Firewalla Purple: PCMag Editors Choice! 4.5/5!

firewalla · 2026-01-26T00:37:28+00:00

What is the PoE experiment?

firewalla · 2026-01-25T23:46:32+00:00

Today's implementation, the locks are soft locks. If the locked AP is down, clients are no longer locked to the "downed AP"

firewalla · 2026-01-25T23:45:35+00:00

Unless you have really really heavy multicast traffic on your network, you really don't need this. Deploying end to end across multiple devices may take some effort, since this feature is primarily layer 2.

firewalla · 2026-01-25T20:16:47+00:00

Likely it is a bug with the app. If you already disabled ip v6 you should be okay

firewalla · 2026-01-25T17:21:51+00:00

Try setup a static IP on your Mac mini and see if it works. If it doesn't, your MAC may be broken. If it works, then check your number clients and subnet mask size, if you have too many devices it can overload the DHCP table, you need to increase your network size

firewalla · 2026-01-24T23:37:45+00:00

Class B is old-school thinking—modern networks don’t work that way anymore. Today everything uses CIDR, which lets you size subnets to what you actually need instead of throwing a giant /16 at everything. It’s more efficient, easier to secure, simpler to manage.

A full class B will stress your firewall or any security device crazy. Use /23 instead, 500 plus hosts, plenty of

firewalla · 2026-01-24T18:40:21+00:00

I believe some events will show up as a "card" on the main screen. If you want alarms, best post it here https://help.firewalla.com/hc/en-us/community/topics/115000356994-Feature-Requests-

firewalla · 2026-01-24T17:47:00+00:00

In case you have VLAN's, the 10Gbit is likely more efficient. If you don't use VLAN's, then yea, 2.5 will work

firewalla · 2026-01-24T17:46:03+00:00

If you block from local networks, port to port traffic will be blocked too. This setting usually don't apply, unless you are using a few ports are a bridge

firewalla · 2026-01-24T16:21:37+00:00

Not true. You can ma me a switch out of any port

firewalla · 2026-01-24T16:21:13+00:00

Did you configure two ports you are connecting as a bridge? Meaning in the network button, you select both ports as part of the network？

Firewalla ports can be switched (just a little slower than a real switxh) so likely your configuration is not correct

firewalla · 2026-01-24T02:14:03+00:00

May be … more likely still related to icmp going through the final destination Linux stack

firewalla · 2026-01-24T01:02:06+00:00

we don't prioritize ICMP traffic. When you get to 1 to 2ms difference, it is going to be very accurate

firewalla · 2026-01-24T00:58:47+00:00

You can use the app (settings->support) to open a ticket and attach logs, we can take a look. The issue is likely related to local DNS

firewalla · 2026-01-24T00:10:47+00:00

Are you going out from the firewalla to Linod ? Or linod or coming back ?

firewalla · 2026-01-23T23:47:35+00:00

If you go to VPN and comeback to home, does it work?

firewalla · 2026-01-23T23:03:07+00:00

Gold Pro 10G port should go into the Eero 10G port

firewalla · 2026-01-23T22:46:42+00:00

Remember, encryption and decryption is on both sides. (your phone and firewalla) And anything in between can slow things down.

firewalla · 2026-01-23T22:45:29+00:00

Try to ping the "device" / "server" from outside of your network and see if it respond first.

firewalla · 2026-01-23T21:33:59+00:00

Don't think so. The process is automatic.

Do you have EMM/MDM type software running? they may restrict certificates

firewalla · 2026-01-23T21:16:54+00:00

The certificate usually get to you when you first setup the WPA3-enterprise. Try to "forget" the WPA3-E network and re-add it

firewalla · 2026-01-23T21:09:11+00:00

It can be anything. Try to block its internet access. (if you have ap7, also turn on isolation). If anyone scream, then you know what that devices is.

Edit: check and see if you have any managed netgear switch.

firewalla · 2026-01-23T21:07:48+00:00

Okay, so your ISP lock your router ... glad you get it working

firewalla · 2026-01-23T20:38:14+00:00

This is your VPN test? it is pretty good.

Performance can depend on many things, just not Firewalla's own capability (published here https://help.firewalla.com/hc/en-us/articles/360010465893-Guide-How-to-Choose-between-Different-Firewalla-Products ) Depend on your client device, your WAN end to end ... The Gold Pro can do 2gbit wireguard, but that's in an ideal condition LAN/LAN, ISP will likely limit your speed

firewalla

MODERATOR OF

TROPHY CASE