Firewalla Entry Level 7 Evaluate

I’ve beforehand reviewed the Firewalla Gold Plus and thought it was wonderful, with it successfully providing enterprise-level safety features with a user-friendly interface ideally suited for residence customers/prosumers and small companies.

The Gold Plus is a router solely, with no WiFi, however Firewalla have began to launch WiFi {hardware} to enrich their firewall routers.

Up to now, this consists of the fundamental $59 Firewalla Wi-Fi SD, which is a USB dongle that plugs into your Firewalla however is simply designed for as much as 5 purchasers and is designed for use as a short lived backup to your LAN in case your AP/WiFi is down.

They then have the just lately launched Entry Level 7, which I’m reviewing at present. This can be a $400 desktop entry level with tri-band WiFi 7 and multi-gig ethernet connectivity, together with a 10GbE port.

It’s barely odd for an entry level as a consequence of its desktop design, moreover, it makes use of DC energy and never POE, and it could solely be utilized by a Firewalla router.

The rationale why you may solely use it with Firewalla, is that it’s designed to combine seamlessly with the options of Firewalla and permits you to create zero belief networks, considerably bettering the safety of your community.

Associated Content material

Specification/ Options

{Hardware} and Design

• Two bridged, multi-speed Ethernet ports: one 2.5 Gbit/s RJ45 and one 10 Gbit/s RJ45
• Powered by DC energy provide (12 V, roughly 5 A)
• Manufacturing unit-reset by way of a bottom-mounted button
• Entrance-panel LED signifies standing (numerous colors for power-on, pairing, errors)
• Desktop kind issue: roughly 138 × 80 × 190 mm, weight ≈ 627 g; enclosure constituted of polycarbonate
• Inside omni-directional antennas

Wi-fi Specs

• Helps Wi-Fi requirements from legacy (802.11a/b/g/n/ac) to fashionable Wi-Fi 6 (802.11ax) and Wi-Fi 7 (802.11be)
• Tri-band radios:
  • 2.4 GHz (2×2 MU-MIMO)
  • 5 GHz (2×2 MU-MIMO)
  • 6 GHz (4×4 MU-MIMO)
• As much as 8 spatial streams, with 320 MHz channel help on 6 GHz
• Most theoretical knowledge charges:
  • 2.4 GHz: ~688 Mbps (40 MHz)
  • 5 GHz: ~2.88 Gbps (160 MHz)
  • 6 GHz: ~11.5 Gbps (320 MHz)
• Antenna beneficial properties (~dBi): 2.4 GHz ~5.2, 5 GHz ~6.5, 6 GHz ~6.0
• Transmit energy: 2.4 GHz ~24 dBm, 5 GHz ~25 dBm, 6 GHz ~22 dBm
• As much as 10 BSSIDs per radio

Community and Safety

• VLAN help (IEEE 802.1Q)
• Wi-fi safety: WPA/WPA2/WPA3 and PPSK (Private Pre-Shared Key) with Blended Private mode
• Superior QoS with per-user price limiting
• Visitor isolation supported
• Able to dealing with 300+ concurrent purchasers

Software program Options and Configuration (by way of Firewalla App)

• Zero Belief & Microsegmentation:
  • VqLAN helps you to group customers/gadgets into remoted micro-networks, limiting lateral risk motion
  • Gadget Isolation blocks communication inside a gaggle (e.g., for visitor or IoT gadgets)
• SSID Customisation:
  • As much as 10 SSIDs might be created, every with devoted settings for community (LAN/VLAN), safety mode, frequency bands
  • Means to assign SSIDs to particular person/teams or VLANs
  • Every SSID can use Blended Private (WPA2 for two.4/5 GHz, WPA3 for six GHz), WPA2/WPA3, or WPA3 solely
• Private Key (PPSK):
  • Distinctive private keys per person/machine on the identical SSID, enabling automated project to group or VLAN—even when MAC handle randomised
• Mesh Capabilities:
  • AP7 D can mesh with different AP7 items (Desktop or Ceiling) utilizing Ethernet or Wi-Fi backhaul
  • App reveals mesh topology and signal-strength visualisation
• Visibility and Monitoring:
  • ‘Native Flows’ reveals device-to-device and native community visitors
  • Gadgets might be sorted/grouped by sign power or linked AP
  • Gadget-level Wi-Fi particulars embrace SSID, channel, band, MIMO, Rx/Tx charges
• Wi-Fi Testing:
  • Presents a signal-strength check and full Wi-Fi check (SSID, BSSID, channel, AP, band, sign) to judge protection
• Multi-Hyperlink Operation (MLO) (preview):
  • Allows Wi-Fi 7 gadgets to attach throughout a number of bands concurrently, enhancing throughput and reliability
  • Requires WPA3 and particular firmware variations; legacy gadgets could also be incompatible
• Superior Settings per AP:
  • Handbook management over frequency channel and transmit energy for every band (default automated advisable)
  • Adjustable 5 GHz channel width; DFS channels used when on automated, however might be disabled if interference happens
  • LED management: flip standing LED on/off; “Find This Entry Level” lights LED inexperienced for identification
  • IP reservation and native area hostname settings for every AP
• World Wi-Fi Settings:
  • Band steering to shift gadgets between bands throughout idle
  • Maximise compatibility (default setting) for broader machine help
  • Storm management to suppress broadcast/multicast floods
  • Inclusion of DFS channels on 5 GHz (default), with capacity to disable
• Comfort Instruments:
  • Generate QR codes for SSIDs (major or microsegment) to simplify visitor/machine connection
  • View AP topology in-app, with machine counts and backhaul paths

