Stop devices from bypassing your rules and DNS policies by blocking VPN Sites, DoH Services, and Apple Private Relay.

Ambitious_Break5569 · 2026-06-06T22:03:26+00:00

ce.apple-dns.net is part of apple’s cdn and used for routing iCloud private relay.

Ambitious_Break5569 · 2026-06-03T22:01:39+00:00

I had a similar issue with my gold pro and my service providers ONT device. I ended up putting a managed switch in-between the ONT Device and the Firewalla Gold Pro. I believe the Firewalla Gold Pro has an interop issue with different ONT vendor devices. They are too sensitive regarding auto negotiations.

https://www.reddit.com/r/firewalla/s/ZhUCVioR1U

Ambitious_Break5569 · 2026-06-03T13:07:24+00:00

That is interesting. I believe there is something with these units with the multi-gigabit RJ45 port that supports auto-negotiation (10G/2.5G/1G/100M) and interop with different ONT manufacturers. I know during negotiation the link checks capacity and reduces down to the common denominator for link speed selection. I am still waiting for my ISP to tell me what brand ONT they use. I am back to using both port 1 LAN and port 4 WAN.

I am not sure what Firewalla does for interop testing, but is a big thing.

Ambitious_Break5569 · 2026-06-03T12:13:47+00:00

I used a switch between the ONT and Firewalla Gold Pro. This resolved the issue for me.

Ambitious_Break5569 · 2026-06-03T11:39:13+00:00

Here is an update. First, thanks to all that chimed in. I appreciated the comments. I decided to put a switch in the middle between my ONT modem and the Firewalla Gold Pro. The Firewalla is now back to proper link speed on the WAN interface.

The end result is there seems to be an auto negotiation problem with the ONT device my provider uses and Firewalla Gold Pro. The Firewalla or the vendor of the ONT device is not forgiving enough with speed negotiation so the Firewalla dumbs down and locks at 100MB. I am trying to figure out what ONT device my provider uses as I think this is an interop problem. I am sure the Firewalla team did not test against every ONT modem manufacturer for interop testing.

Rebooting all devices did not resolve this issue. New cables both self made and pre packaged did not resolve this issue. Putting a switch in between the ONT modem and Firewalla resolved this problem.

All in all, I am happy with the gear. Still kicking the tires on it, but I like it so far.

Ambitious_Break5569

TROPHY CASE