Prairie Light Press Reader Preview of:
Network Security Essentials
A Guide to Securing Your Network with Firewalla Gold Plus
Preview
Network Security Essentials
A Guide to Securing Your Network with Firewalla Gold Plus
The following pages are an exclusive preview of Network Security Essentials: A Guide to Securing Your Network with Firewalla Gold Plus
Exclusive Preview from Prairie Light Press
Network Security Essentials
A Guide to Securing Your Network
with Firewalla Gold Plus
An independent, unofficial guide
Table of Contents
Network Security Essentials................................................................... 1
A Guide to Securing Your Network........................................................ 1
with Firewalla Gold Plus.......................................................................... 1
How I Came to Take Home Network Security Seriously.................... 5
Chapter 1: Meet Your Firewalla Gold Plus......................................... 19
Chapter 2: Installation and Initial Setup.............................................. 34
Chapter 3: Understanding Your Network Dashboard....................... 48
Chapter 4: Managing Devices on Your Network............................... 51
Chapter 5: Essential Security Features.............................................. 53
Chapter 6: Family Protection................................................................ 56
Chapter 7: VPN Features...................................................................... 58
Chapter 8: Advanced Networking........................................................ 61
Chapter 9: Troubleshooting and Maintenance.................................. 63
Chapter 10: Network Monitoring and Optimization........................... 65
Chapter 11: Advanced Rules and Policies......................................... 68
Chapter 12: Advanced Security Topics.............................................. 75
Chapter 13: Automation and Integration............................................ 79
Chapter 14: Maintenance and Updates.............................................. 81
Appendix A: Quick Start Guide............................................................ 85
Appendix B: Troubleshooting Common Issues................................. 86
Appendix C: Glossary............................................................................ 88
How I Came to Take Home Network Security Seriously
I didn’t start thinking seriously about network security because I wanted to become an expert, or because I enjoyed tinkering with technology for its own sake. I started because, over time, I became uncomfortable with how much of my personal life flowed invisibly through my home network—and how little visibility or control I actually had over it.
Like most people, I relied for years on the equipment provided by my internet service provider. It worked well enough. Devices connected. Streaming played. Emails sent. On the surface, everything functioned as expected. But beneath that surface, I realized I had no meaningful way to answer simple questions: What devices were actually on my network? Where was my data going? Which connections were normal, and which weren’t?
That discomfort grew as the number of connected devices in my home increased. Phones, laptops, smart TVs, cameras, streaming boxes, voice assistants—each added convenience, but also complexity. Each one introduced software written by someone else, communicating with servers I didn’t control, in ways I couldn’t easily see. I wasn’t paranoid, but I was increasingly aware that “working” wasn’t the same as “secure.”
I began looking for ways to gain visibility and control without turning my home into an IT project. I wasn’t interested in enterprise firewalls, subscription-heavy security services, or tools that required constant attention. I wanted something that respected privacy, ran locally, and made the network understandable rather than opaque.
That search eventually led me to Firewalla.
What stood out wasn’t just the feature list, but the philosophy behind it: local processing, clear visibility, and tools that assume the user wants to understand what’s happening—not just be told that things are “safe.” Over time, as I used Firewalla in my own network, I realized that many of the questions I had struggled to answer were the same questions others were asking as well.
This book grew out of that experience.
It’s not written as a marketing guide or a replacement for official documentation. It’s written as a practical companion—one that explains not just how to configure Firewalla, but why certain choices matter, how features fit together, and how to think about your home network as a system worth understanding and maintaining.
If you’ve ever felt that your network works, but you don’t really know how or why, you’re in the right place.
Appendix A: Quick Start Guide
Appendix B: Troubleshooting Common Issues
Appendix C: Glossary
Introduction
Your home network is more than just a way to get online. It's the infrastructure that connects everything in your digital life—computers, phones, smart speakers, security cameras, thermostats, game consoles, streaming devices. Everything.
And like any infrastructure, it needs management, security, and maintenance. That's where Firewalla comes in.
This book is your complete guide to the Firewalla Gold Plus—a powerful network security device that gives you professional-grade protection and control over your home network. Whether you're setting up Firewalla for the first time or looking to master its advanced features, you'll find practical, actionable information here.
About Firewalla
Firewalla is a hardware firewall and network security device. It sits between your modem and your network, protecting everything behind it while giving you unprecedented visibility and control.
Think of Firewalla as combining two core roles: Protection & Privacy and Control & Management.
Protection & Privacy
· Firewall: Blocks unwanted connections and intrusion attempts
· Content filtering: Blocks ads, trackers, malware, and inappropriate content
· VPN server: Lets you securely connect to your network from anywhere
· VPN client: Routes traffic through privacy services
· Network monitoring: Shows exactly what’s happening on your network
Control & Management
· Parental controls: Manages when and what kids can access
· Network management: Creates separate networks for different purposes
Why Do You Need It?
