Firewalla Gold SE review: Superb network protection, no subscription required

Price When Reviewed

$509

Best Prices Today: Firewalla Gold SE

Whether you’re a tech fanatic or not, you’re most likely unaware of many of the stuff that occurs on your private home community.  Is somebody making an attempt to hack into your safety digital camera? Is somebody downloading films or video games illegally? Maybe your children have snuck a pill into their room and are on TikTok once they’re imagined to be in mattress.

Your router is nearly definitely incapable of telling you the solutions to those questions, so that you’re none the wiser. I’m keen to wager that it doesn’t offer you many (or any) simple methods to handle all of the gadgets linked to its Wi-Fi, or allow you to management when your children can and might’t use the web – a lot much less which apps they will use.

If you need this kind of perception and management, you want a Firewalla. The Gold SE is the newest system to emerge from the US-based firm and is designed to be a extra inexpensive choice than the Gold (and Gold Plus) for these with quick broadband.

Features & design

• 2x 2.5Gbps ports
• 2x 1Gbps ports
• No Wi-Fi

As the title implies, the Firewalla Gold SE is a firewall. Yes, your router already has a firewall but it surely’s most likely not all that nice. And apart from the truth that it received’t let you know what’s happening, it’s important to use an impenetrable browser-based person interface if you wish to make any adjustments.

Firewalla’s mission is to “make cybersecurity simple, affordable, and powerful for everyone” and that’s precisely what the Gold SE does – and extra. Although it’s a chunk of {hardware}, the companion app is what makes it really easy to make use of and accessible. 

The {hardware} seems to be fairly cool – for a chunk of networking package – and in contrast to the Firewalla Purple I reviewed earlier this 12 months, it has a steel case which lends it a extra premium really feel. That’s a very good job, as a result of it’s much more costly.

Jim Martin / Foundry

On one aspect are 4 Ethernet ports: a pair of two.5Gbps LAN and WAN, and an extra pair of 1Gbps LAN ports. This saves on price, as not everybody wants a trio of two.5Gbps LAN ports. And in the event you do, then go and purchase the Firewalla Gold Plus as a substitute.

Even in the event you don’t have 2.5Gbps broadband proper now, the best way issues are going it’s not distant and it’s nicely value future-proofing your buy if you have already got full fibre (FTTP) of some description.

On the opposite aspect are a microSD slot, a USB port, an HDMI output and one other USB port with a pink safety dongle plugged into it, which is for pairing and activation and ought to be left connected. Dust covers are inserted simply to guard any ports you don’t use.

Jim Martin / Foundry

The microSD slot is for docker containers, which I’ll come to later, together with the HDMI output.

In the field you get a USB-C cable and a US energy provide. You can use it in different nations with 230V with a easy adapter.

What does the Firewalla do?

• Stops hackers and malware
• Gives you insights into your community
• Lets you block apps, web sites and web on particular gadgets
• Lets you isolate gadgets from each other

Before explaining the Gold SE’s many options, it’s essential to level out that none require a subscription. Once you’ve purchased your Firewalla, it’s yours to make use of with no additional expense.

Its main job is to behave because the gateway to your private home community and cease something untoward from accessing your gadgets.

It does this by analysing all the information coming in over your broadband connection, and likewise the stuff going out. It already is aware of what’s a ‘bad thing’ and blocks these issues from going any additional. That means malware ought to be stopped earlier than antivirus software program on any of your gadgets even sees it.

The Firewalla additionally blocks advertisements (if you would like it to) and appears on the behaviour of gadgets, then sends you an alert by way of the app so you recognize what’s happening.

It is likely to be as innocuous as “watching video” or “playing games” but it surely may additionally be an “abnormal upload” which you could try.

Jim Martin / Foundry

One of the primary advantages of this safety is that the Gold SE may help to guard safety cameras, sensible shows and different gadgets that may’t run safety software program from being hacked.

