Firewalla Orange: (2 Gbps) Multi-Gigabit Cyber Security Firewall with Wi-Fi 7
Availability: USA Only. Orange (UK/EU) version coming summer 2026, register here and get notified For New Users: Installation: After you receive the unit, please follow this Orange Installation Guide Getting Started: Firewalla is not a set and forget security device, it will require proper configuration and monitoring. To learn more: see Getting Started Guide Disclaimers: Inventory is very limited due to the DDR4 shortage ---- For POWERED BY PROVIDING Deep Insight helps you see the network at up to 2 Gigabits per second. Control your network with intrusion prevention (IPS) and network segmentation, adding virtual walls around your connected devices and locking them down. Active Protect Rules block malicious sites, mitigate hacks, and enhance security. Building a Better Network With Zero Trust Zero Trust security protects your network by trusting no one by default and verifying everyone, everywhere – powered by Firewalla VqLAN and Device Isolation. Simple To Start Sophisticated When You Need It Advanced Security and Networking Features at Your Fingertips Powerful Hardware > 2 Gigabits Performance for Now and the Future Use the Orange for Wi-Fi at business or home, or take it on the go to secure your Zero Trust Network when connected to shared or public Wi-Fi. Simple Wi-Fi Setup Provides Wi-Fi coverage perfect for your cozy hotel room, home or office. Wi-Fi Tethering for Multiple Wi-Fi WAN Support Use the Wi-Fi interface as a secondary WAN. If your primary network is down, temporarily switch your network to your phone’s hotspot for improved availability. Zero Trust Network on the Go Bring the Orange wherever you go to secure any public Wi-Fi instantly with your own Zero Trust Network. TRUSTED AND LOVED SINCE 2017 Firewalla is Running Across 100+ Countries More Reviews Firewalla simplifies your experience and helps you decide how to control and protect your network with its AI-powered feature. Ask AI for help with: Identifying unknown devices Understanding alarms Troubleshooting your network Learning about unknown domains See and understand your network like never before: Network flow detail Blocked flows Real-time throughput Firewalla can protect your device automatically from cyber threats and alert you when they happen. Active Protect: Intrusion detection and prevention neutralize attacks and threats before they happen Behavior Analytics: analyze device action and detect abnormal behavior Control: take control of your network with Firewalla’s powerful rules engine Stop Threats Before They Reach You Advanced Threat Filtering & Bypass Prevention Protect your network from domains often used in phishing and scams, and stop devices from getting around your policies. Region Blocking Using GEO-IP Filtering, a technology that can block network traffic from & to entire countries, you can effectively stop hackers from remotely attacking your network. New Device Quarantine Protect your network by automatically placing new/unknown devices in a quarantine group. You can apply any content filtering or rate limit rules to this quarantine group. Security Scan Identify security risks across your network, including open ports and weak passwords. Network Segmentation Network segmentation divides your network into regions with dynamic and static policies/rules. The Orange will support VLAN-based segmentation. Actively quarantine any device and restrict its behavior on the network Segment important devices from the rest Apply policies to manage segment-to-segment traffic Great for creating a network for “work” and another for “kids” Microsegmentation with VqLAN Firewalla VqLAN offers simplified network segmentation by dividing a network into smaller, isolated segments to limit the spread of threats without requiring network-wide changes. If you already have groups defined, you just need to turn VqLAN on. Enterprise Wi-Fi Security Use WPA2-Enterprise or WPA3-Enterprise to identify users and strengthen Wi-Fi security. Devices connecting with unique usernames and passwords are assigned to specific users, ensuring only authenticated and verified users can join your Zero Trust Network. Device Isolation Support Completely isolate any of your devices from your network. Perfect for guests and devices that don't need to talk to each other on your LAN network. This will complement the existing Firewalla network quarantine and guest network feature. Rule-Based Least Privilege Access Zero Trust Networks should never fully trust any devices on the network. After your network is segmented and