Modern home networks face challenges that didn't exist a decade ago. Consider what's changed:
More Devices, More Vulnerabilities
The average home now has 25+ connected devices. Each one is a potential entry point for attackers. Your router's basic firewall wasn't designed for this scale or complexity.
Privacy Is Under Attack
Companies track your browsing across websites. Advertisers build detailed profiles about you and your family. Your ISP can see and log every site you visit. Smart devices send data about your habits back to their manufacturers.
Kids Need Protection
Children have unprecedented access to the internet through phones, tablets, and computers. Keeping them safe requires more than just hoping they make good choices—it needs technical guardrails.
IoT Devices Are Insecure
Smart speakers, cameras, door locks, and thermostats are notoriously poorly secured. Many have known vulnerabilities. Some send data you didn't know they were collecting. They need to be isolated from your important devices.
Remote Access Needs Security
Working from home, accessing your NAS while traveling, or checking security cameras remotely all require secure connections. Your router's basic features aren't enough.
You Want Control
Your network, your rules. You should decide what's allowed, when it's allowed, and who can do what. Consumer routers offer minimal control. Firewalla gives you complete authority over your network.
What Makes Firewalla Gold Plus Special?
Firewalla makes several models. The Gold Plus (often called Gold) is the sweet spot for most users—powerful enough for demanding networks but not overkill for typical homes.
Key Specifications
l Quad-core 1.5 GHz processor: Handles deep packet inspection at full gigabit speeds
l 4 GB RAM: Enough for extensive rule sets and monitoring
l 6 Gigabit Ethernet ports: 1 WAN + 4 LAN + 1 additional multi-purpose port
l Up to 1 Gbps throughput: Won't bottleneck your internet connection
l Up to 5 VLANs: Create virtually separated networks
l Dual-WAN support: Use two internet connections for redundancy or combined bandwidth
l Silent operation: Fanless design, no noise
l Compact size: Fits anywhere, no rack required
What You Can Do With It
Security
l Block malware, phishing, and intrusion attempts automatically
l See every connection every device makes
l Isolate vulnerable IoT devices
l Get alerts when suspicious activity occurs
l Block ads and trackers network-wide
Privacy
l Run your own VPN server for secure remote access
l Route traffic through commercial VPN services
l Block tracking and data collection
l Control what information leaves your network
Parental Controls
l Filter content by category (adult, violence, gambling, etc.)
l Set time limits on internet usage
l See what sites kids are visiting
l Block specific apps or games
l Create schedules that adapt to school days vs weekends
Network Management
l Create separate networks (main, guest, IoT, work)
l See bandwidth usage by device
l Prioritize important traffic (video calls over downloads)
l Set bandwidth limits
l Manage two internet connections
Who This Book Is For
This book is written for people who:
l Just bought a Firewalla Gold Plus and want to set it up properly
l Have Firewalla running but aren't using most of its features
l Want to understand what Firewalla is doing and why
l Need to solve specific problems (slow internet, security concerns, parental controls)
l Want to master advanced features like VLANs and policy-based routing
You don't need to be a network engineer. Technical concepts are explained in plain language with real-world examples. When technical terms are necessary, they're defined clearly.
That said, this isn't a dumbed-down guide. We cover sophisticated features and assume you want to understand how things actually work, not just click buttons. If you want to learn, you'll find detailed explanations. If you just want to get something done, you'll find step-by-step instructions.
What This Book Covers
The book is organized to work both as a learning path and as a reference:
Chapters 2-3: Getting Started
Installation, initial configuration, and basic operation. Get Firewalla protecting your network quickly.
Chapters 4-7: Core Features
Dashboard navigation, device management, security features, and parental controls. The features you'll use daily.
Chapters 8-11: Advanced Features
VPN server and client, advanced networking, troubleshooting, and performance monitoring. Power user territory.
Chapters 12-15: Expert Topics
Advanced rules, security deep-dive, automation, and maintenance. For users who want complete mastery.
Appendices
Quick reference guides, troubleshooting checklist, and glossary.
How to Use This Book
If You're Just Getting Started
Read Chapters 2-7 in order. They build on each other and will take you from unboxing to confident daily use. Don't skip ahead—later chapters assume you understand earlier concepts.
If You Have Specific Goals
Use the table of contents to find relevant chapters. Want to set up VPN? Chapter 8. Need to create separate networks? Chapter 9. Troubleshooting issues? Chapter 10. Want to optimize performance? Chapter 11.
If You're an Experienced User
You can probably skim Chapters 2-7 and focus on Chapters 8-15. But don't assume you know everything in the early chapters—Firewalla has some non-obvious features even experienced users miss.
As a Reference
Keep this book handy. When you encounter a feature or setting you don't understand, look it up. The index and table of contents make it easy to find information quickly.
Conventions Used in This Book
Navigation Paths
When instructions say to tap or click through menus, they're written like this: Settings -> System -> Updates. This means tap Settings, then System, then Updates.
