Firewalla Access Point 7: Enabling Zero Trust Network Security with Wi-Fi 7 and Firewalla

Disclaimer: Firewalla AP7 is the final hardware and the early access program will use Early Access/Beta software. REQUIREMENTS: Firewalla Gold series in Router mode (support for Purple coming TBD) App version 1.64 in Beta Firewalla Box version 1.980 in Early Access or Beta  All units will ship in batches. It may take up to 7 to 30 days from ordering. Early Access/Beta Access Points are available only in the USA. Please read the installation guide (https://firewalla.com/install) before installation.     Full Integration  with the Firewalla Security Stack Extending Firewalla security features to the LAN Building Zero Trust Network Never automatically trust devices Zero Trust is a security framework that assumes no user or device can be trusted by default, even within the network.  Firewalla AP7 and Firewalla Router  bring the power of Zero Trust security to your home or business network Segmentation and Microsegmentation: Divide your network into smaller segments to limit the lateral movement of threats.  Least Privilege Access: Grant users and devices only the minimum access necessary to perform their functions on the Network. Continuous Monitoring: Continuously monitor and verify the security posture of all users and devices.   Microsegmentation with VqLAN Firewalla VqLAN offers simplified network segmentation by dividing a network into smaller, isolated segments to limit the spread of threats without requiring network-wide changes. If you already have groups defined, you just need to turn VqLAN on.   Personal Key  Assign different personal keys (PPSK via WPA2) to the same SSID to identify users. Devices logging in with a specific key will be assigned to the configured user, group, or VLAN network, ensuring user identification and rule enforcement (even if the user’s MAC address is randomized). Example: You can assign a personal key to your child, and any devices your child uses will be automatically quarantined to the “Kid” user group. Even if the device’s MAC address randomizes, you will always be able to group devices. Map the SSID and Personal key to a VLAN. Create a separate network for IoT devices and another VLAN network for guests, all using the same SSID (Dynamic VLAN).   Device Isolation Support Completely isolate any of your devices from your home network. Perfect for guests and devices that don't need to talk to each other on your LAN network. This will complement the existing Firewalla network quarantine and guest network feature. Rule-Based Least Privilege Access  Zero Trust Networks should never fully trust any devices on the network. After your network is segmented and isolated, you can use Firewalla Rules or Policies to grant the device only the minimum permissions needed to reduce security risks. Monitoring Firewalla provides full network visibility by monitoring traffic and identifying who’s on your network, their activity, and potential security risks. With Firewalla AP7, we extend this capability to your LAN, giving you full visibility into how your devices communicate within your local network.   Local Flow Visibility    Internet or WAN Visibility   More Wi-Fi Control and Visibility Wi-Fi 7 Mesh With Ethernet or WiFi Backhaul Learn More: Building a zero trust network with Firewalla  Firewalla microsegmentation and segmentation with AP7   Spec Triband 2.4Ghz 2x2, 5Ghz 2x2, 6Ghz 4x4 8 Spatial Streams, 320Mhz channel support 6Ghz Network Interfaces: 10Gbit RJ45 + 2.5Gbit RJ45 VLAN Support PPSK+WPA2 Support (Personal Key) Mesh with Ethernet or Wi-Fi backhaul Dimensions: 5.43 x 3.15 x 7.48 inch Item Weight: 1.38 lb Power: 30W Compatible with and Required: Firewalla Gold / Firewalla Purple in router mode   Shipping During the Early Access/Beta stage, this unit is available for shipping to the USA only FAQ Please see the community link here for FAQ and discussions Can this unit be used as the main router? No, Firewalla Gold or Purple is required. Firewalla AP7 is an access point, not a router.  Does Firewalla AP7 support Android and iOS? Yes, and yes. A smartphone is required to use the unit Return / Refund Policy The product can be returned for a refund within 30 days of receiving the item. The product is not refundable if parts or accessories are missing Please see this page for details. Have more questions? Please email us at help@firewalla.com or visit our community https://help.firewalla.com