Energy and Environmental

• Energy draw as much as ~30 W (Desktop model)
• Working atmosphere: 0 °C to 40 °C, humidity 5–95 % non-condensing
• Storage: −40 °C to +70 °C

Necessities and Compatibility

• Requires a Firewalla Gold or Purple machine working in router mode
• App required (iOS or Android) for setup and administration
• Firmware conditions for some options (e.g., MLO, Occasions)

Unboxing / Design

For one thing classed as an entry level, that is an uncommon design, with it being a desktop machine that requires mains energy with a DC barrel port.

Nonetheless, within the context of residence customers, that is maybe a greater design, avoiding the necessity to ceiling mount and run lengthy Ethernet cables to it. The Firewalla lacks POE, so the DC port additionally reduces the necessity for added {hardware}.

You may, in fact, use a traditional entry level on a desk, however the antennas are usually not designed for this, whereas the AP7 has 8 antennas that radiate throughout the machine to offer one of the best sign attainable.

On the rear of the AP7, you’ve two Ethernet ports, one is 10GbE and the opposite 2.5GbE. You don’t usually see twin Ethernet ports on entry factors (the Zyxel NWA130BE had them), however it’s one thing I discover very helpful in residence or small enterprise environments, because it permits you to daisy chain the AP to a swap or a single machine.

Past that, the AP7 is only a white vertical field with yellow accents on the bottom and prime. It doesn’t look fairly as premium as some shopper choices, however it’s smaller than many premium mesh WiFi programs, and the general design is unoffensive.

Set Up

I used to be despatched a single AP7, so I set this up wired instantly into my Firewalla Gold Plus. With the 10GbE and a pair of.5GbE ports, you may run a wired backhaul to different AP7s whereas leaving a spare port to each day chain different gadgets.

I believe the primary time I set this up, the Firewalla auto-detected the AP7. I later switched to bridge mode to make use of in my current community, and after I switched again, I needed to manually add it.

The handbook course of is straightforward, with the AP7 switched on and reset, it ought to have a flashing white LED, and also you simply must go to WiFi within the app, choose entry factors, then add. Then observe the fundamental arrange process.

It’ll additionally work as a wi-fi mesh system, which I haven’t been in a position to check. The one difficulty with that is the triband design, with 2×2 5Ghz band, which implies the wi-fi backhaul shall be shared, and there shall be important sign loss. Solely premium shopper mesh programs just like the Netgear Orbi RBE973 have a devoted 5GHz 4×4 backhaul.

Firewall Cellular App Settings and Zero Belief Options

The Firewalla cell app serves because the unique configuration interface for the AP7, sustaining consistency with the broader Firewalla ecosystem. The WiFi administration part offers complete management over all entry level features.

Community segmentation represents the AP7’s major differentiator from standard entry factors. The VqLAN system permits the creation of remoted micro-networks that forestall lateral motion between gadgets, even throughout the identical bodily location. This proves notably beneficial for IoT machine administration, the place compromised sensible residence gadgets can’t entry crucial community sources.

This works by permitting you to create a number of microsegments/networks per SSID. The SSID stays the identical, however every microsegment has its personal password, permitting you to make use of the identical SSID for all gadgets (if you need) however securing it with visitor entry or separating issues like IoT.

SSID administration helps as much as 10 networks, every configurable with particular safety insurance policies, frequency bands, and community assignments. The power to map SSIDs to VLANs or VqLAN segments allows subtle entry management with out advanced swap configuration.

Private Pre-Shared Key (PPSK) performance addresses a standard enterprise requirement in residence environments. Relatively than sharing a single WiFi password amongst all customers, every individual or machine receives distinctive credentials. This permits particular person entry monitoring and simplified credential revocation with out affecting different customers.

The monitoring capabilities present detailed visibility into community visitors patterns. Native move evaluation reveals device-to-device communication, serving to establish uncommon behaviour or safety threats. Gadget grouping by sign power or linked entry level assists with optimisation and troubleshooting.

WiFi testing instruments combine instantly into the app, offering each sign power evaluation and complete connection evaluation. This eliminates the necessity for separate WiFi analyser apps while making certain compatibility with Firewalla’s particular configuration.

