If you have any problems pairing with the Firewalla Gold series box, please consult the Firewalla Gold Installation Troubleshooting. 

Also, feel free to email us at help@firewalla.com; it will create a support case, and our engineers will help you directly.

• STEP 1: Download and Install Firewalla App
• STEP 2: Get to Know the Hardware
  • Gold Original, Gold Rev B, Gold Plus
  • Gold SE
  • Gold Pro
• STEP 3: Wire Up the Box
  • STEP 3.1: Set up as a router (Router Mode) - Recommended
  • STEP 3.2: Add to the existing network (Bridge Mode)
• STEP 4: Pairing Firewalla App with the Box
• STEP 5: Get Started
• How to Mount the Unit
• Useful Links

STEP 1: Download and Install Firewalla App

STEP 2: Get to Know the Hardware

Model: Gold Original, Gold Rev B, Gold Plus

• Firewalla Gold has 4 fully routable Ethernet ports, numbered 1, 2, 3, 4.
• Port #4, the one with the yellow square, is the default WAN port in Router Mode.
• Access the unit’s console with the Serial Console port. Please DO NOT connect Ethernet cables to this port.
• When you first receive the box, all the ports have dust covers on them. If you are not using a port, please leave the cover on.
• Gold will always power on automatically when plugged into power.  

• The Power Button shuts down the unit. (Long-press the button for 5 seconds to shut it down)
• A red Security Dongle with the Firewalla logo is plugged into one of the USB ports. This is for box pairing and activation. Please DO NOT remove it. If you want to switch the dongle to the other USB port, you may (for example, to use Wi-Fi SD).
• The HDMI port can connect to a display monitor. See Fun Things To Do with Firewalla.
• The Reset Button will reboot the unit; it is NOT for a factory reset. See How to reset Firewalla box?  

The Gold is passively cooled, so please place the unit in a well-vented area.

The Aluminum case conducts heat well, so it will feel hotter when you touch it.  From our manufacturer: "The surface temperature will reach 60°C / 140°F when the room temperature is 31°C / 88°F, and all CPU cores are 100% loaded".

Model: Gold SE

• Firewalla Gold SE has four fully-routable Ethernet ports. 
  • Ports #1 and #4 are 2.5G ports.
  • Ports #2 and #3 are 1G ports.
  • Port #4, the one with the yellow square, is the default WAN port in Router Mode.
• When you first receive the box, all the ports will have dust covers on them. If you are not using a port, please leave the cover on.
• Gold SE will always power on automatically when plugged into power.  

• A red Security Dongle with the Firewalla logo is plugged into one of the USB ports. This is for box pairing and activation. Please DO NOT remove it. If you want to switch the dongle to the other USB port, you may (for example, to use Wi-Fi SD).
• The SD Card Slot can reset the box by reflashing its installer image. 
• The HDMI port can connect to a display monitor. See Fun Things To Do with Firewalla.
• The Reset Button can reset the unit. See How to reset Firewalla box?   

Model: Gold Pro

• Firewalla Gold Pro has four fully routable Ethernet ports. 
  • Ports #1 and #4 are 10G ports.
  • Ports #2 and #3 are 2.5G ports. 
  • Port #4, the one with the yellow square, is the default WAN port in Router Mode.
• When you first receive the box, all the ports will have dust covers. If you are not using a port, please leave the cover on.
   
• A red Security Dongle with the Firewalla logo is plugged into one of the USB ports. This is for box pairing and activation. Please DO NOT remove it. If you want to switch the dongle to the other USB port, you may (for example, to use Wi-Fi SD).
• Access the unit’s console with the Serial Console port. Please DO NOT connect Ethernet cables to this port. This port does NOT supply power.
• The HDMI port can connect to a display monitor. See Fun Things To Do with Firewalla.
• The Reboot Button can reboot the unit.
• The Reset Button can factory reset the unit. See How to reset Firewalla box?  

• The Port Port is on the back of the unit. Gold Pro will always power on automatically when plugged into power.  

STEP 3: Wire Up the Box

Firewalla supports two main modes to enhance your security. We highly recommend using Firewalla Gold in router mode. In this mode, Firewalla Gold will become your main router, and it will manage your network inline between your network and your ISP modem/router.

• STEP 3.1: Router Mode Setup

If you want to keep the existing router as the main routing engine, you can use Firewalla's "transparent bridge mode." Firewalla will act as a bridge between your existing router and another switch. Learn more about bridge mode. 

