Firewalla product data: model specs and AP7 compatibility
Compare Firewalla appliance specs, AP7 variants, software versions and MSP relationships, with dated model and compatibility notes.
Firewalla appliances, AP7 access points and MSP are separate product layers
Firewalla’s catalog and support guides describe network-security appliances, AP7 wireless access points, accessories, a mobile app and the MSP management portal. These are different products and records: an AP7 is not a router, an accessory card does not prove package inclusion, and an MSP plan is not a hardware model. The current selection guide and store assortment were checked October 4, 2026; the published lineup can change.
Scroll to compare →
| Product layer | Official examples | Record boundary |
|---|---|---|
| Security appliances | The September 29, 2026 selection guide compares Gold SE, Gold Plus, Gold Plus SFP, Gold Pro, Orange, Purple and Purple SE. | Keep model, revision/generation, region and source date attached. The guide marks original Purple end-of-life and Gold Plus SFP “Coming Soon”; neither status should be generalized to Purple SE or other Gold units. |
| Wireless access points | Firewalla AP7 Desktop (AP7D) and AP7 Ceiling (AP7C) are separate Wi-Fi 7 access-point models. | AP7 is not a gateway/router. Check the current installation guide for host-box and mode compatibility; Firewalla’s two AP7 pages differ on whether Orange is supported. |
| Accessories | The observed store collection includes model-specific mounts, a Wi-Fi SD card, international power cord and Purple/Purple SE accessory set. | Keep compatibility and included-versus-separate package contents tied to the exact product listing. Collection membership, price and stock can change. |
| App and management service | Firewalla’s mobile app, box software, AP7 releases and MSP web portal have separate functions and release records. | Do not combine device/license, hardware, firmware/app version or MSP plan into one product identifier. |
Compare Firewalla appliances by ports, packet processing and memory
The official product-selection guide, updated September 29, 2026, reports the hardware values below. Firewalla defines its “Packet Processing Speed” as full IDS/IPS with three regions blocked and a 1,000-entry target-list rule, measured between LAN and WAN in DHCP mode. That test label is not a raw port rate or a guarantee of ISP throughput. The guide says network-size estimates depend on device type and some features may be in beta.
Scroll to compare →
| Model in Firewalla’s guide | Published hardware and processing labels | Model-specific note |
|---|---|---|
| Gold SE | 2 × 2.5 GbE + 2 × 1 GbE; >2 Gb packet processing; 4 GB RAM; quad-core 64-bit ARM. | The quick comparison calls it “up to 2 Gbps”; use the guide’s label and test definition rather than treating it as WAN capacity. |
| Gold Plus | 4 × 2.5 GbE; >5 Gb in the full hardware table; 4 GB RAM; quad-core 64-bit Intel. | The guide’s quick comparison separately says up to 5 Gbps with LAG and 2.5 Gbps on a single port. Preserve both source labels instead of normalizing them. |
| Gold Plus SFP | 2 × 10 GbE + 2 × 2.5 GbE + 1 × SFP+; 5 Gb packet processing; 4 GB RAM; quad-core 64-bit ARM. | The September 29 quick comparison labels availability “Coming Soon”; confirm current listing status before treating it as orderable. |
| Gold Pro | 2 × 10 GbE + 2 × 2.5 GbE; 10 Gb packet processing; 8 GB RAM; quad-core 64-bit Intel. | Its direct product page additionally lists a console port, 12th-generation CPU, adapter, U.S.-style cord and one-year manufacturer warranty. Those package details apply to Gold Pro only. |
| Orange | 2 × 2.5 GbE; 2 Gb packet processing; 2 GB RAM; quad-core 64-bit ARM. | The guide lists built-in dual-band Wi-Fi 7; this differs from Gold, Purple and Purple SE appliance rows. |
| Purple SE | 2 × 1 GbE; 500 Mbps packet processing; 2 GB RAM; quad-core 64-bit ARM; 16 GB storage. | The product listing says it lacks short-distance Wi-Fi; use a separate access point for Wi-Fi. Its included adapter/cable and warranty are specific to this listing. |
AP7D and AP7C differ in radio, mounting and power
Firewalla describes AP7 as an access point, not the main router. The two models share bridged 10 GbE and 2.5 GbE ports and can mesh using Ethernet or Wi-Fi backhaul, but the radio, mounting and power fields differ. The September 11, 2026 installation guide and the product FAQ do not give the same host-box list, so verify the current guide for an exact deployment.
