Help us make the Firewalla AP
Pinned Featured
- Building a Zero Trust Network with Firewalla
- Firewalla Tutorial: Segmentation and Microsegmentation with AP7
- Early Access hardware is the FINAL production unit
- AP software in BETA.
-
Compatibility Requirements:
- Gold, Gold Pro, Gold Plus, Gold SE: Must run Beta software.
- Purple, Purple SE: Must run Early Access software.
- Firewalla must operate in Router mode.
- Firewalla App must run Beta software.
- Availability: USA customers only.
- Shipping: 7–37 days post-order, in waves (FIFO).
- Order Limit: Soft limit of 3 units per order; exceeding this may delay shipment
- Early access signup ends 12/30/2024 at 11:59PM PST.
- A coupon (small discount) will be sent to early access sign-ups before 1/2/2025.
- You do NOT need to sign up to order.
- We started an AP7 Community Page, please post your questions here
- Full Integration with the Firewalla Security Stack
- Zero Trust Network Architecture
- VLAN Segmentation and Microsegmentation Support
- Easy to install, managed anywhere
- Wi-Fi 7, faster and more reliable
- Wi-Fi Mesh with Ethernet or Wi-Fi backhaul
- Firewalla running in router mode is required
- 8 Spatial Streams, tri-band, low-power indoor unit
- 10Gbit + 2.5Gbit Ethernet Interface
- Early access and beta are available only in the USA. (EU and other countries TBD)
- Price for beta units with discount: $299 to $349
- Final price after 1/20/2025: We don't know; it depends on the tariff
- Tentatively, early access/beta sale starts in early January 2025
Key Principles of Zero Trust
- Segmentation and Microsegmentation: Divide your network into smaller segments to limit the lateral movement of threats.
- Least Privilege Access: Grant users and devices only the minimum access necessary to perform their functions on the network.
- Continuous Monitoring: Continuously monitor and verify the security posture of all users and devices.
We usually run a pre-sale cycle, but due to the political changes (new President), it is not possible for us to pre-sale and build units without knowing possible tariff impacts. Instead, we’ve used the sale proceeds from BFCM to pre-purchase a batch of units.
The AP7 units should be built soon and be available for ordering. We plan to split the orders into groups: (This plan is still tentative, we may also merge beta+early access together)
- Early Access (for our earliest supporters at the lowest price, available mid- to late-December 2024. Must be running Firewalla Gold (v1 & v2), Gold SE, Gold Plus or Gold Pro in router mode)
- Beta Access (about 1 month later, available mid-January 2025. Must be running Firewalla Purple or Gold series units in router mode)
- Production (to be decided after 1/20/2025)
- For details please refer the the status update section below
All units will have the final production hardware, software will be in early access/beta.
- Limited number of units available
- Limited to 3 units per customer
- Early access unit will be using early access software
- Beta access will be using beta software
The Firewalla AP7 Ceiling Mount will come a couple of months after 1/20/2025. It will seamlessly integrate with the FWAP7 Desktop units.
Spec
- Triband 2.4Ghz 2x2, 5Ghz 2x2, 6Ghz 4x4
- 8 Spatial Streams, 320Mhz channel support 6Ghz
- Network Interfaces: 10Gbit RJ45 + 2.5Gbit RJ45
- VLAN
- PPSK+WPA2 Support (Personal Key)
- Mesh with Ethernet or Wi-Fi backhaul
- Dimensions: 5.43 x 3.15 x 7.48 inch
- Item Weight: 1.4 lb
- Power: 30W
- Compatible with and Required: Firewalla Gold / Firewalla Purple in router mode
Status Update: 12/10/2024
- The initial batch of APs is nearly complete.
- We plan to ship some units by air right around or after Christmas to reduce shipping costs.
- Shipping optimization is under consideration to keep the beta/early access pricing closer to $299.
- Apps version 1.64 and 1.980 are targeted for "early access" release during the week of 12/16. These updates will include exciting new features and code support for the Firewalla AP.
- Sales are expected to begin in early January, with units shipping within seven days of order placement. (The exact date will be confirmed next week.)
Status Update: 12/17/2024
- The Firewalla AP7 is coming very soon!