Like conventional safety software program, it will possibly additionally block and warn you about harmful web sites, however with out you having to put in software program or browser extensions on each system.

While quite a lot of the options apply to each system by default, the true energy of the Firewalla is the advantageous management you’ve over precisely what it does. You can simply create guidelines to permit or block sure gadgets or teams of gadgets from doing sure issues.

For instance, you may group all of your children’ gadgets collectively and create a rule that blocks web entry from 9pm till 7am the next morning.

But if that’s not particular sufficient, you may create one other rule that stops a selected system from utilizing the web at one other time. And as a result of there’s no restrict on the variety of guidelines, you may enable or block web entry as many instances through the day as you wish to whichever gadgets you want.

One of the principles I’ve arrange is to dam web entry to the Fire TV Sticks and Echo Show 15 in my residence so my children can’t watch stuff after their telephones and tablets block.

Of course, web is just one of many issues you may enable or block. There’s additionally IP addresses, domains (web sites), particular ports, classes of web site (gaming, social, porn, P2P, playing) and apps.

Jim Martin / Foundry

Currently, the checklist of apps is kind of brief, but it surely does embody many of the apps mother and father are more likely to need to management together with Tiktok, Snapchat, Instagram, YouTube, Roblox and Discord.

You can block different apps, but it surely takes a little bit of investigative work to determine which domains the app makes use of and block these.

One of the extra superior options is community segmentation. It’s good with the ability to group gadgets and set guidelines, however the Gold SE can even preserve gadgets from speaking to one another. A standard means that is used is to isolate all of your IoT gadgets, akin to cameras, sensible audio system, sensible home equipment and others out of your telephones, tablets laptops and PCs.

This signifies that ought to anybody handle to hack right into a poorly secured digital camera, they wouldn’t be capable of entry your PC, cellphone or every other system containing delicate information.

Thanks to the three LAN ports on the Gold SE, you may join gadgets to cheap unmanaged switches, which implies you’re not restricted to only one system on every port.

However, since many of the gadgets I’m speaking about use Wi-Fi and never Ethernet, you’d want to attach a Wi-Fi entry level to one of many LAN ports to create a separate Wi-Fi community out of your principal one.

And if you wish to have greater than three separate LANs, you’d want to make use of the Gold SE’s VLAN characteristic which is much more superior and requires you to make use of dearer managed switches.

Setup

It’s essential to notice that the Gold SE doesn’t have Wi-Fi itself: it isn’t a Wi-Fi router. You should buy Firewalla’s Wi-Fi SD add on, however that received’t flip it right into a Wi-Fi router. Instead, it’s supposed as a backup measure so you should utilize your cellphone as a hotspot and share its information connection to your entire residence community in case your principal broadband goes down.

Typically, you’d join the Firewalla to your present router utilizing its WAN port, after which join a Wi-Fi entry level or mesh Wi-Fi system (set to bridge mode) to one of many LAN ports.

The Firewalla can’t monitor or management every other gadgets linked to your present router, which is why it’s finest to disable its Wi-Fi and use a mesh system or entry level linked to the Firewalla.

It could sound complicated, however Firewalla’s app walks you thru your entire setup course of and descriptions the varied methods you may add the Gold SE into your present setup. There’s additionally a really useful getting started guide on Firewalla’s web site.

Jim Martin / Foundry

In the perfect world, you’d use it in router mode, and set your present router to bridge mode. You can use the Firewalla in bridge mode as a substitute to “transparently monitor your network” however you’ll lose many of the finest options.

You can even choose Simple or DHCP mode which is for whenever you need to preserve your outdated {hardware} setup simply as it’s, however in actuality, these are legacy modes that are more likely to be phased out starting in 2024. In their place is an Experimental Simple Mode (in beta on the time of assessment) which is appropriate with extra routers: the outdated Simple Mode required you to have one among a particular checklist of routers, in any other case it wouldn’t work.