Important Notes
Key information is called out in context. Pay attention to paragraphs that start with words like Important, Note, or Warning.
Screenshots
The book includes screenshots showing what you should see in the app. Your screen might look slightly different depending on your Firewalla model, app version, or network configuration, but the basic layout will be the same.
Example Scenarios
Throughout the book, you'll find example scenarios showing how to use features in real situations. These aren't hypothetical—they're based on actual use cases from real Firewalla users.
What You Need
Hardware
l Firewalla Gold Plus
l Internet connection (cable, fiber, DSL, etc.)
l Modem or ISP-provided gateway
l Smartphone or tablet for initial setup (iOS or Android)
l Ethernet cables
Optional But Recommended
l Managed network switch if you plan to use VLANs
l Separate Wi-Fi access point or mesh system (Firewalla doesn't include Wi-Fi)
l Computer for accessing web interface (some features are web-only)
l Backup internet connection if you're setting up dual-WAN
Knowledge
No networking expertise required, but basic computer skills help. You should be comfortable installing apps on your phone, connecting devices with Ethernet cables, following step-by-step instructions, and using a web browser.
Everything else you need to know is explained in the book.
Getting Help
This book covers most situations, but you might still have questions. Here's where to find help:
Firewalla Support
l Help center: help.firewalla.com - Searchable knowledge base
l Community forum: Discussions with other users and Firewalla staff
l Email support: help@firewalla.com
l In-app support: Tap the question mark icon in the app
This Book
l Index: Find specific topics quickly
l Troubleshooting appendix: Common problems and solutions
l Glossary: Definitions of technical terms
A Note About Versions
Firewalla releases updates regularly. The screenshots and specific menu locations in this book are accurate as of December 2024. If your app looks slightly different, that's normal—Firewalla improves the interface over time.
The core concepts and features remain stable. Even if a button moves or a screen is redesigned, the underlying functionality works the same way. Focus on understanding what features do, not just where to click.
Privacy and Data Collection
Firewalla takes privacy seriously. Understanding what data it collects and where it goes matters.
Local Processing
All security features, rule enforcement, and monitoring happen on your Firewalla box. Your network traffic doesn't route through Firewalla's cloud servers. They can't see what you're doing because the data never reaches them.
What Firewalla Cloud Receives
l Device names and groups (for multi-device app sync)
l Rule configurations (so they sync across devices)
l Anonymous usage statistics (what features are used, not what traffic flows through)
l Alarm summaries for notifications (but not full traffic logs)
What Firewalla Never Receives
l Your actual internet traffic content
l Websites you visit
l Files you download
l Messages or communications
l Video streams or media content
You control your data. If you prefer, you can disable cloud sync entirely and manage everything locally, though you'll lose convenient features like remote access to the app and push notifications.
Ready to Begin
Network security isn't just for IT professionals anymore. Your home network deserves the same protection businesses get. Firewalla brings enterprise-grade security to regular people, with an interface that makes sense and features you can actually use.
This book will teach you to use Firewalla effectively. You'll understand not just what to click, but why you're clicking it. You'll know how to diagnose problems, optimize performance, and configure advanced features with confidence.
By the time you finish, you'll have a secure, well-managed network that protects your family, respects your privacy, and works the way you want it to.
Ready? The next chapter covers getting Firewalla installed and configured.
Chapter 1: Meet Your Firewalla Gold Plus
Before we dive into installation and configuration, let's get acquainted with what you've purchased. The Firewalla Gold Plus isn't just another router or security appliance—it's a complete network security platform that happens to fit in the palm of your hand.
Understanding what your Firewalla Gold Plus can do, and equally important, understanding its design philosophy, will help you make the most of its capabilities. This chapter walks you through the hardware, the core features, and the thinking behind why it works the way it does.
The Hardware
Physical Design
The Firewalla Gold Plus is compact—roughly the size of a small hardcover book. The metal chassis serves dual purposes: it protects the internal components and acts as a heat sink for passive cooling. There's no fan, which means no noise and one less component to fail.
The fanless design isn't just about silence. Fans collect dust, wear out bearings, and become points of failure. A passively cooled system that's properly designed will outlast its actively cooled counterparts. The chassis gets warm during operation—that's normal and by design. It's dissipating heat effectively without requiring moving parts.
The unit weighs enough to feel substantial but not so much that you can't mount it on a wall. Speaking of which, it comes with mounting hardware if you want to keep it out of the way. Most people either mount it near their networking equipment or simply set it on a shelf where it has good ventilation.
Ports and Connections
All the action happens on the back panel:
· Four 2.5 Gigabit Ethernet ports: These are your network connections. One typically connects to your internet (WAN), and the others connect to your local network (LAN). But Firewalla is flexible—you can configure these ports in various ways depending on your needs. They're color-coded and numbered, which helps during setup.