- We are aiming for 1/7/2025 9 AM PST as the Early Access purchase date, but we'll let you know if anything changes! (if the shipment is late, then this date might be pushed back to 1/14/2025)
-
@Andre yes a signal detector feature would be really cool. Not sure about applicability of the utility for me and most end users but it would give me peace of mind knowing what is going on at least in the immediate area. Might be too much to also ask for a feature that identifies the direction of the signal. I lost a few IoT devices somewhere in my house and it would be great have an idea of where to start looking:)
-
Ideally the APs would automatically change channels when interference is detected. WiFi is very dynamic and third party APs can come and go at any time. I use Ruckus APs, and they monitor the RF spectrum 24/7/365 and can change WiFi channels automatically based on real time RF conditions. And you can place guardrails on the changes, such as defining which channels it can consider using or how often the scans happen. Relying on a human to read a spectrum diagram and making a decision, while very "nerdy" and "cool" is not ideal.
-
Derek Seaman
Maybe you right about Ruckus APs, I never used them but people say they’re great APs, although very expensive if you want the latest and greatest like Ruckus R770 which cost $1,587.50 with a discount:)). In my case I never had great experience with Auto Channels selection so I don’t like to use Auto in my APs. -
Well, I just ordered two TP-link Archer BE900 from Amazpn.com at a discount. After fast shipping fee and our taxes I paid less than 1600 euros for two while a single unit is over 1000 euros in Finland (scalping prices).
Now I have WiFi 7 with 1x6 Ghz + 2x5 + 1x2.4 and
with ports 2x10G+4x2.5G. The other 10 port can be for RJ45 / fiber.
Now I am ready for the Firewall testing. Let threre be 10G Pro!
By the way: all my main cables are cat 7.
Any advice on install, deployment etc. I never did this before. -
@Andre Ya I have three R770s, but got them for $870 each through my company. They are great, but not aimed at the consumer market so setup is more complicated than something like Eero. For the average Joe I wouldn't recommend them..not because they aren't amazing, but rather due to the needed nerdy tweaking to really make them shine. If Firewalla aimed for something better than Ubiquiti, that would be a win.
-
@Andre U7 Pro Max has only 8 streams, but Archer BE900 has 16 streams.
BE24000
• 6 GHz: 11520 Mbps (802.11be)
• 5 GHz-1: 5760 Mbps (802.11be)
• 5 GHz-2: 5760 Mbps (802.11be)
• 2.4 GHz: 1376 Mbps (802.11be)
That's why BE24000 = BE900. Two CAT7-cabled together through 2xWalls.
I am ready for the Firewalla Gold 10 Pro testing (by chaining these).
1-5G->FW1O->10G->BE900->2.5G(TAB,TV,PRT)+10G->>BE900(TAB,TV)
Note: a 32GB/4TB laptop goes to FW10 in Study,
where the first BE900 WiFi feeds my phones & Alexa 15 & bathroom washer
the 2nd BE900 WiFi feeds family phones, FB Portal 15" & kitchen fridge
Yes, no Wifi 7 clients but the laptop - yet. (2025: all phones & tablets?)@Firewalla
I am connecting the FireWalla Gold 10 Pro to the university VPN (me=client).
I am getting both streaming lessons and downloading videos.
If the FW10 processes VPN at the speed of 500...600 M
then I only need 1G in (or 500M), right? -
I just had an idea come to me this morning that would be cool if it could be implemented in any future Firewalla AP. Would it be possible to implement Multi-PSK authentication and have a toggle to optionally tie some PSKs to User/device groups? That could allow devices to keep Mac Randomization turned on but still auto-magically track any new devices based on the PSK in-use. Would also allow for easier separation of guest and IoT devices without needing to broadcast specific SSIDs out.
Am thinking that this could all be done when creating the PSK. Have an option in the menu to select which network you want the PSK to join and then have an optional toggle to associate it with a User or group. (Thinking make the user/group thing optional toggle in case there's a use case where you don't want to map some PSKs to a specific user/group).
-
With the Firewalla Gold Pro roll out, everyone must be pretty busy, and excited. I'm curious if there any idea when Firewalla AP's / switches may possibly roll out? I'm asking as I need to replace mine and would look for an interim plan if there was a targeted quarter for introduction that could be mentioned.
-
I want to upgrade to Wifi 7 as well, it makes sense for taking full advantage of the Gold Pro horsepower.
Prices started becoming more affordable as more devices hit the market but I'll definitively wait and see what FW come up with, I think it makes sense to have an integrated FW ecosystem as much as possible. 2025 seems more realistic expectations than this year. -
I really want a WiFi 7 AP and have convinced myself to hold out for the FW solution since I like the company engagement, product, and community so much (also, you're not going to make me wait THAT long, right??).
With my limited knowledge of networking (and less than 1 month of hands on FW usage), I've been wondering what benefits an all FW system would net me? Just the 1 stop app experience or is there something else?
Please sign in to leave a comment.
Comments
648 comments