isolated, you can use Firewalla Rules or Policies to grant the device only the minimum permissions needed to reduce security risks. Block web pages, cut off access to devices, and remove Ads Block activities such as gaming, social, video, porn, gambling, and p2p Block domains or domains with wildcards. Block IP addresses and subnets Blocking based on location and region Block any port Get notified when devices are online or offline Give exceptions to blocking rules Put everything on a schedule Make Your Privacy a Priority with VPN Are you comfortable sharing your data when using public Wi-Fi or traveling to regions where the internet is filtered or controlled? Introducing the Firewalla VPN server, a VPN server that runs inside your network without charging a monthly fee. Protect privacy when using public Wi-Fi No monthly fee or bandwidth throttling Surf the web virtually “at home” from anywhere Bypass internet filtering and monitoring when traveling Easy remote access to your work network Supports OpenVPN, WireGuard, and AmneziaWG Securely Connect to Any Device VPN Client With Firewalla’s VPN Client, you can connect any devices in your network to OpenVPN, WireGuard, and AnyConnect-based services. Connect any IoT devices, like Apple TV, to third-party VPNs Remotely connect your devices to another Firewalla Connect two sites together with a site-to-site VPN and access devices securely both ways Connect to and route to multiple VPN services. Connect to a group of VPN services for improved availability. Say Goodbye to Annoying Ads Website ads and trackers have been frustrating internet users for years. That’s why Firewalla's built-in ad blocker makes sure you don't see ads and the ads don't see you. Block ads across all devices DNS cache to speed up all other lookups Protect Your DNS DNS over HTTPS Traditionally, DNS requests are sent in plain text between the client and the DNS server. DNS over HTTPS (DoH) sends DNS requests encrypted over HTTPS. It makes DNS exchange more secure and protects user privacy. Unbound Unbound is a validating, recursive, caching DNS resolver installed locally on the Firewalla box, which helps increase your online privacy and security. NTP Intercept: Securely Sync Time Intercept NTP requests and process them locally on the Firewalla, reducing your network's risk exposure and saving bandwidth. With a simple tap of a button, you can: Restrict internet access Stop any devices from playing online games Block social networking Monitor online activity Receive online activity alerts Block malicious and adult content Block popular applications Put everything on a schedule Safe Search Safe Search is a feature used by major search engines like Google Search, YouTube, Bing, and DuckDuckGo to filter adult content out of search results. If anyone enters an inappropriate or suggestive phrase in the search bar, the results will be filtered for offensive content. Users Track and limit app usage for a set of devices. See exactly when someone was using certain apps Set time limits for different activities Regulate Network Traffic The Smart Way Advanced Smart Queue + Rate Limit Advanced Smart Queue prioritizes traffic and reduces delays (buffer bloat) when your network is heavily loaded. Prioritize and rate-limit applications, activities, or network flows Control congestion and reduce buffer bloat Smart Routing Policy & Content-Based Routing (PBR) PBR allows you to selectively route traffic based on a set of rules or the content type. For example, you can send all video traffic to a VPN Client or send all banking sites to a different WAN interface. Bandwidth Usage Insights Track Monthly Data Usage Worried about Internet usage limits or network performance issues? Firewalla Deep Insight provides a summary of hourly, daily, or monthly usage, allowing you to dig deep into any device and see the IP or domain address consuming bandwidth and stop it. Hourly, daily, and monthly bandwidth usage summary Per device bandwidth usage stats Deep dive into any device Identify which domain is consuming the bandwidth Tap to block Network Performance and Quality Monitoring A better network is also a network that enables you to have a much better experience. Firewalla provides tools to help you monitor and achieve better network performance. Wi-Fi / LAN performance WAN Performance Internet Speed Network Latency Network Packet Loss Extend Your Network with Firewalla AP7 Pair with Firewalla AP7 to extend your Zero Trust Network to every corner of your business or home. When using the AP7, Orange’s built-in Wi-Fi can only be used as an extra WAN (Wi-Fi LAN will be disabled). Test and Tune Your Wi-Fi Walk around your house or business to find Wi-Fi dead spots and tune your Wi-Fi connection in real time. Wi-Fi Roaming: see the access point you are connecting to Live Download and Upload speed graphs Latency and Jitter statistics Firewalla Orange is a software-based router, managed by the same intuitive Firewalla app. It has the capability to identify and shape your network based on rules you define, right at your fingertips. Static Routing PPPoE PPPoE over VLAN DHCP Static IP VLAN (Max 5) Bridge two networks together by inserting Firewalla Orange behind your existing router without additional configurations, and have Firewalla transparently secure your network. Firewalla MSP Lite (Web Interface) MSP Lite is free to use and will complement the mobile app for complex operations to help you manage and control your network. A mobile device is required to activate and use the web interface. For You and for the Future The Firewalla software started in 2016, and we have been enhancing it since. With the introduction of Red/Blue/Gold/Purple and now Orange, the software stack is constantly evolving and adding new features with your input. So expect even more features in the future! Learn more about the Firewalla Security Stack Manual Pages YouTube Tutorials Hardware and Performance Comparison Orange Purple Gold SE Built-in Wi-Fi Wi-Fi 7 Wi-Fi 5 - Wi-Fi Max Clients Around 50 Clients 8 Clients - Packet Processing Speed >2 Gbps 1 Gbps >2 Gbps Memory 2 GB 2 GB 4 GB Storage 32 GB 16 GB 32 GB CPU 64 Bit ARM 64 Bit ARM 64 Bit ARM CPU Cores 4 6 4 2.5 Gbit Interface 2 - 2 1 Gbit Interface - 2 2 OpenVPN 100 Mbps 120 Mbps 100 Mbps WireGuard VPN 350 Mbps 500 Mbps 350 Mbps Site to Site VPN 1x Connection 1x Connection 10x Connections Geo-IP Filtering 10 Countries 10 Countries Unlimited VLAN 5 (Max 6 Networks) 5 (Max 6 Networks) Unlimited Network Segmentation VLAN Only VLAN Only Yes VqLAN Yes No, with AP7 only No, with AP7 only Bridge Mode Yes Yes Yes Router Mode Yes Yes Yes Multi-WAN Wi-Fi Only Wi-Fi Only Yes Network Interface(s) 2 2 4 Power (Watt) ~5W to 16W ~7W to 9W ~6W to 10W Size 12.8 x 8.3 x 3 cm 9 x 6 x 3 cm 13 x 10 x 2.6 cm Weight 8.64 oz / 244 g 3.84 oz / 110 g 15 oz / 427 g Operating Temperature(with airflow) 32°F to 113°F 32°F to 113°F 32°F to 113°F Software: Firewalla Orange supports the same software features as Firewalla Purple. See the Purple column in our Software Features Comparison chart for details. Want to know more? And see how it works? Product Reviews Installation Guide User Manuals Any questions, please send us an email: [email protected] Specs Firewalla Orange Specs 4-Core 64-bit ARM CPU 2 Gbps Software Packet Processing 2048 MB Memory 32 GB Storage Package Includes: 1 Firewalla Orange Device USB-C USA style Power Adapter 1 Ethernet Cable 1 USB-C to USB-C Charging Cable One-year manufacturer warranty Shipping First shipment date is likely March or April 2026 Beta units may ship earlier. Final production shipment will be in FIFO waves USA orders will be shipped from California; shipping time is about 3 to 5 business days. FAQ Is there Wi-Fi? Yes. This Firewalla unit includes dual-band Wi-Fi 7. You may also disable the Wi-Fi LAN to use Firewalla AP7, or your own Wi-Fi access point/router in AP or bridge mode. Is there a monthly fee? There is no monthly fee. All standard features are included with your Firewalla device. For optional business features such as centralized multi-box management, we offer an additional service, Firewalla MSP (https://firewalla.net), that runs outside of your Firewalla device. Does Firewalla support Android and iOS? Yes and yes. A smartphone is required to use the unit. How easy is it to configure and use Firewalla? Firewalla is not a set-and-forget security device; it will require proper configuration, active security, and configuration management. Please see the Installation Guide and Getting Started Guide for details. Some security and networking experience is required. Return / Refund Policy The product can be returned for a refund within 30 days of receiving the item. The product is not refundable if parts or accessories are missing. Please see this page for details. Have more questions? Please email us at [email protected] or visit our community: https://help.firewalla.com Price Protection firewalla.com will gladly issue a credit for the difference between the price you paid and the promotional price, if your purchase was made online at firewalla.com and was within 30 days before the price change. Credits are typically issued within 7 business days.