Firewalla Orange: (2 Gbps) Multi-Gigabit Cyber Security Firewall with Wi-Fi 7

$399.00 $429.00

Orange (USA) Availability: USA Only. 

Orange World (International) Availability: Customers in the UK, EU, Switzerland, Iceland, Liechtenstein, Norway, Türkiye, Singapore, AU, New Zealand Only

  • Orange (Canada) version coming October-November 2026, register here and get notified.
  • Return shipping is on us for eligible US/EU/UK returns until 1/1/2027.

For New Users:

  • Installation: After you receive the unit, please follow this Orange Installation Guide
  • Getting Started: Firewalla is not a set and forget security device, it will require proper configuration and monitoring. To learn more: see Getting Started Guide 

 

POWERED BY

  • Deep Insight helps you see the network at 2 Gigabits per second.
  • Control your network with intrusion prevention (IPS) and network segmentation, adding virtual walls around your connected devices and locking them down. 
  • Active Protect blocks malicious sites, mitigates hacks, and enhances security.
  • Integrate with Firewalla Switch + AP7, creating a Zero Trust Network.


For A Better Network

Smart Traffic Management

With Zero Trust

Zero Trust security protects your network by trusting no one by default and verifying everyone, everywhere – powered by Firewalla VqLAN and Device Isolation.

 

Sophisticated When You Need It

Advanced Security and Networking Features at Your Fingertips

 

 

Powerful Hardware

 

Use the Orange for Wi-Fi at your small business or home office, or take it on the go to secure your Zero Trust Network when connected to shared or public Wi-Fi.

Simple Wi-Fi Setup

Provides Wi-Fi coverage perfect for your hotel room, home office, or small business.


Wi-Fi Tethering for Multiple Wi-Fi WAN Support

Use the Wi-Fi interface as a secondary WAN. If your primary network is down, temporarily switch your network to your phone’s hotspot for improved availability.

Zero Trust Network on the Go

Bring the Orange wherever you go to secure any public Wi-Fi instantly with your own Zero Trust Network.

More Reviews

 

 

How Does Firewalla Cyber Security Work?

  • Deep Insight: Makes sense of all network traffic and flows.
  • Active Protect: Intrusion detection (IDS) and prevention (IPS) to detect and block potential attacks on your network.
  • Behavior analytics: Analyzes devices’ intent through actions on the network.
  • Control: Apply sophisticated rules to control traffic flows.

 

Region Blocking,
Advanced Threat Filtering, & Bypass Prevention 

Use GEO-IP Filtering to block entire countries from your network, protect your network from domains often used in phishing and scams, and stop devices from circumventing your policies. 

 

Zero Trust Network Architecture

Zero Trust network architecture protects your network by trusting no one by default and verifying everyone, everywhere. 

  • Lock down devices and restrict their behavior on the network. 
  • New devices connecting to the network will need approval.
  • Block traffic to and from network segments, allowing sites or services as needed.

 

New Device Quarantine

Protect your business network by automatically placing new/unknown devices in a Quarantine group with more restricted rules. 

 

Network Segmentation

Firewalla Orange can create secondary firewalls within your network through "network segmentation" and VLANs. Divide your network into regions with dynamic and static policies/rules.

  • Create separate segments for IoT and employees with custom policies. 
  • Isolate critical devices into their own network. 
  • Create a secure guest network and manage activities in real time.


Microsegmentation with VqLAN

Firewalla VqLAN offers simplified network segmentation by dividing a network into smaller, isolated segments to limit the spread of threats without requiring network-wide changes. If you already have groups defined, just turn VqLAN on.

 

Device Isolation

Completely isolate your devices from your network. Perfect for guests and devices that don't need to talk to each other on your LAN network. 

 

Enterprise Wi-Fi Security

Use WPA2-Enterprise or WPA3-Enterprise to identify users and strengthen Wi-Fi security. Devices connecting with unique usernames and passwords are assigned to specific users, ensuring only authenticated and verified users can join your Zero Trust Network.