Scroll to compare →
| AP7 model or question | What Firewalla currently documents | Compatibility or data note |
|---|---|---|
| Host Firewalla unit | The AP7 product-page FAQ names a Gold or Purple box. The installation guide, updated September 11, 2026, says any Gold, Purple or Orange box in Router or Bridge mode is required. | These official statements differ. Keep both source URLs and dates visible; do not silently claim all three box families are universally compatible. |
| AP7 Desktop (AP7D) | Two bridged Ethernet ports: 10 GbE and 2.5 GbE; tri-band 2.4/5/6 GHz Wi-Fi 7, with 6 GHz listed as 4 × 4; desktop form, supplied power adapter, no PoE. | Use the AP7D variant and region in the record. The comparison guide says its ports do not provide individual VLAN tagging. |
| AP7 Ceiling (AP7C) | Two bridged Ethernet ports: 10 GbE PoE+ and 2.5 GbE; tri-band 2.4/5/6 GHz Wi-Fi 7, with 6 GHz listed as 2 × 2; ceiling/wall mounting. | The installation guide says PoE+ must meet IEEE 802.3at or 802.3bt, not 802.3af. A 12 V/2.5 A adapter is another option but is sold separately. |
| Backhaul and network segmentation | The current installation guide says AP7D and AP7C can mesh with Ethernet or Wi-Fi backhaul. It says AP7 ports do not support individual VLAN tagging. | For VLAN tagging through AP7 ports, Firewalla points to a managed-switch setup. Do not equate an AP7 wireless SSID, a Firewalla VLAN and a tagged AP port. |
Keep device licenses, software releases and MSP plans distinct
A Firewalla box, its device-bound license, the phone app, box/AP7 software and MSP management plans describe separate layers. Firewalla’s September 29 product guide says there is no subscription fee for a physical product; its current MSP material describes a separate web service with Lite, Professional and Business tiers. Do not extend a hardware statement into a claim that every optional service or feature is free.
Scroll to compare →
| Record layer | What the official pages distinguish | Fields that belong together |
|---|---|---|
| Box and license | The Terms say each Firewalla License applies to one Firewalla device unless explicitly permitted otherwise. | Record the device model and published license relationship; never include a QR code, serial, account or pairing identifier. |
| Software and release channel | The October 3, 2026 version summary separates iOS, Android, MSP, box software, AP7 Desktop regional releases, AP7 Ceiling and AP Controller; Production, Beta and Early Access are different channels. | Pair a version with component/model, region where listed, channel and the summary’s update date. Release values change and are omitted here. |
| MSP service | Firewalla MSP is a web portal for managing Firewalla boxes. MSP Lite complements the mobile app; Professional and Business add plan-specific management, reporting, integrations and service entitlements. | Keep plan, included/additional seats, administrators, retention and integrations separate from hardware specs. Check the current plan table for live entitlements; no prices or trial terms are reproduced here. |
| Product vs subscription | The product-selection guide’s no-subscription statement is explicitly about physical products; Terms and MSP pages describe service plans and possible charges separately. | Scope fee statements to the cited physical product or exact service. Do not treat “Gold Plus” as an MSP tier or infer an MSP plan is bundled with a box. |
Read public specifications alongside the posted Terms
The current Firewalla Terms display an effective date of November 1, 2017 and an update date of May 10, 2023. Their introduction applies to the App, website and Service, and says “App” means both website and app. This is a source-attributed summary, not a legal conclusion or permission statement.
Scroll to compare →
| Evidence or data class | What the source says | Use this boundary |
|---|---|---|
| Automated access | The Terms prohibit automated use of the App or Service, bypassing robot-exclusion headers, and using software, technology or devices to scrape, spider or crawl the App or Service or harvest/manipulate data. | Keep the wording attributed to the Terms and to its stated App/Service scope. Do not infer permission from public visibility or crawler directives. |
| Public product information | Official catalog, product pages, dated model comparisons, installation guides, software summaries and lifecycle notices describe public specifications and support statements. | Keep each attribute paired with the exact product or model, original wording, source and observed/update date. |
| Private or identifying information | Firewalla software and MSP support content discusses customer devices, accounts and network activity; a device QR code is described as a license key. | Exclude network flows, alarms, device names, IP/MAC addresses, rules/configurations, accounts, credentials, QR/license identifiers and customer support content from a public product reference. |
Content reviewed 2026-10-04.