Your Firewalla box automatically discovers all devices that connect to its networks. The Firewalla App allows you to explore the details of each device.
- Device List
- Network Flows
- Device Information
Tap on the 'Devices' icon, it will bring up the device list. The list will show all the devices in the network, all device groups you've created, and all the local networks (if you are using Gold or Purple series boxes).
From the devices list, you can:
- Search for Device: If you have many devices on your network, instead of scrolling up and down to find the one you are looking for, you can type the device name in the search bar.
- Create a Device Group: Here is a detailed guide.
- Rename Devices: Here is a detailed guide.
If you tap on the icon in the top right corner of the page, you can see all the view options for the devices list. From here, you can:
- See Devices with Reserved IPs: Like any other router, Firewalla allows you to reserve IP addresses for devices. Devices with reserved IP addresses will have a small pin next to their name on the Devices list. Furthermore, if you tap Show Devices with Reserved IP from the View Options menu, you will find all devices with reserved IPs listed together.
- See Past Devices: To prevent too many devices from appearing on your box, Firewalla automatically hides devices that have been offline for more than seven days. You can reveal all the hidden devices by tapping Show Past Devices from the View Options menu. Your Past Devices will appear at the bottom of your devices list, and from there you can update their settings, migrate them to another box, or delete them completely.
- Sort Devices: Tap on the sorting icon on the top right to sort devices by various attributes. For example, you can sort devices by Top Download/ Upload to find out which device is consuming the most amount of data in the last 24 hours.
The device list also shows individual live throughput while you're connected to your local network. You can watch our video tutorial for step-by-step instructions.
Tap on any Device/ Group/ Network in the list, it will bring up the detail page. It is divided into the following sections:
- Devices (on Group/ Network details)
- Network Flow
For Group and Network, if you tap Devices on top, you can view all the devices in the Network or device Group. For groups, tap Manage Device to add or remove devices.
To create a Device Group, please follow this guide.
If you are using Firewalla Gold or Purple series boxes, to manage Local Networks, here is a detailed guide.
The network flow section shows graphs of 60 minutes, 24 hours, or 30 days' bandwidth usage.
If you want to see the upload and download details, just tap on Network Flows under the graph, which lists all the top uploads, downloads, and the history of what your device has been doing. You can tap any entry to see more detail. If you find any of the flows to be suspicious, you can simply tap Block to block the destination or add a Route for that flow.
If the App is connected to Firewalla's local network, you can view the Live Throughput chart on the detail page of each device and network.
Note: If you are using iOS, and not able to see the live throughput chart when connected to the local network, the "Local Network" Access for Firewalla App is turned on:
- On your iOS device's home screen (iOS 14 or later), tap Settings > Privacy & Security > Local Network
- Turn on local network access for the Firewalla app.
The Control section shows the shortcuts of often-used device control features and all rules applied to the device.
With a tap on the button, you can either block all Internet access on the device or partially block a certain category of Internet access (Gaming, Video, Social, Porn). Each of the buttons can be toggled between:
- Block off (not block)
- Block for 1 hour (temporary block)
- Block on (permanently block)
You can also turn on/off features like Safe Search, blocking features such as Ad Block, and VPN for the device in the control section. Tap on "…" to view/configure more features.
In Firewalla App 1.44, we introduced Application blocking to Firewalla, so you can now block applications like Facebook, Youtube, Tictok with a single tap.
Tap on "Rules" under the shortcut, it brings up all rules applied to the device or the group/network this device belongs to. You can create rules or manage the existing rules from here.
This section shows the basic information about the device/group/network. For devices, it includes Device Name, IP Address, Local Domain, MAC Address, Manufacturer, and Status of a device, etc.
Firewalla creates a local domain name for each device; you can use the local domain as a more "friendly" way to access your devices instead of IP address.
The local domain name can only be changed on Firewalla Gold/Purple series boxes.
FAQ: What's the difference between Local Domain and Search Domain?
In DHCP mode and Router mode on Gold and Purple series boxes, Firewalla allows you to switch the IP allocation method of a device between:
- Dynamic: Firewalla will assign a random address within the IP range of the network the device joins.
- Reserved: The device will always get a static address you choose in the firewalla app.
- Do Not Allocate: Firewalla will not assign an IP address. In this case, you must set the IP on the device itself.
To change this setting, open the device in the device list and scroll down to find the IP Address of the device.
"Status" shows if this device is currently connected to your network (Online) or not (Offline). You can tap on "Status" to change notifications about the status of the device. When enabled, Firewalla will send you an alarm every time this device is disconnected (Offline) or re-connected (Back Online) to your network. These notifications are disabled by default.
You can also send a Wake-On-LAN (WOL) Message to a Device directly from the Firewalla App. Just navigate to a device's detail page, scroll down to the bottom, tap Status, and tap Wake Up. Watch a video tutorial for step-by-step instructions.
Many of you are familiar with the open ports button that shows external ports. We also have another feature called Device Port Scan, enabled by:
- tapping on the "+" button on the main screen
- tap on "Device Port Scan"
This will actively scan open ports on your LAN. You can view the "Ports" under the device detail.
Two types of ports will be listed here:
- Ports Forwarded: These are ports forwarded to the external either by you (manually) or by UPnP (automatically).
- Ports Not Forwarded: These are ports the device is "listening" on, but not forwarded on Firewalla, found by Device Port Scan.
For example, if Port 22 is found in the "Ports Not Forwarded" list, it means the device will respond to requests sent to its port 22 only from inside of your network, any requests from outside of your network will not be able to reach this device because the port 22 is not forwarded to the device.
Open Ports on the LAN are often much less risky than those from the outside, most devices will require these ports to operate, hence, having ports open on the LAN is not necessarily a concern. These ports are opened by the device on your LAN network, unless they are port forwarded, these ports are not accessible on the WAN side.
In Router mode or DHCP mode, you can tap Add Port Forwarding to add forward ports on this device to any external port. Here is a guide on How to set up port forwardings in DHCP mode.
If you using Firewalla Gold or Purple series boxes, Port forwards can be managed under Network > NAT Settings as well.
Main screen shortcut:
As of App release 1.44, you can add your most frequently used devices, groups, and networks to the box main screen. This allows you to block/unblock internet access, or dive into the device detail with one tap.
Up to three devices, Groups, or networks can be added.
In addition, if a device is recently viewed or edited, it will show up on the main screen as "recent" for your convenience.
Monitoring and Emergency Access
The Emergency Access button is used to control whether a device's internet access is controlled by Firewalla. When turned on, it means Firewalla can no longer block you from accessing any site.
The Monitoring button is used to control whether the device is monitored by Firewalla or not. When turned off, no traffic to that device can be monitored, flows will not be recorded, and no connection can be blocked by Firewalla.
Scheduled Emergency Access:
Similar to pausing rules, emergency access can be turned on for 15 minutes, 1 hour, always, and more importantly, any custom time you'd prefer. At the end of the specified period, Emergency Access will automatically be turned back off. No more forgetting to turn off Emergency access.
Tap on "Delete This Device" on the device detail page to delete a device. You may delete a device when it's no longer in your network, and you want to remove all information about it.
Be aware that Firewalla will discover the device as new when it connects to your network next time.