· Two USB 3.0 ports: One is occupied by a red security dongle (don't remove this—it's tied to your device). The other can be used for the optional Wi-Fi adapter or future expansions.
· HDMI port: This provides console access if you ever need to troubleshoot at a low level. Most users will never touch this.
· Serial console port: Another troubleshooting interface that you'll likely never need. It's there for advanced scenarios.
· Power input: Standard DC power input. The included power adapter is compact and efficient, drawing less than 15 watts on average—about the same as an LED light bulb.
The front panel has a power button (primarily for shutdown) and a reset button. The reset button should only be used as a last resort when something goes wrong. The power button is mainly for graceful shutdowns—the system boots automatically when power is applied.
The 2.5 Gigabit Advantage
Most home networking equipment uses Gigabit Ethernet (1 Gbps). The Gold Plus uses 2.5 Gigabit (2.5 Gbps) ports. This might seem like overkill if your internet connection is "only" 1 Gbps, but there's method to this apparent madness.
First, internet speeds are increasing. Multi-gigabit fiber is becoming more common, and cable companies are pushing speeds beyond 1 Gbps. The Gold Plus is ready for this without requiring replacement.
Second, and more immediately relevant: security processing has overhead. When Firewalla examines every packet flowing through your network—checking for threats, applying rules, logging activity—that takes processing power. With 1 Gbps ports, you might see your effective throughput drop to 700-800 Mbps under heavy security processing. With 2.5 Gbps ports, you maintain full gigabit speeds even with comprehensive security enabled.
Third, your internal network traffic benefits. Backing up a computer to a NAS, streaming high-bitrate video from a local server, or transferring large files between devices—these activities happen at LAN speeds, not internet speeds. The faster ports mean these local transfers complete faster.
The Gold Plus is rated for up to 5 Gbps of total packet processing throughput. This means it can handle multiple 2.5 Gbps streams simultaneously or process data at line rate with security features enabled.
Inside the Box
The Gold Plus is built around an Intel J4125 processor—a quad-core chip designed for efficiency and reliability. It has 4GB of RAM and runs a custom Linux distribution that's been optimized for network security tasks.
This is important because unlike consumer routers that use generic firmware, Firewalla's software is purpose-built. Every component of the system is designed to work together: the hardware acceleration for encryption, the network processing, the storage management, and the security analysis.
The system boots from eMMC flash storage—solid-state memory that's faster and more reliable than SD cards or spinning hard drives. This contributes to the quick boot times (the system is typically ready in under a minute) and the system's overall responsiveness.
Core Capabilities
The hardware is the foundation, but the software is where Firewalla really shines. Let's walk through what it actually does for you.
Network Visibility
The first thing Firewalla does is show you what's happening on your network. Not in the abstract "there's traffic" sense, but specifically: what device is connecting to what service, how much bandwidth it's using, when it's active, and what kind of data is flowing.
Every device on your network gets identified. Firewalla recognizes the manufacturer, device type, and in many cases, the specific model. Your iPhone shows up as an iPhone, not just as "Unknown Device." Your smart TV is labeled as a TV. Your printer is clearly marked as a printer.
For each device, you can see:
· What domains and services it connects to: Is your smart TV talking to Netflix, or is it also sending data to advertising networks?
· Bandwidth usage over time: Which devices are consuming the most data, and when?
· Connection patterns: When is the device most active? Are there unusual connection spikes?
· Security alerts: Any blocked threats or suspicious activity associated with this device.
This visibility isn't about surveillance—it's about understanding. When something goes wrong (your internet seems slow, a device isn't connecting properly, you're worried about security), you have the data to figure out what's actually happening rather than guessing.
Active Protection
Firewalla doesn't just observe—it protects. The system includes several layers of active defense that work automatically once enabled:
Intrusion Detection and Prevention (IDS/IPS)
The system watches for known attack patterns and malicious behavior. When it detects something suspicious—port scanning, exploit attempts, command-and-control traffic—it can alert you or block it automatically.
This happens at network speed. The IDS/IPS engine examines traffic in real-time, comparing it against a database of threat signatures that's updated regularly. When you enable Active Protect, you're not just blocking known malware sites—you're stopping exploit attempts, preventing unauthorized access, and catching threats before they reach your devices.
Ad and Tracker Blocking
Firewalla can block ads and trackers at the network level. This is different from browser ad blockers—it works for every device and every app on your network. Your smart TV's ads disappear. Your kids' tablets stop showing inappropriate advertising. Mobile apps that are riddled with ads become usable.
The ad blocking uses curated blocklists that identify advertising and tracking domains. When a device tries to connect to these domains, Firewalla simply refuses the connection. To the app or website, it looks like the ad server is unavailable. The content loads, minus the ads.
You can customize this extensively. Use aggressive blocking to remove nearly all ads and trackers, or use lighter filtering that only blocks the most intrusive content. You can also whitelist specific sites if blocking causes problems.
