Firewalla Switch X: (10 Gbps) Zero Trust Network Security for Your Wired Network
PRE-SALE WILL START July 7, 2026 9AM Pacific Time.
Ordering Instructions:
🇺🇸 USA: There are two available variations (both are the same production hardware):
-
Pre-Sale
- Ships: Sept/Oct 2026 (tentative)
- Soft Limit: 3 units per model. Purchases over 3 may delay shipment.
-
Early Access/Beta
- BETA Software
- Ships: 1-7 days after order.
- Hard Limit: 1 unit per model.
🌍 Outside USA: Pre-Sale ONLY (ships Sept/Oct 2026)
- See Pre-Sale terms above
- Available in the UK, EU, Canada, Australia, + more. See the full list here.
- Firewalla is not responsible for VAT/Tariffs/etc. See "Shipping" for details.
REQUIREMENTS:
- Firewalla Gold, Purple, or Orange series unit is required
- Firewalla Box in Router Mode
Payment will be charged in full (0 to 7 days) after order is placed
If you want the 2.5Gbit unit, please see Switch SE
Full Integration with the Firewalla Security Stack
Expanding Your Wired Network
Add Firewalla Switches to scale your wired network across rooms, floors, or even buildings. Each switch is fully managed from the same Firewalla App.
- Integrate with Firewalla AP7 (optional) for full-LAN protection.

Switch X For Your Network Core
Paired with the Firewalla Switch SE and AP7, scale your network to the future.

PoE++ Support
Simplify hardware deployment with PoE++, delivering power and data through a single Ethernet cable. With up to a 410W total power budget, it’s built to power your access points, security cameras, and business phones, and is perfect for the Firewalla AP7 Ceiling unit.

Visibility
For Your Wired Network
Firewalla provides full network visibility by monitoring traffic and identifying who’s on your network, their activity, and potential security risks. With Firewalla Switch, we extend this capability to your wired LAN, giving you full visibility into how your devices communicate within your local network.

Extending Your Zero Trust Network
Zero Trust is a security framework that assumes no user or device can be trusted by default, even within the network. The Firewalla Switch allows you to extend least access privilege and monitoring/verification capabilities to your physical hardwired network. Combined with the AP7, making zero trust end-to-end across both wired and wireless networks.

Firewalla Switch and Firewalla
Bring the power of Zero Trust security to your network
- Segmentation, Microsegmentation & Dynamic Segmentation: Divide your network into smaller segments to limit the lateral movement of threats.
- Least Privilege Access: Grant users and devices only the minimum access necessary to perform their functions on the Network.
- Continuous Monitoring: Continuously monitor and verify the security posture of all users and devices.

Spec
-
Interfaces
- RJ45 Ports: 8 x 10G (PoE++)
- RJ45 Port Supported Speeds*: 100M full-duplex, 1G, 2.5G, 5G, 10G
- SFP+ Ports: 4 x 10G
-
Power over Ethernet (PoE)
- PoE Power Budget: 410W
- PoE Standard: 802.3af/at/bt (PoE++)
-
Features
- VLAN + VqLAN Support
- Firewalla Device Active Protect Support (with Firewalla Gold Units)
- Firewalla ACL Tracking/Control**: Maximum 1024 Entries
- Switching Capacity: 240Gbps
- Maximum VLAN Count: 256
-
Hardware
- Dimensions: 12.99 x 1.73 x 9.05 inch
- Item Weight: 6.29 lbs (2.852 kg)
- Fan(s): 3
- Operating Temperature: 32°F to 122°F
- Packet Buffer: 16Mbit
- MAC Table Size: 32K
- Compatible with: Firewalla Gold/Purple/Orange series in Router Mode
- Certifications: FCC, CE, IC, RCM
What is included
- Firewalla Switch X
- Power Cable (USA style, Standard PC power cord)
- Rack mount kit
Shipping
Early Access/Beta (Ships Immediately, Very Limited in Stock)
- Final Production unit, Beta Software
- Shipping: 1 to 7 days after order.
- Hard limit: 1 unit per model
- Available to USA customers only
Pre-Sale (Ships September/October)
- Final Production unit, Final Production Software
- Shipping: Tentatively September / October 2026
- Soft limit: 3 units per model. If you purchase more than 3, we may delay your shipment.
- Available to the USA, UK, EU, Canada, Australia, New Zealand, Singapore, Turkey, Israel, Switzerland, Hong Kong, UAE, Japan, Iceland, Liechtenstein, Norway, Latin America, and the Caribbean
- Other Countries: This product is FCC, CE, ISED, and RCM certified. Please verify your country allows personal imports for this equipment; as the importer, you are responsible for local customs requirements and processes.
- If you are located outside of the United States, Firewalla Inc is not responsible for import duties, taxes, or fees. The shipping charge you pay only covers the freight cost. You assume the responsibility of an importer and are responsible for any duty/tax charges that may incur. We will use couriers like DHL/UPS/FedEx for shipments. Couriers may charge a customs clearance fee or customs handling fee for processing the import declaration. In the event that you refuse to pay these charges, you will be denied any refund even if you do not receive the product.
- Power cable shipped is USA style. (Standard PC power cord)
FAQ
Please see the community link here for FAQ and discussions
Can this unit be used as the main router?
- No, a Firewalla Unit is required. Firewalla Switch is not a router.
Does Firewalla Switch support Android and iOS?
- Yes, and yes. A smartphone is required to use the unit
Can I use the Firewalla Switch with other brand switches?
- Yes, you can mix Firewalla and non-Firewalla switches. However, on non-Firewalla switches, you’ll need to configure VLANs manually, and local traffic controls and visibility are only partially supported.
Return / Refund Policy
- For pre-sale orders, cancellations requested after 120 days will be issued via store credit only.
- The product can be returned for a refund within 30 days of receiving the item. The product is not refundable if parts or accessories are missing.
-
Please see this page for details.
Have more questions?
Please email us at help@firewalla.com or visit our community https://help.firewalla.com
* Does not support 10M full-duplex, 10M half-duplex, and 100M half-duplex modes. Speeds depend on the Ethernet cabling used. We recommend using Cat6 or Cat6a for the best speeds.
** ACL represents the number of hardware-level rules currently active on your switch. These rules may be created by features that manage local traffic, such as VqLAN, Device Isolation, and Allowed Devices. Usage may increase with the number and complexity of rules applied.

