Availability: Customers in the UK / EU / Switzerland / Iceland / Liechtenstein / Norway / Türkiye / Singapore Only

Compatibility Requirements:

- Gold, Gold Pro, Gold Plus, Gold SE
- Purple, Purple SE
- Firewalla must operate in Router mode or Bridge mode.
Power Supply: ships with EU Type C power plug (may require a separate adapter for other outlet types).
Installation: After you receive the unit, please follow this installation guide.
Important - International Shipping VAT, Customs Duties, Taxes, and Fees: Firewalla Inc is not responsible for import duties, taxes, or fees. The shipping charge you pay only covers the freight cost. You assume the responsibility of an importer and are responsible for any duty/tax charges that may incur. We will use couriers like DHL/UPS/FedEx for shipments. Couriers may charge a customs clearance fee or customs handling fee for processing the import declaration.
If you are in the USA, please order this unit instead.

Full Integration

with the Firewalla Security Stack

Extending Firewalla security features to the LAN

Building Zero Trust Network

Never automatically trust devices

Zero Trust is a security framework that assumes no user or device can be trusted by default, even within the network.

Firewalla AP7 and Firewalla

bring the power of Zero Trust security to your network

Segmentation and Microsegmentation: Divide your network into smaller segments to limit the lateral movement of threats.
Least Privilege Access: Grant users and devices only the minimum access necessary to perform their functions on the Network.
Continuous Monitoring: Continuously monitor and verify the security posture of all users and devices.

Microsegmentation with VqLAN

Firewalla VqLAN offers simplified network segmentation by dividing a network into smaller, isolated segments to limit the spread of threats without requiring network-wide changes. If you already have groups defined, you just need to turn VqLAN on.

Personal Key

Assign different personal keys (PPSK via WPA2) to the same SSID to identify users. Devices logging in with a specific key will be assigned to the configured user, group, or VLAN network (experimental), ensuring user identification and rule enforcement (even if the user’s MAC address is randomized).

Example:

Assign a personal key to employees, and any devices they use will be automatically quarantined to their user group. Even if the device’s MAC address randomizes, you'll always be able to group devices.

Enterprise Wi-Fi Security

Use WPA2-Enterprise or WPA3-Enterprise to identify users and strengthen Wi-Fi security. Devices connecting with unique usernames and passwords are assigned to specific users, ensuring only authenticated and verified users can join your Zero Trust Network.

Device Isolation Support

Completely isolate any of your devices from your network. Perfect for guests and devices that don't need to talk to each other on your LAN network. This will complement the existing Firewalla network quarantine and guest network feature.

Rule-Based Least Privilege Access

Zero Trust Networks should never fully trust any devices on the network. After your network is segmented and isolated, you can use Firewalla Rules or Policies to grant the device only the minimum permissions needed to reduce security risks.

Monitoring

Firewalla provides full network visibility by monitoring traffic and identifying who’s on your network, their activity, and potential security risks. With Firewalla AP7, we extend this capability to your LAN, giving you full visibility into how your devices communicate within your local network.

Local Flow Visibility

Internet or WAN Visibility

More Wi-Fi Control and Visibility

Wi-Fi 7

Mesh

With Ethernet or WiFi Backhaul

Learn More:

Building a zero trust network with Firewalla
Firewalla microsegmentation and segmentation with AP7
Firewalla AP7 Installation Guide
Firewalla AP7 Community (login required)
All Firewalla AP7 Documents

Spec

Triband 2.4Ghz 2x2, 5Ghz 2x2, 6Ghz 4x4
8 Spatial Streams, 320Mhz channel support 6Ghz
Multi-speed Network Interfaces: 10Gbit RJ45 + 2.5Gbit RJ45
VLAN Support
WPA/WPA2/WPA3 Support
PPSK (Personal Key) requires WPA2
Mesh with Ethernet or Wi-Fi backhaul
Dimensions: 5.43 x 3.15 x 7.48 inch
Item Weight: 1.38 lb
Power: 12V/4A
Compatible with and Required: Firewalla Gold / Firewalla Purple in router mode or bridge mode.

Shipping

Shipping to the UK / EU / Switzerland / Iceland / Liechtenstein / Norway / Türkiye / Singapore only
If you are located outside of the United States, Firewalla Inc is not responsible for import duties, taxes, or fees. The shipping charge you pay only covers the freight cost. You assume the responsibility of an importer and are responsible for any duty/tax charges that may incur. We will use couriers like DHL/UPS/FedEx for shipments. Couriers may charge a customs clearance fee or customs handling fee for processing the import declaration. In the event that you refuse to pay these charges, you will be denied any refund even if you do not receive the product.

FAQ

Please see the community link here for FAQ and discussions

Can this unit be used as the main router?

No, Firewalla Gold or Purple is required. Firewalla AP7 is an access point, not a router.

Does Firewalla AP7 support Android and iOS?

Yes, and yes. A smartphone is required to use the unit

Return / Refund Policy

The product can be returned for a refund within 30 days of receiving the item.

The product is not refundable if parts or accessories are missing

Please see this page for details.

Have more questions?

Please email us at help@firewalla.com or visit our community https://help.firewalla.com

Firewalla Access Point 7 (AP7)

Firewalla Access Point 7 (World): Enabling Zero Trust Network Security with Wi-Fi 7 and Firewalla