 

Security Scan

Identify security risks across your business network, including open ports and weak passwords.

 

Make Your Privacy a Priority with VPN

Firewalla VPN Server runs inside your business network without charging a monthly fee.

  • Protects privacy when using public Wi-Fi
  • No bandwidth throttling
  • Bypass internet filtering and monitoring when traveling
  • Supports OpenVPN, WireGuard, and AmneziaWG


Securely Connect to Any Device

VPN Client

Transparently connect any device or devices in your network to OpenVPN, WireGuard, AnyConnect, and AmneziaWG-based services, or connect multiple business sites to access local devices securely.


 

Say Goodbye to Annoying Ads

Website ads and trackers have been frustrating internet users for years. That’s why Firewalla's built-in ad blocker makes sure you don't see ads and the ads don't see you.  

 

Protect Your DNS

DNS over HTTPS

Traditionally, DNS requests are sent in plain text between the client and the DNS server. DNS over HTTPS (DoH) sends DNS requests encrypted over HTTPS. It makes DNS exchange more secure and protects business privacy.

Unbound

Unbound is a validating, recursive, caching DNS resolver, installed locally on the Firewalla box, which helps increase your business's online privacy and security. 

 

NTP Intercept: Securely Sync Time

Intercept NTP requests and process them locally on the Firewalla, reducing your business network's risk exposure and saving bandwidth.

 

Powerful Rules Engine

Firewalla puts the power in your hands and gives you full control of your business network. Block domains, IP addresses, cut off access to devices, remove ads, or block sites by category, such as Social, Video, and more. 

 

Regulate Network Traffic The Smart Way

Advanced Smart Queue + Rate Limit

Advanced Smart Queue prioritizes traffic and reduces delays (buffer bloat) when your network is heavily loaded. Control bandwidth usage by rate-limiting devices or activities.

 

Smart Routing

Policy & Content-Based Routing (PBR) 

Selectively route traffic based on a set of rules or the content type. Send all video traffic to VPN Client or critical business sites to a different WAN interface.


Network Performance and Quality Monitoring

A better network also enables a much better experience. Firewalla provides tools to help you monitor and improve performance, including Wi-Fi, LAN, and WAN (such as Internet speed, latency, and packet loss).

 

Extend Your Network with Firewalla AP7

Pair with Firewalla AP7 to extend your Zero Trust Network to every corner of your business.

When using the AP7, Orange’s built-in Wi-Fi can only be used as an extra WAN (Wi-Fi LAN will be disabled).

 

Firewalla simplifies your experience and helps you decide how to control and protect your business network with its AI-powered feature. Ask AI for help with:

  • Identifying unknown devices
  • Understanding alarms
  • Troubleshooting your network
  • Learning about unknown domains


With a simple tap, restrict internet access, block popular apps and categories, schedule rules, monitor online activity with Alarms, and set all rules on a schedule.

 

Users

Track and limit app usage for a set of devices and monitor when specific apps are used.

 

Firewalla is a software-based router, managed by the same intuitive Firewalla app.

  • VLAN Support (Maximum 5)
  • Static Routing
  • PPPoE
  • PPPoE over VLAN
  • DHCP 
  • Static IP

 

Bridge two networks together by inserting Firewalla Orange behind your existing router without additional configurations, and have Firewalla transparently secure your network.

 

Firewalla MSP Lite (Web Interface)

MSP Lite is free to use and complements the mobile app for complex operations to help you manage and control your network. A mobile device is required to activate and use the web interface.

