Firewalla Gold Plus SFP: (5 Gbps) Cyber Security Firewall with SFP+
- This is an "early access sale". Final hardware + beta software.
- The current sale is limited to USA shipping only.
- Shipping time within 7 business days.
- For feedback/discussions, please see our forum (login required)



Powered by


![]()

- Deep Insight helps you see the network at 5 Gigabits per second.
- Control your network with intrusion prevention (IPS) and network segmentation, adding virtual walls around your connected devices and locking them down.
- Active Protect blocks malicious sites, mitigates hacks, and enhances security.
- Integrate with Firewalla Switch + AP7, creating a Zero Trust Network.
For A Better Network
Smart Traffic Management


Sophisticated When You Need It
Advanced Cyber Security and Networking Features at Your Fingertips

Powerful Hardware




How Does Firewalla Cyber Security Work?
- Deep Insight: Makes sense of all network traffic and flows.
- Active Protect: Intrusion detection (IDS) and prevention (IPS) to detect and block potential attacks on your network.
- Behavior analytics: Analyzes devices’ intent through actions on the network.
- Control: Apply sophisticated rules to control traffic flows.


Region Blocking,
Advanced Threat Filtering, & Bypass Prevention
Use GEO-IP Filtering to block entire countries from your network, protect your network from domains often used in phishing and scams, and stop devices from circumventing your policies.

Zero Trust Network Architecture
Zero Trust network architecture protects your network by trusting no one by default and verifying everyone, everywhere.
- Lock down devices and restrict their behavior on the network.
- New devices connecting to the network will need approval.
-
Block traffic to and from network segments, allowing sites or services as needed.

Device Active Protect: Lockdown
Dynamically segment IoT devices and limit their connections to their own servers. Protect your network from intrusion and from attacking others.

New Device Quarantine
Protect your business network by automatically placing new/unknown devices in a Quarantine group with more restricted rules.

Network Segmentation
Firewalla Gold Plus SFP can create secondary firewalls within your network through "network segmentation." Divide your network into regions with dynamic and static policies/rules.
- Create separate segments for IoT and employees with custom policies.
- Isolate critical devices into their own network.
- Create a secure guest network and manage activities in real time.

Scan
Identify security risks across your business network, including open ports and weak passwords.


Make Your Privacy a Priority with VPN
Firewalla VPN Server runs inside your business network without charging a monthly fee.
- Protects privacy when using public Wi-Fi
- No bandwidth throttling
- Bypass internet filtering and monitoring when traveling
-
Supports OpenVPN, WireGuard, and AmneziaWG

VPN Client: Securely Connect to Any Device
Transparently connect any device or devices in your network to OpenVPN, WireGuard, and AnyConnect-based services, or connect multiple business sites to access local devices securely.

Say Goodbye to Annoying Ads
Website ads and trackers have been frustrating internet users for years. That’s why Firewalla's built-in ad blocker makes sure you don't see ads and the ads don't see you.

Protect Your DNS
DNS over HTTPS
Traditionally, DNS requests are sent in plain text between the client and the DNS server. DNS over HTTPS (DoH) sends DNS requests encrypted over HTTPS. It makes DNS exchange more secure and protects business privacy.

Unbound
Unbound is a validating, recursive, caching DNS resolver, installed locally on the Firewalla box, which helps increase your business's online privacy and security.

NTP Intercept: Securely Sync Time
Intercept NTP requests and process them locally on the Firewalla, reducing your business network's risk exposure and saving bandwidth.


Powerful Rules Engine
Firewalla puts the power in your hands and gives you full control of your business network. Block domains, IP addresses, cut off access to devices, remove ads, or block sites by category, such as Social, Video, and more.

Regulate Network Traffic The Smart Way
Advanced Smart Queue + Rate Limit
Advanced Smart Queue prioritizes traffic and reduces delays (buffer bloat) when your network is heavily loaded. Control bandwidth usage by rate-limiting devices or activities.


Smart Routing
Policy & Content-Based Routing (PBR)
Selectively route traffic based on a set of rules or the content type. Send all video traffic to VPN Client or critical business sites to a different WAN interface.

Network Performance and Quality Monitoring
A better network also enables a much better experience. Firewalla provides tools to help you monitor and improve performance, including Wi-Fi, LAN, and WAN (such as Internet speed, latency, and packet loss).


Firewalla AI Assistant
Firewalla simplifies your experience and helps you decide how to control and protect your business network with its AI-powered feature. Ask AI for help with:
- Identifying unknown devices
- Understanding alarms
- Troubleshooting your network
- Learning about unknown domains


With a simple tap, restrict internet access, block popular apps and categories, schedule rules, monitor online activity with Alarms, and set all rules on a schedule.

Users
Track and limit app usage for a set of devices and monitor when specific apps are used.


Firewalla is a software-based router, managed by the same intuitive Firewalla app.
- VLAN Support
- Static Routing
- PPPoE
- PPPoE over VLAN
- Triple Play Support
- DHCP
- Static IP


Multi-WAN
Faster and more stable internet! Fully utilize two internet connections together, either in load balancing mode or failover mode. With Content and Policy-Based Routing, route any traffic to any WAN connection.