Malware and Phishing Protection
The system maintains blocklists of known malware distribution sites, phishing domains, and command-and-control servers. These are updated continuously. When any device on your network tries to connect to a blocked domain, the connection is refused and you receive an alert.
This protection works even if the device itself is compromised. A infected computer trying to "phone home" to its controllers will be blocked. A user clicking a phishing link will be stopped before reaching the fake site. This is your network-level immune system.
Behavioral Analysis
Beyond signature-based detection, Firewalla watches for unusual behavior. A device that suddenly starts uploading massive amounts of data, a new device appearing on your network without your knowledge, connection patterns that don't match normal usage—these trigger alerts.
The system learns what's normal for your network over time. This means it gets better at distinguishing between legitimate activity and potential problems. It's not about paranoid false alarms—it's about surfacing genuinely unusual events that deserve your attention.
Network Control
Visibility and protection are important, but control is where you shape your network to work the way you want:
Rules and Policies
You can create rules that control what happens on your network. Block a specific website. Limit bandwidth for a device or application. Prevent certain devices from communicating with each other. Route traffic through a VPN. The possibilities are extensive.
Rules can be simple ("Block Facebook on my kids' devices") or sophisticated ("Route all traffic from my work laptop through my company VPN, except local network traffic, but only during business hours"). The app provides templates for common scenarios, so you don't need to think like a network engineer to create useful policies.
Family Protect Controls
Firewalla includes robust parental control features. You can filter content by category (block adult content, gambling, social media, gaming), set usage schedules (internet access only during certain hours), and pause the internet for specific devices or users.
The "Social Hour" feature is particularly clever—it blocks all social media for one-hour increments, making it easy to enforce screen-free family time without completely cutting off internet access. Kids can still do homework that requires web access; they just can't scroll TikTok during dinner.
Safe Search enforcement ensures that search engines return filtered results, even if the child tries to disable safe search. And all of this works regardless of what device they're using or whether they've installed blocking software—it's enforced at the network level.
Network Segmentation
One of the Gold Plus's most powerful features is the ability to create separate network segments. Think of these as virtual walls within your network.
You might create a guest network that has internet access but can't see or connect to your personal devices. Or an IoT network for smart home devices that's isolated from your computers and phones. Or a kids' network with strict filtering and time limits while your main network remains unrestricted.
Each segment can have its own rules, policies, and security settings. Devices on one segment can't see devices on another unless you explicitly allow it. This is how enterprises protect their networks, and now you can do the same at home.
Bandwidth Management
Smart Queue is Firewalla's traffic prioritization feature. It ensures that your video calls don't lag when someone else is downloading a large file. Gaming traffic gets priority when needed. Video streaming is managed to prevent buffering without hogging all the bandwidth.
You can also set hard limits: this device gets no more than X Mbps, or this activity type gets throttled during certain hours. It's your bandwidth—you decide how it's allocated.
VPN Capabilities
The Gold Plus includes comprehensive VPN support in both directions:
VPN Server
When you're away from home, you can connect back to your home network securely. This means:
· Access to your home network resources (files, printers, security cameras) from anywhere
· Your internet traffic appears to come from home, which can be useful for accessing geo-restricted content or avoiding suspicious public Wi-Fi networks
· All the security and filtering you have at home extends to your devices wherever you are
The system supports both OpenVPN and WireGuard protocols. WireGuard is newer, faster, and particularly good for mobile devices. OpenVPN is more established and works through more types of networks. You can enable both simultaneously.
Setting up VPN access is remarkably simple—the app generates configuration profiles that you can install on your devices with a few taps. No manual configuration of IP addresses or certificates required.
VPN Client
Firewalla can also act as a VPN client, connecting your entire network (or specific devices) through a commercial VPN service. This is useful if you want to:
· Route all your home traffic through a VPN for privacy
· Access content as if you're in a different country
· Protect devices that can't run VPN software themselves (smart TVs, game consoles)
The advantage of doing VPN at the router level is that it covers every device automatically. You don't need to configure VPN on each computer, phone, and tablet. Change VPN providers or servers? Update it once in Firewalla and all your devices get the new settings.
You can even get selective: route only certain devices through the VPN, or only certain types of traffic. Your work laptop goes through your company VPN while everything else uses your regular internet connection. Your smart TV goes through a VPN for streaming while your gaming console uses the direct connection for lower latency.
Router Mode vs. Simple Mode
The Firewalla Gold Plus can operate in different modes, and understanding these modes will help you set it up correctly for your situation.
Simple Mode (DHCP Mode)
In Simple Mode, Firewalla sits alongside your existing router. Your router continues to handle routing and DHCP (assigning IP addresses to devices). Firewalla monitors all the traffic and applies its security features, but it doesn't replace your router.
