Home / App Reviews / Firewalla review: A powerful all-in-one solution to monitor and protect your home network

Firewalla review: A powerful all-in-one solution to monitor and protect your home network

Article Contents

  • 1 The Good
  • 2 The Not So Good
  • 3 {Hardware}, what’s within the field
  • 4 Set up and setup
  • 5 Options

    • 5.1 Lively monitoring
    • 5.2 Passive monitoring – Alarms
    • 5.3 Blocking
    • 5.4 Different options
    • 5.5 What’s lacking
  • 6 Must you purchase it?

    • 6.1 Purchase it if
    • 6.2 Do not buy it if
  • 7 The place to purchase

Safety and privateness are on the coronary heart of our considerations with expertise now. With each breach, hack, and vulnerability, we uncover how frail this digital footprint we have created is. To guard ourselves, we make certain our gadgets are all the time up to date with the most recent safety patches, we attempt to keep away from suspicious websites and apps, we hold our eyes open for phishing makes an attempt in our inbox, however that also is not sufficient. If in case you have sensible house devices or if you happen to do not management each system in your family, you want network-level safety. Some Wi-Fi routers provide this, however the characteristic is normally tied in a month-to-month subscription.

Firewalla goals to offer that network-level safety for a one-time payment ($109 or $179). You purchase the tiny system, plug it in, and it displays all site visitors, whether or not it is coming from wi-fi or Ethernet gadgets, and warns you when one thing appears out of order. It additionally provides a bunch of sensible options to your community: parental protections, per-device guidelines, advert blocking, VPN server, amongst others. I have been utilizing it for a month and it has turn into a precious device in my home.

The Good

Community monitoringLoads of routers do not provide per-device bandwidth utilization. Firewalla does and allows you to monitor misbehaving gadgets and warns you when one thing is out of order.
GuidelinesParental controls are good, however Firewalla goes the additional step of letting you block various kinds of utilization per system at particular instances.
Extra optionsAdvert blocker, native VPN to connect with your own home community even if you happen to’re away, DNS booster, and extra.
One-time valueNo subscription, pay as soon as for the system and also you get all of the included companies.

The Not So Good

Too delicateFirewalla’s default alerts may be alarming for no cause. I need not know if my cellphone uploaded 1MB to Google’s servers — it is an Android cellphone, that is anticipated.
Lacking optionsThe detailed per-domain site visitors monitor solely covers the final 24hrs. No per-device bandwidth restrict per day or hour, no advert blocking exceptions.

{Hardware}, what’s within the field

Earlier than you get began with Firewalla, it’s worthwhile to take a look at the checklist of suitable routers and mesh networks and ensure yours is supported. If that is the case, you need to select amongst two attainable items: Purple ($109) for web connections which might be slower than 100Mbit, and Blue ($179) for sooner ones. Since my connection tops out at 16-20Mbit on a very good day, I am reviewing the Purple, however all options must be the identical throughout each choices. Firewalla Blue can simply deal with an even bigger load.

The tiny system is so simple as it will get. On the entrance, there’s Micro-USB for energy and a MicroSD slot with a pre-inserted card, that acts because the mind of the system. The again has Ethernet and USB-A ports. Vents on the perimeters assist it cool off, and a QR barcode on the highest is required to authenticate your Firewalla license.

Within the field, you get the unit, an Ethernet cable, a wall charger and USB-A to Micro-USB cable, and a handbook. You do not want extra.

Set up and setup

After plugging within the field for energy, it’s worthwhile to join it to your community over Ethernet. There are a number of attainable situations right here:

  • If in case you have a modem/router all-in-one system, you simply plug Firewalla in one of many LAN ports.
  • If in case you have a separate modem and router, you plug Firewalla in one of many router’s LAN ports — it will monitor all wi-fi gadgets and even ones plugged into the router’s different LANs.
  • If in case you have a modem and a mesh community, it’s worthwhile to plug Firewalla within the major mesh system’s LAN ports — it will monitor something linked to the first or satellite tv for pc mesh items, whether or not wirelessly or by way of LAN.

