This is one of the better routers on the market — and it still has gaps that matter. Real-time intrusion detection and prevention runs locally on the device. Without router-level VPN or strict network segmentation, your work laptop, banking sessions, security cameras, and any infected smart device all share the same flat network.
A B grade is a relative ranking in a market where the floor is low. The gaps are real, they just aren’t urgent.
-
Built-in IDS/IPS - no subscription required
Real-time intrusion detection and prevention runs locally on the device. No cloud required, no ongoing subscription. Alerts sent to your phone.
-
VPN server + client built in
WireGuard and OpenVPN server included. Encrypted remote access to your home network from anywhere - no separate VPN subscription needed.
-
Network segmentation + device isolation
Separate segments for IoT, kids, guests, and trusted devices. Devices in different segments cannot reach each other without explicit rules.
-
A small gap that still touches every device on this network
A small gap, not an urgent one — but it still touches everything on this network: your work laptop, your phone, your security cameras, and any guest device that joins the Wi-Fi.
Show technical detail
Hardware manufactured in China: Firewalla is a US company not subject to Chinese intelligence law. Hardware is contract-manufactured in China - comparable supply chain exposure to most consumer electronics.
If a new vulnerability is found for your Firewalla Gold, we'll email you. One email per incident. No spam.