High quality of Service controls allow per-user bandwidth limiting, addressing frequent family bandwidth disputes. Mixed with the segmentation options, this permits creation of devoted networks for various person teams with applicable efficiency ensures.

Efficiency

In my testing atmosphere, the AP7 delivered efficiency in step with its WiFi 7 specs. The 6GHz band offered wonderful throughput when testing with suitable gadgets, while the two.4GHz and 5GHz bands maintained good protection all through my check space.

Actual-world efficiency testing confirmed obtain speeds exceeding 1 Gbps on the 6GHz band when positioned inside shut proximity to the entry level. The 5GHz band delivered constant efficiency within the 600-800 Mbps vary at average distances, while 2.4GHz offered dependable protection at prolonged ranges albeit with anticipated velocity limitations.

The desktop antenna design proved efficient for omnidirectional protection. In contrast to ceiling-mounted entry factors that focus sign patterns downward, the AP7’s radiation sample offers extra even protection throughout horizontal planes. This works properly in single-story environments or when positioned centrally inside multi-story buildings.

Consumer dealing with capabilities appeared sturdy throughout testing with a number of gadgets concurrently linked throughout completely different bands. The entry level managed transitions between bands easily, although the effectiveness of band steering diverse relying on consumer machine sophistication.

WiFi 7 options like 320MHz channels on 6GHz functioned as anticipated when suitable purchasers had been obtainable. Nonetheless, the restricted availability of WiFi 7 consumer gadgets means most customers gained’t instantly profit from these superior capabilities.

The mixing with Firewalla’s safety features proved seamless throughout testing. Creating segmented networks for various machine sorts labored reliably, with visitors isolation functioning as anticipated between VLANs and VqLAN segments.

Energy consumption remained in step with the 30W specification throughout regular operation. The DC energy requirement proved manageable in desktop environments the place mains energy is available.

Value and Various Choices

The Firewalla Entry Level 7 has an RRP of $399, and on the time of writing, it was obtainable for $368.78. Delivery is free to the UK, however you’ll be liable for any import charges.

At first, I believed that was overpriced, however it most likely isn’t in the event you take a look at the Unifi vary:

At that worth, it sits between the Unifi U7 Professional XGS at $299 and the E7 at $499. The U7 Professional XGS options 4×4 for the 5GHz band however 2×2 for the 6GHz, and a single 10GbE port.

The E7 has 4×4 for six and 5 GHz, and a pair of×2 for two.4GHz, then a 10GbE port and 1 GbE port.

Whereas I might regard the Unifi U7 Professional XGS as higher worth for cash by way of the {hardware} itself, I believe the Entry Level 7 is aggressive with {hardware}, and also you get the advantage of seamless integration with the Firewalla ecosystem.

Just like the Firewalla Gold Plus, it’s much less interesting for UK patrons, as you’ll doubtless get stung with import charges.

General

If you’re an current Firewalla person or plan to spend money on one among their routers, and also you wish to prioritise your private home community safety, then the Firewalla AP7 is a simple suggestion.

Whereas the {hardware} does have a slight premium to it in comparison with the likes of Unifi, the seamless integration with the Firewalla system makes up for it.

I’ve additionally observed that fairly a couple of customers on the Firewalla subreddit have ditched the U7 Professional in favour of the AP7 and say that it is much better with fewer issues. Nonetheless, most of the issues of the U7 Professional had been associated to IoT connectivity, which seems to be resolved now.

For UK patrons, the import responsibility implications add important value that makes the machine much less enticing in comparison with regionally obtainable alternate options. The dearth of official UK distribution channels additionally creates potential help and guarantee problems.

I might suggest the AP7 for current Firewalla customers who prioritise community safety and are prepared to simply accept the ecosystem lock-in. The seamless integration and 0 belief capabilities present real worth for security-conscious customers.

I’m James, a UK-based tech fanatic and the Editor and Proprietor of Mighty Gadget, which I’ve proudly run since 2007. Enthusiastic about all issues know-how, my experience spans from computer systems and networking to cell, wearables, and sensible residence gadgets.

As a health fanatic who loves working and biking, I even have a eager curiosity in fitness-related know-how, and I take each alternative to cowl this area of interest on my weblog. My numerous pursuits enable me to carry a novel perspective to tech running a blog, merging life-style, health, and the most recent tech traits.

In my educational pursuits, I earned a BSc in Info Techniques Design from UCLAN, earlier than advancing my studying with a Grasp’s Diploma in Computing. This superior examine additionally included Cisco CCNA accreditation, additional demonstrating my dedication to understanding and staying forward of the know-how curve.

I’m proud to share that Vuelio has persistently ranked Mighty Gadget as one of many prime know-how blogs within the UK. With my dedication to know-how and drive to share my insights, I purpose to proceed offering my readers with participating and informative content material.