A couple of minutes of wait are vital for Firewalla in addition up and initialize, so be a bit affected person. Within the app, you may see a + signal to start out the pairing course of, which requires scanning the barcode on prime of the unit. You then’re taken via the preliminary setup, the place you possibly can select between easy and DHCP modes. My Netgear Orbi is suitable with the straightforward mode, so I went with that.

Firewalla setup.

Firewalla
Firewalla
Developer: Firewalla LLC
Value: Free

Options

The Firewalla app is chockfull of options and can take a little bit of time to get used to, however as soon as you already know the place every thing is, it is a fairly simple expertise. Virtually every thing you set on all the community may also be utilized on a per-device foundation, so hold that in thoughts as you learn on.

Lively monitoring

On the homescreen, you may discover your paired Firewalla items. Select one and also you’re introduced with a abstract of every thing you want: a graph of complete bandwidth utilization from the final 30 days, 24 hours, or 60 minutes, shortcuts to entry linked gadgets, alarms, guidelines, and all options (Advert Block, Household Defend, VPN Server, and many others…).

30-day, 24-hour, and 60-minute utilization on homescreen. The app has a darkish theme for Android 10.

Beside customizing this display screen to point out extra characteristic shortcuts, you possibly can faucet on the 24-hour graph (not the opposite two) to view an in depth community circulation. It is divided by hour, add, obtain, chronological historical past, or apps. The latter is Firewalla’s personal approach of telling you what you used a tool for (e mail, messaging, social, video, and so forth); it is not very exact as not all IP addresses are categorized, nevertheless it’s indicative sufficient.

Left: Customizing options. Center: What’s taking place now. Proper: Cause for the 9pm 1.8GB peak.

This world view tells you when your community was used probably the most and thru which IP. Tapping on any line reveals extra particulars. Chances are you’ll must do some sleuthing to determine what an unknown IP deal with means, however so long as no alarm was raised by Firewalla about it, you doubtless need not trouble until it is one thing fully out of the bizarre like an inactive system importing 200MB of knowledge for no cause.

Firewalla does not do a very good job of letting your monitor which gadgets could also be clogging your community proper now. You may get that form of info, however you may actually need to dig round within the community circulation in addition to think about that the Now tab consolidates every thing from the highest of the hour and infrequently stays a few minutes behind. That side must be simplified.

Should you’re not taken with quick monitoring, you possibly can nonetheless glean loads of information from the overall community tables or the per system ones. Each system additionally will get its personal 30-day, 24-hour, and 60-minute graph, with management buttons, choices to rename it, and test its MAC deal with.

Left: System checklist ordered by obtain. Center: Sorting choices. Proper: System web page.

This allows you to monitor down what every system in your community is doing as a substitute of viewing the worldwide image, and you’ll resolve to behave on sure domains and IP addresses immediately.

Left: Hourly downloads per system. Center: “Apps” used. Proper: Particulars of an IP connection.

Because of this, I used to be capable of test what my sensible house gadgets have been doing all day. I found that my Nuki lock actually solely connects when it is wanted and by no means strays from the nuki.io servers. My Hue Hub additionally does not do a lot if not referred to as upon, similar as my Somfy TaHoma sensible blinds hub, and Cielo air conditioner remotes. It is a aid to see that the gadgets I selected for my house aren’t spending their time speaking to some unknown servers goodness is aware of the place and importing tons of knowledge to them.

Left: Nuki’s utilization is exemplary. Center: Nuki IP addresses. Proper: Hue Hub utilization is clear too.

My SmartThings Hub, however appears to wish a base 200KB/hour whether or not it is doing one thing or not. Nothing alarming, however maybe not vital. The most important culprits of background utilization are my Google Properties and Lenovo Good Show. Even when not used, the audio system can rack as much as 10-15MB of uploads/downloads per day. The Lenovo, however turned out to be utilizing 200MB/day even after we weren’t house as a result of I would set the ambient show’s pictures to rotate each minute. I lowered the frequency and that obtained it all the way down to round 50MB/day. Given my restricted month-to-month allowance (a ridiculous 100GB), each saved MB counts and this implies I’ve about 4GB extra each month to make use of on one thing else.

