← PART 1: Visibility

← PART 2: Control

← PART 3: Protect

← PART 4: Zero Trust Network Architecture

PART 5: Creating a Better Network

We started Firewalla to help you create a secure network. With the introduction of Router Mode for Firewalla Gold and Purple, we want to help you create a network that's tuned for a better experience, not just better security. And with the Firewalla Access Point 7, you'll have a faster and more reliable network with Wi-Fi 7.

This means: 

• Quality of service is enforced and measured
• Your network is available when you need it
• You have full control over everything that happens in your network

To Build a Better Network:

1. Network Performance and Quality Monitoring: Understand your network better. 
2. Improved Internet Availability and Backup: Back up your network, so it is always available.  
3. Smart Traffic Management: Monitor and control what goes through your network.
   • Rules: Control what traffic can or can not be on your network. 
   • Smart Queue: Decongest your network, prioritize important traffic, reduce delay, and make your video conference and phone calls smoother. 
   • Routes: Easily manage where your traffic is routed using policy-based routing. 
4. Bandwidth Usage Monitoring: Track data usage and prevent overages on your network.
5. Advanced Wi-Fi Settings and Visibility: Improve your network with the Firewalla AP7's Wi-Fi features.

A Better Network Solution:

1. Privacy Protection: Protect your privacy online, whether at home, in the office, or on the go.
2. Activity and Parental Control: Smart, flexible tools to enforce bedtime, track screen time, or safeguard against adult content.

1. Network Performance and Quality Monitoring

Firewalla Gold, Purple, and Blue Plus provide tools to help you monitor and better understand your network speed and quality, so you can make informed decisions to improve your network. 

Firewalla's Network Performance feature can help you:

• Measure WAN Performance: Detect network congestion and problems with your ISP
  • Network Speed
  • Latency
  • Packet Loss

• Measure Wi-Fi Performance: Understand and troubleshoot your Wi-Fi connection
  • Wi-Fi Roaming tells you when you switch to a different access point
  • Live Download and Upload speed graphs
  • Latency and Jitter statistics
  • With the Firewalla AP7, view Access Point Name, Channel, Frequency Band, and RSSI details

Learn more about network performance and quality monitoring.

2. Improved Internet Availability and Backup

While most consumers will only have one WAN (internet) connection, there are times when two WAN connections may be better than one. For example:

• Your primary internet is not stable and needs a backup internet connection.
• Your primary internet is slow, and you need to add another line for bandwidth (and redundancy).

Firewalla's Multi-WAN feature will help you manage a maximum of two WAN connections in either primary/failover or load balancing mode. You can measure the speed and quality of each WAN separately, as well as set different bandwidth estimates for each. Using a multiple WAN network should be no different than using a single WAN, if not a bit better, due to the added availability and bandwidth.

If you have the Firewalla Gold series:

You can use one of Gold's ports as a new WAN interface, just like your primary WAN.

Additionally, you can use the Firewalla Wi-Fi SD alongside the Firewalla Gold series to tether your mobile phone or another hotspot when your primary network is down. Firewalla's Multi-WAN support will automatically swap your main internet with your phone's hotspot and automatically swap back once your primary internet is up.

If you have the Firewalla Purple series:

Firewalla Purple allows a maximum of one Wi-Fi and one ethernet WAN connection for a total of two WANs. The Firewalla Purple (and Purple SE with the Firewalla Wi-Fi SD) can tether to your mobile phone and create a dynamic backup internet for your whole house while your primary WAN is down.

Learn more about multi-WAN configurations.

3. Smart Traffic Management

Firewalla also enables you to understand and fully control what traffic can travel through your network, how much bandwidth it can take up, and what route it takes.

Rules

Rules can be used to control traffic on your network and devices. The targets for your rules can be Applications, Categories (gaming, adult, video, etc.), Regions, or Network Flows (IP, domain, port).