This mode is ideal when:
· You rent your router from your ISP and can't easily replace it
· You have a mesh network system that you want to keep using
· You want to add security without changing your current network setup
· You're not comfortable with advanced networking changes
The installation is straightforward: plug Firewalla into one of your router's LAN ports and connect your devices to Firewalla's ports. The system automatically configures itself.
Simple Mode gives you all of Firewalla's security and monitoring features. The main limitation is that you can't take full advantage of network segmentation or advanced routing features—your existing router is still handling those functions.
Router Mode
In Router Mode, Firewalla becomes your router. It connects directly to your modem and handles all routing, DHCP, and network management duties. Your existing router either gets removed or is put into "bridge mode" (effectively turning it into just a Wi-Fi access point).
This mode unlocks the full capabilities of the Gold Plus:
· Full network segmentation with isolated VLANs
· Multi-WAN support (multiple internet connections, load balancing, and failover)
· Advanced routing policies
· Complete control over DHCP and DNS settings
· Better performance (no double-NAT or routing overhead)
Router Mode is the recommended configuration if you own your equipment and are comfortable making networking changes. It's not particularly difficult—the app walks you through it—but it does require connecting to your modem directly and potentially reconfiguring your Wi-Fi access points.
One important note: the Gold Plus doesn't have built-in Wi-Fi. In Router Mode, you'll need separate Wi-Fi access points or routers running in access point mode. This might sound like a limitation, but it's actually an advantage—you can use whichever Wi-Fi solution works best for your space, and you can upgrade your Wi-Fi independently from your security and routing.
Bridge Mode
Bridge Mode is a specialized configuration where Firewalla sits transparently between your network segments. It's used in specific scenarios where you need to monitor traffic without changing IP addresses or network structure—typically for compatibility with complex existing setups.
Most users won't need Bridge Mode. It's mentioned here for completeness, but Simple Mode or Router Mode will handle the vast majority of home and small office setups.
What You Can't Do (And Why That's OK)
No product does everything, and Firewalla makes specific design choices that mean certain things aren't possible or aren't prioritized. Understanding these limitations helps set appropriate expectations.
No Built-in Wi-Fi
The Gold Plus doesn't include Wi-Fi. This is intentional—Wi-Fi access points and security appliances are different jobs that require different hardware. By separating them, you get better performance for both functions and the flexibility to choose the Wi-Fi solution that works for your space.
You can add a Wi-Fi USB adapter for specific use cases (like creating a temporary network or using a phone hotspot as backup internet), but for your main Wi-Fi, you'll use separate access points.
Not a Next-Gen Firewall for Enterprises
While the Gold Plus is powerful, it's designed for homes and small offices, not enterprise deployments. It doesn't have features like integration with Active Directory, sophisticated compliance reporting, or the redundancy and failover capabilities that large organizations require.
For a home or small business, this is perfectly appropriate. You get professional-grade security without paying for enterprise features you don't need.
No Subscription Required (But No Subscription Available Either)
Firewalla doesn't charge monthly or annual fees. You buy the hardware, and all features and updates are included. This is great for cost predictability, but it means certain service-based features aren't available.
For example, you can't pay for Firewalla to provide 24/7 monitoring and incident response. You're operating your own security—Firewalla gives you the tools, but you're the one using them. For most people, this trade-off (no recurring costs, but you're responsible for responding to alerts) is acceptable.
The Mobile App Philosophy
One of Firewalla's defining characteristics is that it's managed entirely through a mobile app. There's a web interface (currently in beta), but the app is the primary interface by design.
This might seem unusual if you're accustomed to configuring network equipment through web browsers. But consider: when was the last time you wanted to tweak your network security while sitting at a desk? Network security isn't something you configure once and forget—it's something you check from the couch, adjust when you see an alert on your phone, and modify when your kids ask why they can't access a site.
The app design reflects this usage pattern. It's information-dense but still clean. It provides quick access to common tasks (block this device, pause the internet, check bandwidth usage) while keeping advanced features available but out of the way.
Notifications appear where notifications belong—on your phone's lock screen. You don't need to remember to check a dashboard; alerts come to you. See something suspicious at 2 AM? Address it from your phone without getting out of bed.
Multiple people can have the app connected to the same Firewalla box. This is useful for families where parents might want to manage controls separately, or small businesses where multiple people share administrative duties.
Updates and Improvement
Firewalla's software is under continuous development. Updates are frequent—typically every few weeks—and they include both security updates and new features.
Updates happen automatically unless you disable this (not recommended). The system downloads updates in the background and applies them during low-traffic periods. You'll get a notification that an update was installed, but there's typically no disruption to your network.
This matters because the threat landscape changes constantly. New vulnerabilities are discovered, new attack patterns emerge, and new types of malicious behavior develop. Firewalla's update mechanism means you benefit from these improvements without having to do anything.
The company also maintains an active community forum where users discuss configurations, share tips, and request features. Many of the features added over the years came from user suggestions. This isn't abandoned-after-purchase hardware—it's an actively supported and improving platform.