Left: SmartThings Hub (30 days). Center: Google House (24hrs, unused). Proper: Lenovo Good Show (30 days).

Firewalla got here in useful when each my husband and I have been caught at house for a few week due to the iffy scenario in Lebanon. That meant we have been each utilizing our house connection for work and leisure, however Firewalla helped us level out the largest offender websites after the primary day and tone down our utilization of them within the following days, thus avoiding giant overcharges.

Passive monitoring – Alarms

Those that do not need to be concerned in baby-sitting their community can nonetheless profit rather a lot from Firewalla. The system alerts you each time an unknown system connects to your community to keep away from intrusions, tells you which of them open ports are left accessible, lets you already know when VPN, video, gaming, or porn exercise is detected, and retains an eye fixed on suspicious websites and uploads.

After we put in the Firewalla, my husband and I talked about which options we wished to watch and which have been pointless. We do not have youngsters so we need not learn about video, gaming, and porn utilization, we additionally get frequent energy cuts so notifications every time a tool goes offline or on-line do not make sense. Each family’s case is completely different, and you’ll management the way you get alerted (notification in your cellphone or simply alarms contained in the app) and which gadgets to mute for every class. For instance, you possibly can watch as many movies as you need in your cellphone with out triggering an alert, however the child’s pill sends a notification in the event that they do.

Left: Alarm classes. Center: Instance of gaming alarm settings. Proper: Actions after getting an alarm.

Over the month that we have used Firewalla, we have acquired a few suspicious web site alerts (none from actively-visited web sites, so most probably cookies or adverts), however we obtained a number of irregular add alarms. In a number of events, these have been anticipated behaviors: My Canary safety cam importing 12MB of knowledge to its servers when it detected movement and recorded a video after midnight is regular, so I muted alarms for uploads to canary’s area. Alternatively, any system utilizing a P2P app will doubtless generate a ton of add alarms and there is not any technique to disable these on a tool foundation. It is per IP or area solely, or you possibly can totally disable monitoring for the system, which implies you surrender on all of the graphs. Neither is a perfect resolution.

Firewalla’s add alarms are too delicate generally. A 1MB add from my Google House to Google’s servers is not one thing to be scared about, so I had to make use of my higher judgment and keep away from panicking every time I noticed a notification. With time, I’ve lowered the variety of pointless alerts by muting sure domains and IPs, however I’ve saved just a few I would prefer to learn about even when I am not going to behave on them or block them.

Instance of an irregular add alarm, particulars, and actions.

Blocking

One of many major advantages of putting in Firewalla was the power to disable adverts on the network-level for a number of of our gadgets. As a substitute of putting in apps or browser extensions, one change is flipped and also you cease seeing adverts in all of your Android apps and all websites you browse. The draw back is which you could’t set exceptions on a site-by-site foundation, so Engadget.com does not load in any respect for instance, and a few websites will refuse to point out you content material until you disable the advert blocker momentarily to view them.

Left & Center: Advert Block setting per system. Proper: Android Police with out adverts. Not really helpful 😉

For households, Firewalla provides three useful options: Household Defend, which acts like parental controls and blocks entry to sure inappropriate websites; Secure Search, which filters out inoffensive content material from outcomes; and Social Hour, which disables all social community websites for an hour and stops distractions throughout household or time for supper.

Left: Household Defend setting. Center: Visiting a porn web site on a protected system. Proper: Social Hour.

 

Left: Visiting Twitter throughout Social Hour. Center & Proper: Secure Search settings.

In conditions the place none of those world blocks apply, you continue to have the chance to arrange system guidelines: Decide the time of day and days of the week, select which sort of exercise to dam (video games, social networks, P2P, porn, video, or playing) or arrange a particular area, IP deal with, IP vary, or distant port. Firewalla can also be testing Geo-IP filtering to allow you to block all domains in a sure nation.

Left: Blocking guidelines. Center: One rule’s settings. Proper: Select what to dam.

