Firewalla Access Point 7 Review

I’ve beforehand reviewed the Firewalla Gold Plus and thought it was glorious, with it successfully providing enterprise-level security measures with a user-friendly interface ultimate for house customers/prosumers and small companies.

The Gold Plus is a router solely, with no WiFi, however Firewalla have began to launch WiFi {hardware} to enhance their firewall routers.

To date, this contains the fundamental $59 Firewalla Wi-Fi SD, which is a USB dongle that plugs into your Firewalla however is simply designed for as much as 5 shoppers and is designed for use as a brief backup in your LAN in case your AP/WiFi is down.

They then have the just lately launched Entry Level 7, which I’m reviewing right now. This can be a $400 desktop entry level with tri-band WiFi 7 and multi-gig ethernet connectivity, together with a 10GbE port.

It’s barely odd for an entry level resulting from its desktop design, moreover, it makes use of DC energy and never POE, and it could possibly solely be utilized by a Firewalla router.

The explanation why you’ll be able to solely use it with Firewalla, is that it’s designed to combine seamlessly with the options of Firewalla and permits you to create zero belief networks, considerably enhancing the safety of your community.

Associated Content material

Specification/ Options

{Hardware} and Design

• Two bridged, multi-speed Ethernet ports: one 2.5 Gbit/s RJ45 and one 10 Gbit/s RJ45
• Powered by DC energy provide (12 V, roughly 5 A)
• Manufacturing unit-reset through a bottom-mounted button
• Entrance-panel LED signifies standing (numerous colors for power-on, pairing, errors)
• Desktop kind issue: roughly 138 × 80 × 190 mm, weight ≈ 627 g; enclosure comprised of polycarbonate
• Inside omni-directional antennas

Wi-fi Specs

• Helps Wi-Fi requirements from legacy (802.11a/b/g/n/ac) to fashionable Wi-Fi 6 (802.11ax) and Wi-Fi 7 (802.11be)
• Tri-band radios:
  • 2.4 GHz (2×2 MU-MIMO)
  • 5 GHz (2×2 MU-MIMO)
  • 6 GHz (4×4 MU-MIMO)
• As much as 8 spatial streams, with 320 MHz channel help on 6 GHz
• Most theoretical knowledge charges:
  • 2.4 GHz: ~688 Mbps (40 MHz)
  • 5 GHz: ~2.88 Gbps (160 MHz)
  • 6 GHz: ~11.5 Gbps (320 MHz)
• Antenna good points (~dBi): 2.4 GHz ~5.2, 5 GHz ~6.5, 6 GHz ~6.0
• Transmit energy: 2.4 GHz ~24 dBm, 5 GHz ~25 dBm, 6 GHz ~22 dBm
• As much as 10 BSSIDs per radio

Community and Safety

• VLAN help (IEEE 802.1Q)
• Wi-fi safety: WPA/WPA2/WPA3 and PPSK (Private Pre-Shared Key) with Blended Private mode
• Superior QoS with per-user price limiting
• Visitor isolation supported
• Able to dealing with 300+ concurrent shoppers

Software program Options and Configuration (through Firewalla App)

• Zero Belief & Microsegmentation:
  • VqLAN permits you to group customers/gadgets into remoted micro-networks, limiting lateral menace motion
  • System Isolation blocks communication inside a gaggle (e.g., for visitor or IoT gadgets)
• SSID Customisation:
  • As much as 10 SSIDs might be created, every with devoted settings for community (LAN/VLAN), safety mode, frequency bands
  • Potential to assign SSIDs to particular consumer/teams or VLANs
  • Every SSID can use Blended Private (WPA2 for two.4/5 GHz, WPA3 for six GHz), WPA2/WPA3, or WPA3 solely
• Private Key (PPSK):
  • Distinctive private keys per consumer/gadget on the identical SSID, enabling automated task to group or VLAN—even when MAC handle randomised
• Mesh Capabilities:
  • AP7 D can mesh with different AP7 models (Desktop or Ceiling) utilizing Ethernet or Wi-Fi backhaul
  • App exhibits mesh topology and signal-strength visualisation
• Visibility and Monitoring:
  • ‘Native Flows’ reveals device-to-device and native community site visitors
  • Units might be sorted/grouped by sign energy or related AP
  • System-level Wi-Fi particulars embrace SSID, channel, band, MIMO, Rx/Tx charges
• Wi-Fi Testing:
  • Presents a signal-strength check and full Wi-Fi check (SSID, BSSID, channel, AP, band, sign) to guage protection
• Multi-Hyperlink Operation (MLO) (preview):
  • Allows Wi-Fi 7 gadgets to attach throughout a number of bands concurrently, enhancing throughput and reliability
  • Requires WPA3 and particular firmware variations; legacy gadgets could also be incompatible
• Superior Settings per AP:
  • Guide management over frequency channel and transmit energy for every band (default automated advisable)
  • Adjustable 5 GHz channel width; DFS channels used when on automated, however might be disabled if interference happens
  • LED management: flip standing LED on/off; “Find This Entry Level” lights LED inexperienced for identification
  • IP reservation and native area hostname settings for every AP
• International Wi-Fi Settings:
  • Band steering to shift gadgets between bands throughout idle
  • Maximise compatibility (default setting) for broader gadget help
  • Storm management to suppress broadcast/multicast floods
  • Inclusion of DFS channels on 5 GHz (default), with skill to disable
• Comfort Instruments:
  • Generate QR codes for SSIDs (major or microsegment) to simplify visitor/gadget connection
  • View AP topology in-app, with gadget counts and backhaul paths

