• Firewalla App version 1.65 is available to all users. 
• Firewalla App version 1.65.1 is available to all users. This release includes several new features for the Firewalla Access Point 7.  Learn more about App version 1.65.1.

---

App 1.65 Release

1. New Features
   1. Firewalla AI Assistant (Ask FireAI)
   2. App-Based Routing for Netflix, TikTok, and YouTube 
2. Enhancements
3. Bug Fixes
4. Known Issues

 

New Features

1. Firewalla AI Assistant  (Ask FireAI)

Introducing the Firewalla AI Assistant (Ask FireAI) – the latest smart assistant built right into your Firewalla app. Available on Firewalla Gold and Purple series boxes.

Whether you need help understanding an alarm, learning about unknown domains, or identifying unknown devices, this new AI-powered feature simplifies your experience and helps you decide how to control and protect your network. Learn more about FireAI here.

• Firewalla AI Assistant is optional. It is not active by default and does not run in the background. It is only active the moment you use it.
• If you wish to hide the FireAI buttons, turn them off under Protect from your box's main screen.
• Personal or sensitive information is never sent to the cloud or used for AI model training. 

Disclaimer:

While we strive to provide accurate and helpful responses, AI-generated content may not always be accurate, complete, or up-to-date, and it is not a substitute for human judgment. Do not rely solely on AI responses for critical decisions, including security matters.

Firewalla is not responsible for any consequences resulting from AI-generated outputs. Always verify important information with trusted sources before taking any action.

 

 

Ask FireAI is currently available for:

• Abnormal Upload, Large Upload, Gaming Activity, Video Activity, Porn Activity, and New Device alarm. If you ever receive an alarm that you don’t understand (e.g., an Abnormal Upload alarm to an unknown domain), you can ask FireAI to explain it to you.

• Domains in network flows. If you ever see a network flow to or from an unfamiliar domain, simply ask FireAI to look into it.

• Devices. Ask FireAI to look into any device to understand what kind of device it could be and who it may belong to.

 

2. App-Based Routing for Netflix, TikTok, and YouTube

If you want to route traffic through a specific interface when using certain apps, we've added routing support for Netflix, TikTok, and YouTube.

To create a route:

1. Go to your box's main screen > tap Routes > Add Route.
2. Under Matching, select App > choose from Netflix, TikTok, or YouTube.

Learn more about Firewalla Routes here.

 

 

Enhancements

1. Supported Changing DHCPv6 DUID Type per WAN Connection

Some ISPs require a specific DHCPv6 DUID type, and the default may not always be compatible. In response to user feedback, we've added support for changing the DUID type per WAN connection.

Note, this is only supported on single-WAN boxes; multi-WAN support is coming soon.

To configure:

1. Go to your box's main screen > tap Network > select your WAN connection.
2. Tap Edit (top right corner) > under Advanced Options, tap DHCPv6 DUID Type.
3. Select the appropriate DUID type > tap Save. 

 

2. Supported Changing MTU for WireGuard VPN Server

Some LTE providers require a smaller MTU value for VPN connections to work. In 1.65, we've added the ability to customize MTU value per client profile on WireGuard VPN Server. 

To change the MTU:

1. Go to your box's main screen > tap VPN Server > WireGuard Setup > select a client profile.
2. Below the QR code, tap MTU > enter the required MTU value > tap Save.
3. After the change, re-import the profile to your client device, then re-establish your VPN connection. 

Note: Please use caution when changing this setting. Most WireGuard clients do not require specifying an MTU value.

 

 

Bug Fixes

• Fixed an issue where the iOS app may crash when adding a VPN profile to a VPN group if a route is applied to the VPN connection. [Fixed on iOS app 1.65 (70)]
• Fixed the issues where the iOS app only supports creating 1 (instead of 10) site-to-site VPN connection to Gold SE boxes. [Fixed on iOS app 1.65 (69)]
• Fixed the issues where the iOS app may crash when editing a Link Aggregation Group created using app 1.64. [Fixed on iOS app 1.65 (69)]
• Fixed the issue where bi-directional allowed devices were not showing on both devices.
• Fixed the issue where WireGuard VPN may fail to parse the profile because of an unrecognized format.
• Fixed the issue where SSIDs with one character are not supported. 
• Other minor display issues and bug fixes. 

 

 

Known Issues

• Issue: IPv6 DNS queries will be recorded/blocked even if monitoring is off. 
  How to fix: This issue will be fixed in the next box update. 
  
  
• Issue: The large upload alarm may show an incorrect device name or MAC address if the device has changed its source IP within several hours of the activity.
  How to fix: This issue will be fixed in the next box update. 
  

---

 

App 1.65.1 Release

Firewalla App version 1.65.1 is now available to all users. 