Left: Customise domains for every class of blocked websites. Center & Proper: When video is blocked.

Different options

Firewalla additionally contains loads of different options that I will not delve into. You may arrange a VPN server to entry your own home community from anyplace, or check out the VPN consumer characteristic in beta which lets corporations arrange web site to web site entry, or enables you to route your whole site visitors via a third-party VPN. There’s additionally a DNS Booster, IPv6 help, and a few settings to manage your Firewalla field.

What’s lacking

Having examined the monitoring and blocking options of Firewalla extensively, I discover myself impressed by what’s accessible, but additionally lacking just a few options. The utilization tables mix IP addresses hourly however not day by day, so they do not present a greater understanding of longer utilization. In addition they do not merge similar IP deal with entry from a number of gadgets, so there is not any simple technique to understand how a lot I’ve used YouTube from my cellphone and pc and Nvidia Protect mixed. And I am unable to set a billing cycle begin date to see my utilization for that particular month. The 30-day graph is barely useful once I’m nearing the top of the month, not once I’m in the midst of it.

For guidelines, I would like a bandwidth restrict per system on an hourly or day by day foundation (i.e. this pc will get 1GB of utilization per day, then it is blocked) and if attainable a technique to restrict streaming high quality on some gadgets. Given my 100GB month-to-month restrict, forcing 720p or 1080p video on all gadgets can be very useful to keep away from 4K video on websites that do not present a handbook picker.

The advert blocker might additionally profit from site-specific exclusions, although I doubt that is attainable or suitable with the best way Firewalla at the moment blocks adverts. Moreover, a minimal threshold for irregular uploads would assist filter out small and certain benign uploads, whereas a technique to block alerts for a sure gadgets or actions (P2P) might cut back loads of the ineffective alarms.

A number of different minor adjustments like the power to set a default sorting technique for gadgets, and assigning icons for every one (cellphone, pc, sensible mild, thermostat, and many others…) would make it simpler to seek out the system you are searching for in a protracted checklist.

Must you purchase it?

Firewalla


8.5/10

Sure. Firewalla is a whole community monitor and a really respectable cyber-security resolution. On this tiny field lies loads of energy that permits you to monitor every IP deal with pinged by every system in your community. Because of it, I do know I can belief a lot of my devices, however I used to be additionally capable of change some settings to keep away from pointless overconsumption on others. As compared, my Netgear Orbi simply offers me a day by day/weekly/month-to-month utilization graph for all gadgets mixed and does not let me see which one could also be sucking up my bandwidth ought to my consumption rise.

Firewalla’s alarms for suspicious conduct may be worry mongering if you happen to do not totally perceive what your gadgets are imagined to do, so you need to method them with knowledge, solely allow alerts that you simply care about, and keep away from panicking when an unknown server is accessed. Extra doubtless than not, it is benign and also you simply want time to get used to every system’s quirky behaviors. However if you happen to monitor down a very malicious add or entry, you possibly can simply block that, and that is one other main good thing about proudly owning this little system.

Add the advert blocker, full suite of family-friendly options, guidelines, and VPN server, and you’ve got a easy however highly effective all-in-one community device. It is like supercharging your own home community with options that normally both require a customized router firmware or an costly paid subscription.

Purchase it if

  • You need full management over your own home community, particularly for sensible house gadgets and different devices.
  • You retain going over your month-to-month allocation and do not know which gadgets are inflicting the overconsumption.
  • You’ve gotten youngsters and need to cease them from accessing sure actions and websites.

Do not buy it if

  • Your router already offers a few of these options without spending a dime and the remainder aren’t price greater than $100.
  • You are comfy utilizing customized firmware in your router — you may doubtless discover one that gives these options without spending a dime.
  • You do not have a suitable router.

The place to purchase

About Rita El Khoury

Check Also

First Look at Google’s AirDrop Competitor for Android [Video]

Take a look at this hands-on take a look at the upcoming ‘Close by Sharing’ …

Leave a Reply

This site uses Akismet to reduce spam. Learn how your comment data is processed.