Firewalla app

Once put in, you should utilize the Firewalla app to see what’s happening, get notifications and create guidelines or manually block gadgets from doing issues.

Jim Martin / Foundry

Some folks don’t like the truth that that is the one method to handle Firewalla gadgets, and would favor an internet portal as a substitute. For most individuals that purchase a Firewalla to make use of at residence, the app does a wonderfully good job.

As new gadgets are detected on the community, you’ll get notifications. Some of those can be simple to establish, however others is likely to be known as “Unkown”, which implies you’ll should do some detective work as a way to give them the suitable title.

Jim Martin / Foundry

Sometimes meaning going into the settings on a tool, akin to a cellphone or pill, and discovering out its IP or MAC handle after which looking for it in Firewalla’s checklist of gadgets. Fortunately, it’ll present partial matches, so that you may solely must enter the ultimate three digits of the IP handle or the primary few of a MAC handle.

If a tool is utilizing MAC randomisation (as iPhones and iPads do) the app offers you step-by-step directions for the way to disable it, so you may monitor and block these gadgets correctly.

By default, new gadgets are put right into a Quarantine checklist and can solely acquire entry to the web (and different gadgets on the community) when you approve them. This is nice for protecting management of what (and who) is linked to the community.

Jim Martin / Foundry

Some alarms (notifications) are arrange by default, too. If a tool uploads quite a lot of information, you’ll get a notification. But you may flip off notifications and easily verify the Alarms checklist to see what’s occurred lately.

As I’ve a number of safety cameras that file to the cloud, that’s what I are likely to within the checklist, and it’s this kind of perception that may be fascinating. I can see precisely how a lot information a digital camera uploaded, and to which area the video went.

You can even see a listing of which gadgets have uploaded – or downloaded – essentially the most information.

Jim Martin / Foundry

The residence display screen shows total community efficiency, the velocity of your broadband connection and community visitors over the previous 24 hours, so it’s simple to identify if there have been any slowdowns or points.

Jim Martin / Foundry

Scroll down additional and also you’ll discover shortcuts to the primary options which embody issues akin to Smart Queue – which mechanically prioritises time-critical visitors akin to video streaming and video calls – and Family, which incorporates Family Protect (a pre-defined set of filters to dam porn, violence and different inappropriate tings), Safe Search and Social Hour, which is an easy toggle that blocks social networking for an hour.

One of the perfect issues about Firewalla is that if a characteristic isn’t doing precisely what you need it to, there are normally different strategies which you could tweak to your liking.

If Family Protect isn’t filtering out the unhealthy stuff, as a result of it’s simply utilizing OpenDNS, then you may create guidelines that apply to your children’ gadgets which might be stricter. Similarly, the default advert blocking may not be strict sufficient, however you may customise it utilizing a special goal checklist by creating your individual rule.

One rule you’ll most likely need to arrange instantly is to permit outbound connections to googleadservices.com, in any other case all Google purchasing hyperlinks can be blocked as a result of they’re ‘ads’, which is irritating.

Jim Martin / Foundry

The solely concern right here is that it received’t be apparent to lots of people why these hyperlinks are blocked, nor that’s it’s attainable to do something apart from select ‘Default’ or ‘Strict’ mode as a result of these are the one choices you see within the Ad Block settings.

But, that is additionally the fantastic thing about the Gold SE: quite a lot of its energy is hidden away to make it simple to make use of, and it’ll develop with you as you begin to need extra from it.

This is why it’s simple to suggest shopping for a Firewalla even when your networking data is pretty restricted. The app will stroll you thru putting in it and the default settings will present glorious safety with out you having to configure something in any respect. It doesn’t matter that you simply’re utilizing solely a fraction of its energy.

Many options will be turned on or off with a toggle change, once more, with out you needing to know the way they work. And it’s actually not troublesome to group gadgets and begin making guidelines so sure options are enabled just for some gadgets.