• STEP 3.2: Bridge Mode Setup

STEP 3.1: Set up as main router (Router Mode) - Recommended

Not all networks are the same, and not everyone has the same service providers. To make your life simpler, the Router mode configuration guide demonstrates how Firewalla boxes can run as routers in different ways. 

Scenario A. You have an ISP-provided integrated modem/router

Connect Gold's WAN Port to the LAN Port of the modem/router, then connect your devices to Gold's LAN ports. 

1. You will need extra Wi-Fi devices such as a Wi-Fi router, Wi-Fi mesh router, or access point (a Wi-Fi-only device) to connect to Firewalla. It is best to run these devices in Access Point mode. 
2. If you want to avoid double NAT in your network, you may turn off the routing function of the modem/router (change it to Bridge mode). 
3. If you do not have an extra Wi-Fi router and don't want to purchase one, please try Simple or DHCP mode (note that support for Simple and DHCP mode may be reduced soon. We highly recommend using Bridge or Router mode).

Scenario B. You have your own router connecting to an ISP modem

Connect Gold's WAN Port to the LAN Port of the modem, then connect the router's WAN port to one of the LAN ports of Gold. After connection, please configure your router in AP mode or Bridge mode.   

Scenario C. You have a mesh network 

Connect Gold's WAN Port to the LAN Port of the modem, then connect the primary device (not the satellite device)'s WAN port to one of the LAN ports of Gold. After connecting, please change the mesh router into AP mode or Bridge mode. Check out our guide on specific brands/models.

If you have a Google Wi-Fi Mesh Network, here is an additional Guide.

STEP 3.2: Bridge Mode

Firewalla Transparent Bridge Mode places a Firewalla device physically in the middle of an existing network without modifying the IP address of the network. Use bridge mode if you'd like to:

• Preserve existing router functions due to compliance or the complexity of replacing the router.
• Filter traffic without creating additional networks.

Scenario

Connect Gold to a LAN Port of the router, then connect your devices to Gold's other ports. All network flows passing through Firewalla will be monitored and controlled. 

Learn more about bridge mode. 

STEP 4: Pairing Firewalla App with the Box

Before pairing, 

1. Reboot the modem/router before installing Gold in router mode. Some service providers may require this when using a new router. 
2. Make sure your mobile phone has internet access. If you are setting up the Gold in router mode, we recommend using cellular data. If you don't have cell service, you can connect to an existing Wi-Fi network. If you don't have cellular data or Wi-Fi access, here's a workaround for setting up Gold as your main router without connecting your phone to the Internet: How to set up Gold/Purple as your main router if your phone has no Internet access.
3. Turn on the DHCP function on your router if you have turned it off before. Otherwise, Gold may not be able to get its IP Address from it. 

Open the Firewalla App on your phone, tap on the "+" icon, choose Firewalla Gold, and the App will guide you to wire up the box. For Gold Pro, choose Firewalla Gold Pro.

When Firewalla Gold is found, the App will ask you to scan the QR code on the bottom of the Gold box. 

Known issue: The Firewalla Android App may accidentally pick up the wrong code (serial code) next to the QR code. You can use your finger to cover up the serial code before scanning.  

Next, select the mode based on the wiring you did in STEP 3. Once the mode is set and the Box is wired up correctly. Firewalla will automatically set up the network.

STEP 5: Get Started

• Getting Started With Your Firewalla
• Migrating data from other boxes
• Firewalla Gold commonly asked questions and known problems
• Network Configuration and Segmentation using the Network Manager 
• Device Groups
• Manage Rules
• Network Segmentation Use Cases
• Troubleshooting guide
• Try our beta web interface
• Other Firewalla Gold documents

After Firewalla is installed, an Auto-Configuration Wizard will appear on the app UI to help you quickly customize the box by asking a few questions. It can be triggered by tapping Settings > Features >  Customize Now. 

This wizard may turn on/off features, create essential rules, and more. All configurations can be changed later. Watch a video tutorial or read more about this feature in our article about using the Auto-Configuration Wizard.

The Auto-configuration wizard will only deal with basic configurations. To better secure your network, please follow the Getting Started With Your Firewalla. If you have any questions, please join our community forum here.

How to Mount the Unit

• Firewalla Gold - Original, Gold Plus
• Firewalla Gold SE
• Firewalla Gold - Rev B
• Firewalla Gold Pro

Firewalla Gold - Original, Gold Plus