1. New Features
   1. MLO (Multi-Link Operation) Support
   2. New Wi-Fi Test Option: Signal Strength
   3. QR Code Sharing for Firewalla Wi-Fi
   4. Access Point Events
   5. Change the 6 GHz Channels
2. General Enhancements
3. Enhancements
4. Bug Fixes
5. Known Issues

 

New Features

These features are specific to the Firewalla Access Point 7. 

 

1. MLO (Multi-Link Operation) Support (Preview Mode)

This feature requires: 

• Firewalla AP7 Desktop version 0.1.108.1.7.63 and above
• Firewalla AP7 Ceiling version 0.1.42.1.7.63 and above

In this release, we've added Multi-Link Operation (MLO) support on the Firewalla AP7. On each Firewalla Wi-Fi, enable MLO to allow Wi-Fi 7 devices to use multiple bands at the same time, which can improve speed, latency, and reliability. 

To enable MLO:

1. Go to your box's main screen > Tap Wi-Fi > Select an SSID.
2. Tap Edit (top right corner) > Scroll down to find MLO > Toggle it on.
3. Tap Save in the top right corner.

Note: MLO enforces WPA3. Mixed Personal security and Additional Microsegments will not be available on SSIDs with MLO enabled.

Warning: MLO client support varies greatly from device vendor to vendor, we are looking for more validation testing on this feature. 

This feature will be in "preview" or "alpha" mode until we get it tested with more real world devices.

To verify if MLO is working, you can use the Wi-Fi Test to see the RSSI and channels in use:

1. Connect your phone to your MLO-enabled SSID.
2. From your box's main page, tap Wi-Fi Test.

 

2. New Wi-Fi Test Option: Signal Strength

To help you better understand your connection to the Firewalla AP7, we've added Signal Strength as a new Wi-Fi Test option. 

To test your signal strength:

1. Ensure your phone is connected to the Firewalla AP7 Wi-Fi.
2. Go to your box's main screen > Tap Wi-Fi Test > Select Signal Strength for "Test Type."

 

3. QR Code Sharing for Firewalla Wi-Fi

We now support generating QR codes for Wi-Fi sharing! Create QR codes for any Primary or Additional Microsegment to allow other users to connect to the Firewalla Wi-Fi directly without entering a password or personal key.

To generate a QR code:

1. Go to your box's main screen > Tap Wi-Fi > Select an SSID.
2. Tap QR Code under the Primary or Additional Microsegment.
3. Tap Share to export and send the QR Code as an image.

 

4. Access Point Events

This feature requires 

• Firewalla AP7 Desktop version 0.1.108.1.7.63 and above
• Firewalla AP7 Ceiling version 0.1.42.1.7.63 and above

We've added new Access Point Events to your Network Events page to help you stay notified of your AP7 status and to help debug any connection issues.

These new events include:

• Access Point port connected/disconnected (2.5G or 10G)
• Access Point port speed change (2.5G or 10G)

To view your Network Events:

1. Go to your box's main screen > Tap Network Performance > Tap Recent Events.
2. Alternatively, go to Settings > Events. 

 

5. Change the 6 GHz Channels

In this release, we've added support for manually changing the 6 GHz channel on the Firewalla AP7.

To change the 6 GHz channel,

1. Go to your box's main screen > Tap Wi-Fi > Access Points > Select an Access Point.
2. Scroll down > Tap Channel under the 6 GHz Band section.
3. Select Manual > Choose a channel > Tap Save.

Note:

• Changing the 6 GHz channel is only supported on the root AP7 (i.e., the AP7 that is directly connected to the Firewalla Box or a switch connected to the Firewalla Box). 
• Any AP7 connected wirelessly will follow the same 6 GHz channel as its upstream AP7.

 

 

General Enhancements

• Quick iOS 26 Dev Beta compatibility fixes.
• Supported Amazon Prime for User's activity detection.  
• The Access Point limit has been increased from 10 to 20 — you can now pair up to 20 Firewalla AP7 units with your box.

 

Enhancements

• Included additional port details in Box Port Connected/Disconnected Events. 
• Added support for searching AP7 features through Global Search. 
• Added Rx/Tx Rate information to the AP7 detail page when connected wirelessly. 
• Added a warning if PoE power is insufficient on the Firewalla AP7 Ceiling. (Requires AP version 0.1.42.1.7.63 and above)

 

Bug Fixes

 

Known Issues

• [MLO] When MLO is enabled, some iPhone devices may randomly connect to Wi-Fi without using MLO.
  How to fix: Disable and enable MLO on the Wi-Fi, then reconnect the iPhone to it. 
• We are looking for more real world testing of various MLO modes.