Knowing Your Equipment
By now you should have a solid understanding of what the Firewalla Gold Plus is: a network security appliance designed for homes and small businesses that's powerful enough to provide professional-grade protection but accessible enough that you don't need to be a network engineer to use it effectively.
You know the hardware—four 2.5 Gbps ports, fanless cooling, efficient power consumption. You understand the core capabilities—visibility, protection, control, and VPN. You've learned about the different operating modes and when to use each. And you understand the design philosophy: mobile-first interface, continuous updates, and features that prioritize practical protection over theoretical completeness.
In the next chapter, we'll move from theory to practice and get your Firewalla Gold Plus installed and running on your network.
Chapter 2: Installation and Initial Setup
Installing your Firewalla Gold Plus is straightforward—most people complete the process in under an hour. This chapter walks you through everything from choosing your installation mode to verifying that your system is working correctly.
We'll take this step by step, addressing common questions and potential issues along the way. By the end of this chapter, your network will be protected and you'll understand how everything connects together.
Before You Begin
What You Need
Gather these items before starting:
· Your Firewalla Gold Plus: Make sure the red security dongle is plugged into one of the USB ports. Don't remove this—it's tied to your specific device.
· Power adapter: The included power supply. Use only the supplied adapter—using incorrect power supplies can damage the unit.
· Ethernet cables: You'll need at least two. One is typically included. Cat5e or Cat6 cables work fine—you don't need special cables for 2.5 Gbps; standard Gigabit Ethernet cables handle it.
· Your smartphone: iOS or Android. You'll need the Firewalla app, which is free in the App Store or Google Play.
· Network information: If you have custom network settings (static IPs, specific DNS servers, VLANs), have this information handy. Most people won't need this.
· 30-60 minutes: Allocate uninterrupted time. Internet access will be briefly disrupted during setup, so don't start this right before an important video call.
Choosing Your Installation Mode
Before plugging anything in, decide which mode you'll use. This affects how you connect the cables. The decision tree is simple:
Choose Simple Mode If:
· You rent your modem/router combo from your ISP
· You have a mesh Wi-Fi system (Google Wifi, Eero, etc.) that you want to keep using as-is
· You're not comfortable changing your network's current structure
· You want the simplest possible installation
Choose Router Mode If:
· You own your equipment
· You want maximum control and features
· You're comfortable putting your existing router in bridge mode or replacing it
· You need network segmentation or multi-WAN features
When in doubt, start with Simple Mode. You can always switch to Router Mode later—it's not a permanent decision. Simple Mode gets you protected quickly and lets you learn the system before making more significant network changes.
Understanding Your Current Setup
Take a moment to understand your current network. This helps you know where Firewalla will fit:
Modem Only
If you have a separate modem (cable modem, fiber ONT, or DSL modem) and a separate router, your setup is straightforward. The modem connects to the internet, and the router provides Wi-Fi and local network services. For Router Mode, Firewalla goes between these. For Simple Mode, it connects to your router.
Gateway (Combined Modem/Router)
Many ISPs provide a gateway—a single device that's both modem and router. These often have Wi-Fi built in. If you have one of these, Simple Mode is usually the easiest path. You can use Router Mode, but it requires putting the gateway into "bridge mode" or "passthrough mode," which varies by manufacturer and isn't always well-documented.
Mesh Systems
If you have a mesh Wi-Fi system like Google Wifi, Eero, or similar, you can either use Simple Mode (Firewalla connects to your mesh system's primary node) or Router Mode (mesh system goes into bridge/access point mode, Firewalla becomes the router). Both work fine; it's a matter of preference.
Simple Mode Installation
Simple Mode installation puts Firewalla behind your existing router. Your router continues to assign IP addresses and handle routing; Firewalla monitors and protects the traffic.
Physical Connections
Step 1: Prepare Your Router
Locate an available LAN port on your router. This is any port that's not labeled "WAN" or "Internet." If all your LAN ports are occupied, you may need to temporarily unplug something or add a switch.
Step 2: Connect Firewalla to Router
Using an Ethernet cable, connect Port 4 on the Firewalla (the port furthest from the power input) to a LAN port on your router. Port 4 is typically labeled or marked with a different color.
Step 3: Connect Your Devices to Firewalla
Connect your devices to the remaining ports on Firewalla (Ports 1, 2, and 3). You can connect:
· Individual devices (computers, game consoles, smart TVs)
· A network switch, which then connects to multiple devices
· Wi-Fi access points
Not all ports need to be used. If you only have one or two wired devices, that's fine.
Step 4: Connect Power
Plug in the power adapter. The Gold Plus will power on automatically—there's no power switch. You'll hear a beep, and the unit will begin booting. Wait about 30-60 seconds for the boot process to complete.