Energy and Environmental

• Energy draw as much as ~30 W (Desktop model)
• Working surroundings: 0 °C to 40 °C, humidity 5–95 % non-condensing
• Storage: −40 °C to +70 °C

Necessities and Compatibility

• Requires a Firewalla Gold or Purple gadget operating in router mode
• App required (iOS or Android) for setup and administration
• Firmware conditions for some options (e.g., MLO, Occasions)

Unboxing / Design

For one thing classed as an entry level, that is an uncommon design, with it being a desktop gadget that requires mains energy with a DC barrel port.

Nonetheless, within the context of house customers, that is maybe a greater design, avoiding the necessity to ceiling mount and run lengthy Ethernet cables to it. The Firewalla lacks POE, so the DC port additionally reduces the necessity for added {hardware}.

You possibly can, after all, use a traditional entry level on a desk, however the antennas usually are not designed for this, whereas the AP7 has 8 antennas that radiate throughout the gadget to offer the perfect sign doable.

On the rear of the AP7, you might have two Ethernet ports, one is 10GbE and the opposite 2.5GbE. You don’t usually see twin Ethernet ports on entry factors (the Zyxel NWA130BE had them), however it’s one thing I discover very helpful in house or small enterprise environments, because it permits you to daisy chain the AP to a swap or a single gadget.

Past that, the AP7 is only a white vertical field with yellow accents on the bottom and prime. It doesn’t look fairly as premium as some shopper choices, however it’s smaller than many premium mesh WiFi programs, and the general design is unoffensive.

Set Up

I used to be despatched a single AP7, so I set this up wired immediately into my Firewalla Gold Plus. With the 10GbE and a couple of.5GbE ports, you’ll be able to run a wired backhaul to different AP7s whereas leaving a spare port to day by day chain different gadgets.

I believe the primary time I set this up, the Firewalla auto-detected the AP7. I later switched to bridge mode to make use of in my current community, and once I switched again, I needed to manually add it.

The guide course of is easy, with the AP7 switched on and reset, it ought to have a flashing white LED, and also you simply have to go to WiFi within the app, choose entry factors, then add. Then comply with the fundamental arrange process.

It would additionally work as a wi-fi mesh system, which I haven’t been in a position to check. The one concern with that is the triband design, with 2×2 5Ghz band, which implies the wi-fi backhaul will probably be shared, and there will probably be vital sign loss. Solely premium shopper mesh programs just like the Netgear Orbi RBE973 have a devoted 5GHz 4×4 backhaul.

Firewall Cellular App Settings and Zero Belief Options

The Firewalla cellular app serves because the unique configuration interface for the AP7, sustaining consistency with the broader Firewalla ecosystem. The WiFi administration part gives complete management over all entry level capabilities.

Community segmentation represents the AP7’s major differentiator from standard entry factors. The VqLAN system permits the creation of remoted micro-networks that stop lateral motion between gadgets, even inside the identical bodily location. This proves notably precious for IoT gadget administration, the place compromised sensible house gadgets can not entry essential community sources.

This works by permitting you to create a number of microsegments/networks per SSID. The SSID stays the identical, however every microsegment has its personal password, permitting you to make use of the identical SSID for all gadgets (if you would like) however securing it with visitor entry or separating issues like IoT.

SSID administration helps as much as 10 networks, every configurable with particular safety insurance policies, frequency bands, and community assignments. The power to map SSIDs to VLANs or VqLAN segments allows refined entry management with out complicated swap configuration.

Private Pre-Shared Key (PPSK) performance addresses a typical enterprise requirement in house environments. Fairly than sharing a single WiFi password amongst all customers, every individual or gadget receives distinctive credentials. This permits particular person entry monitoring and simplified credential revocation with out affecting different customers.

The monitoring capabilities present detailed visibility into community site visitors patterns. Native movement evaluation reveals device-to-device communication, serving to determine uncommon behaviour or safety threats. System grouping by sign energy or related entry level assists with optimisation and troubleshooting.

WiFi testing instruments combine immediately into the app, offering each sign energy evaluation and complete connection evaluation. This eliminates the necessity for separate WiFi analyser apps while guaranteeing compatibility with Firewalla’s particular configuration.