Bridge two networks together by inserting Firewalla Gold Plus SFP behind your existing router without additional configurations, and have Firewalla transparently secure your business network.

Firewalla MSP Lite (Web Interface)
MSP Lite is free to use and complements the mobile app for complex operations to help you manage and control your network. A mobile device is required to activate and use the web interface.

Difference between Gold Plus & Gold Plus SFP
|
|
Gold Plus SFP |
|
|---|---|---|
| Speed (DHCP) | 5 Gbps with LAG (Single Port: 2.4 Gbps) |
5 Gbps |
| Memory | 4 GB | 4 GB |
| CPU | 64 Bit Intel 9th Gen | 64 Bit ARM |
| CPU Cores | 4 | 4 |
| OpenVPN | 120 Mbps | 200 Mbps |
| WireGuard VPN | 500 Mbps | 1000 Mbps |
| Site to Site VPN | 10x Connections | 10x Connections |
| Speed (PPPoE) Perf | Download: 2300 Mbps Upload: 2300 Mbps |
Download: 4000 Mbps Upload: 2000 Mbps |
| Geo-IP Filtering | No license-imposed limit | No license-imposed limit |
| VLAN | No license-imposed limit | No license-imposed limit |
| Network Segmentation | Yes | Yes |
| Bridge Mode | Yes | Yes |
| Router Mode | Yes | Yes |
| Multi-WAN | Yes | Yes |
| Network Interface(s) | 4 x 2.5 Gbps RJ45 | 1 x 10 Gbps SFP+ 2 x 10 Gbps RJ45 2 x 2.5 Gbps RJ45 |
| Wi-Fi | No | No |
| Console Port | Yes | Yes |
| Power (Watt) | ~10W to 15W | ~10W to 15W |
| Size | 5.12 x 4.33 x 1.34 in 13 x 11 x 3.4 cm |
6.50 x 5.30 x 1.34 in 16.5 x 13.5 x 3.4 cm |
| Weight | 19.9 oz / 565 g | 26 oz / 738.3 g |
| Operating Temperature (with airflow) |
32°F to 113°F 0°C to 45°C |
32°F to 122°F 0°C to 50°C |
| Certifications | FCC, CE, UKCA | FCC, CE, IC, RCM |
How to choose between different products
Firewalla is Running Across 100+ Countries

Want to know more? And see how it works?
If you have any questions, please send us an email: help@firewalla.com
Specs
|
Firewalla Gold Plus SFP Specs
|
Package Includes:
|
Enable Zero Trust Network Security
Firewalla Access Point 7
Take your security to the next level with the Firewalla AP7. Seamlessly extend Firewalla's Zero Trust capabilities to Wi-Fi 7, ensuring every device is microsegmented the moment it connects. Gain complete control over internal traffic, minimize security risks, and lock down your network - all without the complexities.

Firewalla Switch
The Firewalla Switch extends Zero Trust to the wired network. With segmentation and microsegmentation support, local flow tracking, and device-to-device access controls, easily control and lock down your wired network, all from the same Firewalla App.

Accessories
-
The Firewalla Wi-Fi SD can be used in conjunction with the Gold Plus SFP to enable you to tether to your phone (or another WiFi hotspot) as a backup when your main network is down.

- Rack mount ears (sold separately) coming in November 2026

Shipping
The current sale is limited to USA shipping only.
-
If you are located outside of the United States, Firewalla Inc is not responsible for import duties, taxes, or fees. The shipping charge you pay only covers the freight cost. You assume the responsibility of an importer and are responsible for any duty/tax charges that may incur. We will use couriers like DHL/UPS/FedEx for shipments. Couriers may charge a customs clearance fee or customs handling fee for processing the import declaration. In the event that you refuse to pay these charges, you will be denied any refund even if you do not receive the product.
FAQ
Is there Wi-Fi?
No. This Firewalla unit does not include built-in Wi-Fi. You will need to use a Firewalla AP7, third-party access point, or your own Wi-Fi router in AP or bridge mode.
Is there a monthly fee?
There is no monthly fee. All standard features are included with your Firewalla device.
For centralized business/enterprise and professionally managed deployments, we offer Firewalla MSP, an optional service that runs outside of your Firewalla device and provides centralized multi-box management with extended flow storage.
Does Firewalla support Android and iOS?
Yes, and yes. A smartphone is required to use the unit.
Who is Gold Plus SFP designed for?
Gold Plus SFP is designed primarily for small business/enterprise, commercial, schools, and professionally managed network environments and is not primarily intended for residential use.
How easy is it to configure and use Firewalla?
Firewalla is not a set-and-forget security device; it will require proper configuration, active security, and configuration management. Please see the Installation Guide and Getting Started Guide for details.
This product is intended for professional use and should not be installed by users without networking or security experience. Improper configuration may result in security or network connectivity issues.
Return / Refund Policy
The product can be returned for a refund within 30 days of receiving the item. The product is not refundable if parts or accessories are missing.
Please see this page for details.
Have more questions?
Please email us at help@firewalla.com or visit our community https://help.firewalla.com