 

Hardware and Performance Comparison


Orange

Gold SE

Built-in Wi-Fi Wi-Fi 7 -
Wi-Fi Max Clients Around 50 Clients -
Packet Processing Speed 2 Gbps 2 Gbps
Memory 2 GB 4 GB
Storage 32 GB 32 GB
CPU 64 Bit ARM 64 Bit ARM
CPU Cores 4 4
2.5 Gbit Interface 2 2
1 Gbit Interface - 2
OpenVPN 100 Mbps 100 Mbps
WireGuard VPN 350 Mbps 350 Mbps
Site to Site VPN 1x Connection 10x Connections
Geo-IP Filtering 10 Countries Unlimited
VLAN

5

(Max 6 Networks)

Unlimited
Network Segmentation VLAN Only Yes
VqLAN Yes No, with AP7 only
Bridge Mode Yes Yes
Router Mode Yes Yes
Multi-WAN Wi-Fi Only Yes
Network Interface(s) 2 4
Power (Watt) ~5W to 16W ~6W to 10W
Size 12.8 x 8.3 x 3 cm 13 x 10 x 2.6 cm
Weight 8.64 oz / 244 g 15 oz / 427 g
Operating Temperature
(with airflow)
32°F to 113°F 32°F to 113°F

Software: Firewalla Orange supports the same software features as Firewalla Purple. See the Purple column in our Software Features Comparison chart for details.

 

Firewalla is Running Across 100+ Countries

 

Want to know more?  And see how it works?

If you have any questions, please send us an email: help@firewalla.com

 

Specs

Firewalla Orange Specs

  • 4-Core 64-bit ARM CPU
  • 2 Gbps Software Packet Processing
  • 2048 MB Memory
  • 32 GB Storage

USA Package Includes

  • 1 Firewalla Orange Device
  • 1 USB-C USA-style Power Adapter
  • 1 USB-C to USB-C Charging Cable
  • 1 Ethernet Cable
  • One-year manufacturer warranty

World Package Includes

  • 1 Firewalla Orange World Device
  • 1 USB-C Power Adapter with US/EU/UK/AU convertible plug
  • 1 USB-C to USB-C Charging Cable
  • 1 Ethernet Cable
  • One-year manufacturer warranty

 

Shipping

  • Shipping to the US / UK / EU / Switzerland / Iceland / Liechtenstein / Norway / Türkiye / Singapore / Australia / New Zealand only
  • If you are located outside of the United States, Firewalla Inc is not responsible for import duties, taxes, or fees. The shipping charge you pay only covers the freight cost. You assume the responsibility of an importer and are responsible for any duty/tax charges that may incur. We will use couriers like DHL/UPS/FedEx for shipments. Couriers may charge a customs clearance fee or customs handling fee for processing the import declaration. In the event that you refuse to pay these charges, you will be denied any refund even if you do not receive the product.


FAQ

Is there Wi-Fi?

Yes. This Firewalla unit includes dual-band Wi-Fi 7. You may also disable the Wi-Fi LAN to use Firewalla AP7, or your own Wi-Fi access point/router in AP or bridge mode.

Is there a monthly fee?

There is no monthly fee. All standard features are included with your Firewalla device. For optional business features such as centralized multi-box management, we offer an additional service, Firewalla MSP (https://firewalla.net), that runs outside of your Firewalla device.

Does Firewalla support Android and iOS?

Yes and yes. A smartphone is required to use the unit.

Who is Firewalla Orange designed for?

Firewalla Orange is designed for small business/enterprise, commercial, schools, and professionally managed network environments and is not intended for residential use.

How easy is it to configure and use Firewalla?

Firewalla is not a set-and-forget security device; it will require proper configuration, active security, and configuration management. Please see the Installation Guide and Getting Started Guide for details. Some security and networking experience is required. 

Return / Refund Policy

The product can be returned for a refund within 30 days of receiving the item. The product is not refundable if parts or accessories are missing.

Please see this page for details.

Have more questions?

Please email us at help@firewalla.com or visit our community:
https://help.firewalla.com


Price Protection

firewalla.com will gladly issue a credit for the difference between the price you paid and the promotional price, if your purchase was made online at firewalla.com and was within 30 days before the price change. Credits are typically issued within 7 business days.