Just a few options want extra data. If you wished to make use of the Firewalla as a VPN server you’ll must set that up, and the identical goes for the beforehand talked about VLANs.

One of the opposite cool options is assist for docker containers. In essence, the Gold SE is a tiny laptop which runs Linux (Ubuntu, to be exact). It has sufficient energy to run further ‘apps’ akin to Pi-Hole or HomeBridge, however they’re sandboxed so can’t intrude with the rest.

You should be cautious in the event you do begin experimenting with these, as a result of configuring them incorrectly can result in issues and potential safety holes, however the level is that the Firewalla’s potential is large.

If you need to play with these, you may hook up a keyboard and monitor to the USB and HDMI ports: that’s what they’re for. You’ll must study some Linux fundamentals, however Firewalla’s tutorials stroll you thru all of it step-by-step.

Getting again to blocking, there are shortcuts whenever you faucet on any system – or group – that allow you to block YouTube, Tiktok, and Facebook in addition to Gaming, Social, Video, Porn and Internet. It’s an important system as a result of one faucet blocks it for an hour, however a second faucet applies the block completely… till you faucet it once more, at which level the block is eliminated.

Jim Martin / Foundry

Because the Firewalla is doing the blocking on the community stage, it’s not instantaneous and full like it will be in the event you used parental management software program. It’s nonetheless attainable to observe movies which have already been cached on the system, in addition to feedback and different issues in social feeds that are additionally cached. After that, although, any extra scrolling or looking received’t work.

A characteristic being added quickly is Users. This will allow you to assign gadgets to folks after which see, for instance, how a lot time your little one has performed Fortnite or watched YouTube or Netflix over the previous week. Firewalla plans so as to add monitoring for lots extra apps, too, in addition to the flexibility to restrict the period of time spent utilizing any explicit app (throughout a number of gadgets), which can makes its parental controls significantly extra helpful.

If you want, you may pin particular gadgets or teams to the app’s residence display screen to make these shortcuts actually accessible.

Beyond this, there’s a bunch of different stuff together with a device to check your Wi-Fi velocity at totally different locations in your house, one other to scan for open ports, and one more to scan for any open ports on gadgets linked to the community.

Price & availability

The Firewalla Gold SE prices $509 and is on the market solely instantly from Firewalla. It isn’t – but – offered on Amazon, though the Purple SE model is, within the US at the very least.

Jim Martin / Foundry

The Purple SE is one other new mannequin, which is way more inexpensive at $249, versus $369 for the regular Purple. The principal distinction is that the Purple helps broadband speeds as much as 1Gbps, however the SE can deal with solely 500Mbps – advantageous if in case you have no intention of getting quicker web.

Those are the official costs, however they had been all discounted on the time of assessment, with $60 off the Gold SE bringing it all the way down to $449, and making it a lot better worth. You can add the Wi-Fi SD module to your order which saves $15 on the same old $59 worth.

If you’re tempted by a Gold SE and also you’re within the UK, you’ll have so as to add VAT, which makes the worth round £485. The principal concern is that the one delivery choice (expedited) prices $49.99, and that makes for a grand complete of about £535, which is fairly off-putting.

If you go for the Purple or Purple SE, there’s less expensive commonplace delivery that prices $15.99.

Should I purchase the Firewalla Gold SE?

Yes, if in case you have gigabit broadband or quicker and want a tool that may sustain with that velocity. It’s additionally the fitting selection in the event you want a number of LAN ports for isolating teams of gadgets from one another.

If you’ve slower broadband and don’t essentially want these LAN ports, the Firewalla Purple, and Purple SE are a less expensive alternate options which have primarily the identical options and, just like the Gold SE, doesn’t require any kind of subscription.

Either means, each gadgets are very simple to suggest to anybody that desires be capable of see what’s occurring on their residence community and be in command of it.

This assessment initially appeared on techadvisor.com.