High quality of Service controls allow per-user bandwidth limiting, addressing frequent family bandwidth disputes. Mixed with the segmentation options, this permits creation of devoted networks for various consumer teams with acceptable efficiency ensures.

Efficiency

In my testing surroundings, the AP7 delivered efficiency in line with its WiFi 7 specs. The 6GHz band offered glorious throughput when testing with suitable gadgets, while the two.4GHz and 5GHz bands maintained good protection all through my check space.

Actual-world efficiency testing confirmed obtain speeds exceeding 1 Gbps on the 6GHz band when positioned inside shut proximity to the entry level. The 5GHz band delivered constant efficiency within the 600-800 Mbps vary at reasonable distances, while 2.4GHz offered dependable protection at prolonged ranges albeit with anticipated velocity limitations.

The desktop antenna design proved efficient for omnidirectional protection. In contrast to ceiling-mounted entry factors that focus sign patterns downward, the AP7’s radiation sample gives extra even protection throughout horizontal planes. This works properly in single-story environments or when positioned centrally inside multi-story buildings.

Shopper dealing with capabilities appeared sturdy throughout testing with a number of gadgets concurrently related throughout totally different bands. The entry level managed transitions between bands easily, although the effectiveness of band steering diversified relying on shopper gadget sophistication.

WiFi 7 options like 320MHz channels on 6GHz functioned as anticipated when suitable shoppers have been accessible. Nonetheless, the restricted availability of WiFi 7 shopper gadgets means most customers received’t instantly profit from these superior capabilities.

The mixing with Firewalla’s security measures proved seamless throughout testing. Creating segmented networks for various gadget varieties labored reliably, with site visitors isolation functioning as anticipated between VLANs and VqLAN segments.

Energy consumption remained in line with the 30W specification throughout regular operation. The DC energy requirement proved manageable in desktop environments the place mains energy is available.

Value and Different Choices

The Firewalla Entry Level 7 has an RRP of $399, and on the time of writing, it was accessible for $368.78. Transport is free to the UK, however you can be answerable for any import charges.

At first, I believed that was overpriced, but it surely most likely isn’t in case you take a look at the Unifi vary:

At that worth, it sits between the Unifi U7 Professional XGS at $299 and the E7 at $499. The U7 Professional XGS options 4×4 for the 5GHz band however 2×2 for the 6GHz, and a single 10GbE port.

The E7 has 4×4 for six and 5 GHz, and a couple of×2 for two.4GHz, then a 10GbE port and 1 GbE port.

Whereas I might regard the Unifi U7 Professional XGS as higher worth for cash by way of the {hardware} itself, I believe the Entry Level 7 is aggressive with {hardware}, and also you get the good thing about seamless integration with the Firewalla ecosystem.

Much like the Firewalla Gold Plus, it’s much less interesting for UK patrons, as you’ll probably get stung with import charges.

General

In case you are an current Firewalla consumer or plan to spend money on certainly one of their routers, and also you need to prioritise your house community safety, then the Firewalla AP7 is a straightforward advice.

Whereas the {hardware} does have a slight premium to it in comparison with the likes of Unifi, the seamless integration with the Firewalla system makes up for it.

I’ve additionally seen that fairly just a few customers on the Firewalla subreddit have ditched the U7 Professional in favour of the AP7 and say that it is much better with fewer issues. Nonetheless, lots of the issues of the U7 Professional have been associated to IoT connectivity, which seems to be resolved now.

For UK patrons, the import responsibility implications add vital price that makes the gadget much less enticing in comparison with domestically accessible options. The shortage of official UK distribution channels additionally creates potential help and guarantee problems.

I might advocate the AP7 for current Firewalla customers who prioritise community safety and are prepared to just accept the ecosystem lock-in. The seamless integration and 0 belief capabilities present real worth for security-conscious customers.

I’m James, a UK-based tech fanatic and the Editor and Proprietor of Mighty Gadget, which I’ve proudly run since 2007. Captivated with all issues know-how, my experience spans from computer systems and networking to cellular, wearables, and sensible house gadgets.

As a health fanatic who loves operating and biking, I even have a eager curiosity in fitness-related know-how, and I take each alternative to cowl this area of interest on my weblog. My numerous pursuits permit me to convey a singular perspective to tech running a blog, merging way of life, health, and the most recent tech developments.

In my educational pursuits, I earned a BSc in Info Programs Design from UCLAN, earlier than advancing my studying with a Grasp’s Diploma in Computing. This superior research additionally included Cisco CCNA accreditation, additional demonstrating my dedication to understanding and staying forward of the know-how curve.

I’m proud to share that Vuelio has persistently ranked Mighty Gadget as one of many prime know-how blogs within the UK. With my dedication to know-how and drive to share my insights, I goal to proceed offering my readers with partaking and informative content material.