Overview
Full Integration
with the Firewalla Security Stack
Extending Firewalla security features to the LAN
Building Zero Trust Network
Never automatically trust devices
Zero Trust is a security framework that assumes no user or device can be trusted by default, even within the network.
Firewalla AP7 and Firewalla Router
bring the power of Zero Trust security to your home or business network
-
Segmentation and Microsegmentation: Divide your network into smaller segments to limit the lateral movement of threats.
-
Least Privilege Access: Grant users and devices only the minimum access necessary to perform their functions on the Network.
-
Continuous Monitoring: Continuously monitor and verify the security posture of all users and devices.
Microsegmentation with VqLAN
Firewalla VqLAN offers simplified network segmentation by dividing a network into smaller, isolated segments to limit the spread of threats without requiring network-wide changes. If you already have groups defined, you just need to turn VqLAN on.
Personal Key
Assign different personal keys (PPSK via WPA2) to the same SSID to identify users. Devices logging in with a specific key will be assigned to the configured user, group, or VLAN network (experimental), ensuring user identification and rule enforcement (even if the user’s MAC address is randomized).
Example:
-
You can assign a personal key to your child, and any devices your child uses will be automatically quarantined to the “Kid” user group. Even if the device’s MAC address randomizes, you will always be able to group devices.
Enterprise Wi-Fi Security
Use WPA2-Enterprise or WPA3-Enterprise to identify users and strengthen Wi-Fi security. Devices connecting with unique usernames and passwords are assigned to specific users, ensuring only authenticated and verified users can join your Zero Trust Network.
Device Isolation Support
Completely isolate any of your devices from your home network. Perfect for guests and devices that don't need to talk to each other on your LAN network. This will complement the existing Firewalla network quarantine and guest network feature.
Rule-Based Least Privilege Access
Zero Trust Networks should never fully trust any devices on the network. After your network is segmented and isolated, you can use Firewalla Rules or Policies to grant the device only the minimum permissions needed to reduce security risks.
Monitoring
Firewalla provides full network visibility by monitoring traffic and identifying who’s on your network, their activity, and potential security risks. With Firewalla AP7, we extend this capability to your LAN, giving you full visibility into how your devices communicate within your local network.
Local Flow Visibility
Internet or WAN Visibility
More Wi-Fi Control and Visibility
Wi-Fi 7
Mesh
With Ethernet or WiFi Backhaul
Spec
- Triband 2.4Ghz 2x2, 5Ghz 2x2, 6Ghz 4x4
- 8 Spatial Streams, 320Mhz channel support 6Ghz
- Multi-speed Network Interfaces: 10Gbit RJ45 + 2.5Gbit RJ45
- VLAN Support
- WPA/WPA2/WPA3 Support
- PPSK (Personal Key) requires WPA2
- Mesh with Ethernet or Wi-Fi backhaul
- Dimensions: 5.43 x 3.15 x 7.48 inch
- Item Weight: 1.38 lb
- Power: 12V/4A
- Compatible with and Required: Firewalla Gold / Firewalla Purple in router mode or bridge mode.
