App Release 1.47 is available on iOS / Android. Box Release 1.973 is supported on:
New Features
- WireGuard VPN Client
- Per-device and per-network Live Throughput
- Multiple VPN Clients
- Per-device management for WireGuard VPN clients
1. Wireguard VPN Client
In addition to OpenVPN, the Firewalla VPN client is now supporting WireGuard VPN. If you have a WireGuard VPN Server, you can now connect any devices in your network to it with one tap.
Wireguard VPN Client only supports Remote Access VPN and 3rd-party VPN.
2. Per-device and Per-network Live Throughput
If the App is connected to Firewalla's local network, you can now view the Live Throughput chart on the detail page of each device and network.
3. Multiple VPN Clients
You can now connect different devices to different VPNs at the same time. On any device/ network/ group detail page, tap the VPN button and select which VPN to connect to.
Up to 5 active VPN connections are supported.
4. Per-device management for WireGuard VPN clients (Gold & Purple Only)
For devices that are connected to the Firewalla WireGuard VPN server, you can now manage them just like your local devices. The VPN devices will be shown up on the device list, tap any of them, you can view the network flows, basic info and apply any rules or features individually.
This feature is available for Wireguard VPN devices only. OpenVPN devices may still be managed as a whole VPN network.
Enhancements:
- Active Home Screen - Monthly Data Plan
If you enabled Monthly Data Plan, you will now find a new widget on your Box's main screen. It shows you how much data (and its percentage) has been used in your current month, and how many days are left in the cycle.
- New Active Protect Mode: Strict
When this mode is enabled, Firewalla will by default take block actions more aggressively than the default mode. (in both modes, an alarm will always be generated) Release 1.973 also has an enhancement to better block applications.
- View all devices by Networks, Groups, and Devices not assigned to any Group.
- Able to edit the subnet for WireGuard and OpenVPN network.
- Able to turn on/off mDNS reflector per local network in Box Settings -> Advanced -> Configurations -> mDNS Reflector. (Gold and Purple Only)
- Able to mute new device alarms per network from Alarm Settings -> New Device -> Mute -> Add Network. You can also mute them by tapping the "…" on any new device alarm. (Gold and Purple Only)
- Able to release devices from quarantine with one swipe.
- Able to migrate all devices and feature settings from one box to another.
- Support 3rd party VPN client with certificate authentication.
- (App 1.47.1) "Allow" actions are now directional. You can pick to allow for outbound connections or both directions.
Bug Fixes:
- Fixed the issue of not being able to search all alarms.
- Fixed the issue of not being able to edit the Multi-WAN setting directly.
- Fixed the issue of not being able to import profile when creating remote access VPN.
- Fixed several UI and translation issues.
Known Issues:
- Devices' traffic may not route to the VPN server correctly if some active VPN profiles are removed from the App and then the box is downgraded to 1.972. The fix is already under testing and will be pushed to the early access branch in the next few days.
- For Firewalla Red, Blue, Blue Plus, the Shutdown button on the Advanced page has been removed. If you want to shut down the box, you can unplug the power cable directly.
Comments
14 comments
Just checking to make sure I understand, having multiple VPN clients running at same time is not ready in this build, correct?
I am seeing issue where having two run at same time is giving issues where one will disconnect and never start back up, unless I delete the profile and re-create it, this is with Wireguard, I seem to be having more success with one Wireguard and one OpenVPN running at the same time.
One bug, WireGuard server connection. The notification states that the connection type is OpenVPN.
@Andy, the multiple VPN client should work. Are your client all connect to the same profile or different?
Different profiles, but seems if I try two WireGuard profiles at same time, I get a disconnect/reconnect error multiple times.
I was able to have a WireGuard and OpenVPN to 3rd party work without issue.
I have also seen where if I go and start deleting the profiles, old deleted profiles show up again.
I'm going to do some more testing, just trying to get hold of another 3rd party vpn provider WireGuard profile.
Figured out the issue, when I was building the WireGuard profile on the 3rd party VPN site, I needed to create another device, as the provider saw the same device trying to log in twice to 2 different locations.
Not sure on the issue with seeing old VPN profiles show up again, when I try to delete other profiles, does not always happen, but saw it occur about 3 times.
Feedback:
1. We can now see throughput when connected to VPN, Thanks.
2. WireGuard VPN client performance is so much better than OpenVPN (approx 3x for me). Thanks
3. VPN connection alerts when my phone connects to FWG VPN server, are erratic and doesn't get generated most of the times
Some more feedback.
The bandwidth monitoring at the device level is erratic and inaccurate. The bandwidth monitoring at the interface level is fine.
Question regarding time limits that had been implied would be in this release 1.973, copied the original link below.
What is the status?
https://help.firewalla.com/hc/en-us/articles/360050897134-Can-Firewalla-limit-kid-s-activities-like-gaming-video-to-a-number-of-hours-per-day-
When are 1.973 and 1.47 coming out?
Beta usually runs for about 30 days, so the production 1.973 will likely be out middle to late September
Great....Can't wait to see it soon!!!
Great features!
Could you pass on a feature request for the future?
Historical per-device throughput flows. Being able to view the historical network throughput per-device and be able to configure how long to keep that data and view html/pdf reports of such would be amazing!
Hello, how do I upgrade my gold box to the last version?
Keith
All updates are automatic.
Please sign in to leave a comment.