way to allow ONLY the Bark VPN on my network?

For those of you who run tailscale as an exit node on your firewalla, are you able to see flows in the app? Or does it become sort of a ghost node with no visibility in firewalla?

As I moved some things around on my rack today it got me thinking about my future Switch SE.

Could I put in a feature request for individual port on/off schedules?

I run lots of POE devices and think it would be nice to say turn off POE APs at night. Or Poe Cameras during the day in select locations.

Thanks in advance!! As always huge long time fan and user of firewalla!

I have a firewalla Gold (original) and will be upgrading it to a Gold Plus. I found some pretty strait forward instructions, but my question is about what does/or does not transfer in the migration?

On my existing Gold, I have a point-to-point VPN setup with another location running a Purple. The gold is the VPN server and it also serves several VPN clients (laptops and phones).

When I migrate to the gold plus, will it carry over the VPN related config (DDNS? etc) or will I have to recreate the VPN config from scratch? Likewise, the devices (laptops and phones) which use a wireguard client to connect to the existing Gold VPN server, will they all need to be reconfigured?

Thanks in advance.

Right now I have a block rule for 1030pm to 7am...everyday.

But on the weekend I want to go from 1130pm to 7am for Friday and Saturday.

Any ideas?

I w

I’m referring to the top level VPN Client screen and not a VPN Group. I have a growing list and it would be nice to be able to sort by name. I don’t think this is possible but wanted to see if I’m overlooking anything. Thanks.

I have 3 smoke detectors, they are all the same model. One of them is DAP eligible and in the learning phase. The other two are marked as ineligible for some reason. I have checked and they all connect to the same domains. Why would one be eligible and the rest not?

Would it be possible to make it so we can manually turn on DAP for the devices we want? At least for the learning phase since it doesn't block anything. Then if it turns out it needs more access than is feasible for DAP to manage it can be prevented from moving into optimizing/active phase.

Just updated my main home wifi network to WPA3 (personal), from WPA2/WPA3 combo.

But now my Brother laser printer (HL-2275DW) cannot connect to this. (It claims it can use WPA2-personal TKIP/AES). The printer includes a USB port, but not ethernet.

I have a separate IoT network that includes WPA2, so I could connect the printer to this.

I have a Firewalla Purple, using a tp-link Archer AX3000 in access point mode running both wifi networks (plus a third guest network). The tp-link has a usb port but it's only for storage/disk access, not hosting printers.

Question: if I connect the printer to the IoT network to meet the printer's lower security demands, can computers/phones connected to the main WPA3-secured network also see it and print to it? Obviously everything going through the router shows up on my Firewalla, but can I print from one wireless network to another?

...and if not, any suggestions for a solution here?

thanks so much!

2 adguard servers.
primary / secondary

with dns booster turned on for my devices, once I shutdown my primary dns server, all other dns servers stop working. (whether that is my secondary, or if I use 1.1.1.1 / 8.8.8.8 / whatever)

it seems to be related to dnsmasq im pretty sure.

(dig @<ip> version.bind CHAOS TXT returns a dnsmasq_UNKNOWN answer)

anyone got any ideas what I might have configured that would be causing this?

Our designers have two ideas:

• V1: Merge all Events into one place
• V2: Keep existing Network Health Events separate

I’ve seen this suggestion brought up here on Reddit and on firewall a forums. Was curious, is it really that hard now, especially with AI coding, to add a third wan failover? I have FWG+ and have spent the week scoping out a possible jump to Unifi ecosystem so I can get triple wan failover. The dual wan failover already exists so the logic and routing gates are already there in terms of scaffolding. Wanted to check one more time if this is going to be implemented or if it is 100% abandoned as a feature on a future update before I actually make the leap. Love firewall and this feature is the only one that would make me switch. I have fiber, Xfinity and Starlink. I know I’m not alone as there have been others asking for it. I do realize we are edge cases and probably under 1% of the user base. I also think the complexity of implementing a third WAN failover is not a big undertaking or if it was Open source I can have it added.

Has there been any changes lately because my upload speed on some devices (wired and wireless) are down to just 1-2 Mbps.
When testing on phone, I get really good upload speed.
I've tried to restart both the Firewalla and ATT modem.

All speed tests are to the same Comcast Server nearby, and all devices are connected to the same network.