You can customize your Firewalla rules to fit your needs. For example, you can:

• Schedule Rules: Customize network access with specific times
   
• Filter Access: Manage access (e.g., kids' or employees' access) by filtering out traffic based on content type (gaming, adult, video, etc.)
• Control Application Use: Limit how much time a device uses certain apps (e.g., Facebook, YouTube, etc.)
• Target Lists: Use predefined or self-defined target lists for complex rules
• Geo-IP Blocking: Block countries or regions off your network
• New Device Quarantine: Isolate new devices and prevent them from accessing the internet

Here's a video on how you can set and manage rules.

Learn more about Rules.

Smart Queue

The core function of Smart Queue is to help you to decongest your network, decrease buffer bloat, and allow everyone to have better video calls. This feature can be turned on with a single button, and if needed, you can further customize the policies behind it.

There are several things you can do with Smart Queue:

• Active Queue Management (AQM): Reduce latency (buffer bloat) across all of your flows automatically 
• Rate Limit: Limit and shape any traffic matching a category, an application, or IP/domain names
• Prioritization: Mark any traffic (e.g., Zoom or Webex) and make sure they are always ahead of the queue with the lowest delay

Here's a video about how to set up Smart Queue on your Firewalla.

Supported on Blue Plus, Gold series, and Purple series. Learn more about Smart Queue.

Routes

Your system's routing table usually manages network traffic and can be static or dynamic based on your network topology. Policy-based routing (PBR) is a technique used to make routing decisions based on your policies.

While traditional policy-based routing is based on the IP layer and the services the network is running, Firewalla's policy-based routing is much more flexible; it can be mapped to the destination category (gaming, video, etc.).  

With Firewalla policy-based routing, you can:

• Route Anything to Anywhere: Direct any traffic from any device over any interface
• Route Traffic over VPN: route traffic over the Firewalla VPN Server or a 3rd party VPN
• Route Traffic to any WAN: In a dual-WAN setup, direct traffic to any WAN connection, no matter if the WANs are set to failover or load balancing (e.g., always route Zoom or gaming from a low latency WAN interface)

For each route, you can choose the Route Preference: 

• Static: if the selected interface is not available, the traffic will be dropped. (Default)
• Preferred: if the selected interface is not available, allow traffic through an alternate route.

Here's a video about how to set up Routes on your Firewalla.

Supported on Blue Plus, Gold series, and Purple series. Learn more about Policy-based routing.

4. Bandwidth Usage Monitoring 

If you're experiencing network congestion or have a data cap from your ISP, Firewalla can help you avoid overage charges and understand your network better.

Firewalla can help you monitor:

• Live Throughput: View real-time data usage and find which devices take up the most bandwidth on your network.

• Overall Data Usage: Look into monthly or daily data usage for your network and stay within your ISP's plan limits.

• Data Usage per Device: In the Firewalla app, view the top devices and destinations by WAN or LAN data usage or use Firewalla MSP to generate reports for up to 180 days.

Learn more about Bandwidth Usage Monitoring.

5. Advanced Wi-Fi Settings and Visibility

Many consumer access points offer limited options to customize Wi-Fi settings and lack full network visibility. The Firewalla AP7 gives you greater control, with features that make it easy to view, manage, and optimize your network.

With the Firewalla AP7, you can:

• Sort devices by Access Point and Signal Strength to quickly see which devices are connected and how well they're performing. 
• View each connected device's SSID, Access Point, Channel, Signal Strength, and other connection details.
• Optimize Wi-Fi Experience with a single tap on the device detail page to improve its wireless connection.

In addition to device visibility and Wi-Fi optimization, the Firewalla AP7 includes advanced settings to better support your specific networking needs.

Supported on Gold and Purple series. Learn more about the Firewalla AP7 features here.

This is Part 5 of our A Secure and Better Network with Firewalla series:

• Part 1: Visibility
• Part 2: Control
• Part 3: Protect
• Part 4: Zero Trust Network Architecture
• Part 5: Creating a Better Network