App Pairing and Configuration
Step 1: Install the App
Download the Firewalla app from the App Store (iOS) or Google Play (Android). Open the app and create an account if you don't already have one. This account is used to sync your settings and access your Firewalla remotely—it's free and doesn't require any payment information.
Step 2: Start Pairing
Make sure your phone is connected to your Wi-Fi network (the same network that your router provides). Tap the "+" button in the app and select "Firewalla Gold" or "Firewalla Gold Plus."
The app will search for your Firewalla on the network. This usually takes 10-30 seconds. If it doesn't find your Firewalla, make sure your phone is on the same network and that the Firewalla has finished booting (you should see lights on the Ethernet ports).
Step 3: Scan QR Code
When prompted, scan the QR code on the bottom of your Firewalla Gold Plus. The app uses your phone's camera for this. The QR code uniquely identifies your device and pairs it with your account.
Note: On Android devices, the app might accidentally scan the serial number next to the QR code instead of the QR code itself. If this happens, use your finger to cover the serial number text and scan again.
Step 4: Select Simple Mode
The app will ask you to select an installation mode. Choose "Simple Mode" or "DHCP Mode" (these are the same thing—the app uses both terms). Confirm your wiring matches what the app shows: Port 4 to router, other ports to devices.
Step 5: Automatic Configuration
Firewalla will automatically configure itself. This takes 2-5 minutes. During this time:
The system configures network settings
Downloads any pending software updates
Initializes security databases
Begins discovering devices on your network
Your internet access shouldn't be interrupted during this initial configuration.
Step 6: Name Your Box
The app will ask you to name your Firewalla box. This name is only for your reference—it doesn't affect anything technical. Use something that makes sense for your location ("Home Firewalla" or "Office" or "Main House").
Initial Configuration Wizard
After the basic setup completes, Firewalla presents a configuration wizard that helps you enable core features. You can skip this and configure everything later, but it's worth going through—it only takes a few minutes and gets you protected immediately.
Enable Ad Blocking
The wizard will ask if you want to enable ad blocking. Say yes. You can choose the level:
· Strict: Blocks most ads and trackers aggressively. May occasionally block legitimate content.
· Normal: Balanced blocking. Removes most ads while minimizing false positives.
· Light: Only blocks the most intrusive ads and trackers.
Start with Normal. You can adjust this later if you find it's too aggressive or not aggressive enough.
Enable Security Features
The wizard will recommend enabling:
· Malware Blocking: Prevents connections to known malicious domains. Enable this.
· Phishing Protection: Blocks known phishing sites. Enable this.
· Active Protect (IPS): Intrusion prevention that blocks exploit attempts. This is more intensive and can occasionally cause compatibility issues with certain applications. You can enable it now or later after you've familiarized yourself with the system.
For the first-time setup, enable malware and phishing protection. Consider enabling Active Protect after a week or two when you're comfortable with the system and can recognize whether it's causing any problems.
Family and Time Controls
If you have children, the wizard will help you set up parental controls:
· Safe Search: Forces search engines to filter results
· Content Filtering: Blocks categories like adult content, gambling, etc.
· Time Schedules: Sets when internet access is available
You can configure these now or skip and set them up later in the Family section of the app.
Router Mode Installation
Router Mode installation makes Firewalla your primary router. This requires more steps than Simple Mode but unlocks all capabilities.
Prerequisites
Before starting Router Mode setup:
· Know your modem's location: You'll be connecting directly to it.
· Plan for Wi-Fi: Firewalla doesn't have Wi-Fi. You'll need access points or a router in bridge mode.
· Prepare for brief downtime: Your internet will be down for 5-10 minutes during the transition.
· Reboot your modem: Some ISPs require this when changing routers. Power cycle your modem before connecting Firewalla.
Physical Connections
Step 1: Connect Firewalla to Modem
Using an Ethernet cable, connect Port 4 on the Firewalla to the LAN/Ethernet port on your modem. If you have a combined modem/router (gateway), you might need to enable bridge mode on it first—check your ISP's documentation for how to do this.
Step 2: Connect Wi-Fi Access Points
Connect your Wi-Fi access points or router (in bridge/AP mode) to one of Firewalla's LAN ports (1, 2, or 3). If you have multiple access points or need more ports, connect a switch to one of these ports.
Step 3: Connect Wired Devices
Connect any wired devices to the remaining LAN ports or to a switch that's connected to Firewalla.
Step 4: Power On
Connect the power adapter. Wait 30-60 seconds for boot.
App Pairing and Configuration
Step 1: Special Connectivity Note
During Router Mode setup, your phone needs to pair with Firewalla before you have internet access. This means:
If using the app on the same phone, temporarily switch to cellular data during setup
Or use a different phone that still has internet access
The app will guide you through this.
End of Prairie Light Press Reader Preview
Contact Prairie Light Press
Have a question about one of our books?
Found an error or have feedback?
Interested in translations, bulk purchases, or media inquiries?
We'd love to hear from you.