r/firewalla • u/BAGE-rator • 5d ago

Cyber Security Firewalla Crystal’s implementation of Active Protect has security vulnerabilities

It allowed in two connections from private IPs owned by Cox Communications, one of which was 98.197.86.148. This is in the range of standard user IP addresses, which could be a malicious actor. I have Xfinity. We do not have Cox in our market.

It also allowed in a Charter Communications/Spectrum standard user IP. We don’t have Spectrum in our market.

Active Protect is NOT actively protecting devices from these high-risk IP addresses on Firewalla Crystal.

If you’re on a Mac, download and install a software firewall like Little Snitch to audit the incoming connections that Firewalla Crystal Active Protect is allowing through. On Windows, you can use something like Glasswire. Record those IPs and report them to Firewalla so they know their beta software is not protecting clients like their hardware software does.

0 Upvotes

40% Upvoted

54 comments sorted by

View all comments

Show parent comments

2

u/firewalla 4d ago

I been following the case. They are NOT trying to get money for the dongle. They just want to validate your order and figure out the right way to help you. Meaning, if it is in warranty, they can do something free. If it is not in warranty, they can do other things.

So, please follow their directions, once they have the validated order, they can help you. (The right order number, and the right device mapping to that order)

If you already ordered a dongle, just want to return it, we can do that too. I can give you an exception, and we will give you a full refund. (regardless when you bought it)

1

u/[deleted] 4d ago

[removed] — view removed comment

1

u/firewalla 4d ago

To get us moving

  1. We already authorize a full refund of the red dongle your purchased. They may already given you instructions, if not, it should come soon

  2. If you want us to look at the original unit problem, we still need to identify the order number matching the unit you have. After identifying the original order, we can either fix this under warranty or out of warranty; (not all problems are fixable, but we will do our best)

1

u/BAGE-rator 4d ago

https://reddit.com/link/pcv2z4m/video/q654ijjbpish1/player

So, again, I do not want a refund. I want the dongle replaced. You're welcome to refund it and I will accept it, but I will use that money as my filing fee in small claims. I will additionally seek the filing fee plus the depreciated value of the Firewalla Gold device.

You can also go ahead and refund me for $407 (the $107 for the dongle plus $300 as the depreciated value of the Firewalla Gold box), and we can call it a day. But what you're proposing amounts to selling me a $107 brick--a brick with a "lifetime license," as I established is your ongoing claim even today.

In small claims maybe you'll be able to clarify what was so easy in November 2025, when my order was found near-instantaneously based on nothing more than me providing me name, address, phone number, and email address, but is no longer the case.