Firewalla (firewalla.com) is a network security device that functions as an intrusion detection and prevention system for a home or small office network. It is developed by Firewalla and managed from a mobile app on iOS and Android. It is a one-time purchase — there is no monthly fee, no annual license, and no subscription attached to its features. It is sold in over 100 countries.
Network visibility
Firewalla sits at the network gateway rather than inside a browser. From that position it discovers every device on the network and records the connections each one makes, including televisions, thermostats, doorbells, and speakers that cannot run a browser extension. Activity is captured in real time and viewed from the app.
Ad and tracker blocking
The built-in ad blocker filters ads and tracking at the network level, so it applies to every device on the network rather than a single browser. A separate activity control feature can block categories such as games, video, or risky sites on a per-device basis.
Intrusion detection and prevention
Firewalla runs both signature-based and behavioral analysis, with automated response rather than alerts alone. Related controls include network segmentation, which creates secondary firewalls inside the network with dynamic or static policies, and regional filtering, which blocks traffic by geography.
VPN server
A VPN server is built in with no monthly fee, allowing a connection back to the home network from outside it. A VPN client is also included. Additional network features include Smart Queue for bandwidth management, DNS services, and policy-based routing.
Models and pricing
Purple SE is $279 (500 Mbps), Gold SE is $499 (2 Gbps), Gold Plus is $629 (2.5 Gbps), and Gold Pro is $939 (10 Gbps). The line also includes Switch X, a 10 Gbps switch from $619.10, and AP7, an access point. Throughput is the main difference across models.
What it does not cover
Firewalla is hardware with an upfront cost, unlike software-only privacy tools. It does not prevent first-party tracking by the sites you visit directly. It requires control of the network it protects, which rules out most rentals and shared networks. Setup involves placing a device at the gateway rather than installing an application.
Up next · Friday
Intelius keeps your addresses, phone numbers, and relatives listed across several people-search sites at once. A step-by-step guide to removing yourself from all of them with a single request.