--- title: "Firewalla Local" description: "Firewalla Local is a Marketplace integration for Home Assistant. It has 85 installs sharing analytics, works locally and was last updated November 4, 2026." canonical: "https://vulpo.app/integrations/marketplace/ccpk1-firewalla-local-ha" url: "https://vulpo.app/integrations/marketplace/ccpk1-firewalla-local-ha.md" last-updated: "2026-11-05" version: "1.4" --- # Firewalla Local > Firewalla Local is a Marketplace integration for Home Assistant. It has 85 installs sharing analytics, works locally and was last updated November 4, 2026. From the [repository description](https://github.com/ccpk1/firewalla-local-ha): > 🔥 Native Home Assistant control for Firewalla. 100% local data, zero latency, and no cloud middleman. [Open in My Home Assistant](https://my.home-assistant.io/redirect/marketplace_repository/?owner=ccpk1&repository=firewalla-local-ha&category=integration) On Home Assistant 2026.10 or older? [Open it in HACS](https://my.home-assistant.io/redirect/hacs_repository/?owner=ccpk1&repository=firewalla-local-ha&category=integration) ## Supports - **Works locally**: Talks to your devices on your own network. No vendor cloud in between. - **From the Marketplace**: Installed through the Marketplace, formerly HACS. - **Actively maintained**: Its author released or pushed a change in the last six months. ## Setting it up Install it from the Marketplace and restart Home Assistant, then add it under Settings, Devices and services. ### Connect Firewalla Local - **Local hostname or IP address** - **Raw QR JSON** Also asked when signing in again. ### Reconfigure Firewalla Local - **Local hostname or IP address** ### After setup - **Back to main menu without saving** - **Rules to expose as switches** - **Devices to expose as device trackers** - **Back to main menu without saving** - **Back to main menu without saving** - **Devices to monitor** - **Back to main menu without saving** - **Users to monitor** - **Device-tracker away window (minutes)**: How long a tracked device stays home after its last activity. Presence only: this does not affect the device counters or connectivity. - **Enable network status entities** - **Enable SSID status entities** - **AI assistant (MCP) tool access**: Controls which tools the assistant can use. Levels above Summary only send network detail to your LLM provider, so use the lowest you need and consider who operates it. Requires Core 2026.10 or newer. - **Back to main menu without saving** - **Update interval (minutes)**: How often to poll the Firewalla box. Shorter intervals update faster but load the local API more, so keep this shorter than the windows below. - **Watched-device online window (minutes)**: How long a device can be idle and still count as connected. Applies to the device counters, the VPN peer counts, and the device list, not only to watched devices. Texts from the code of [ccpk1/firewalla-local-ha](https://github.com/ccpk1/firewalla-local-ha). ## Entities - **Binary sensors**: Alarm active, System Status, AP Status - **Buttons**: Sync runtime - **Presence**: Presence - **Sensors**: Active alarms, Speed test download, Speed test upload, Speed test latency, Ping latency, Ping packet loss, Usage ## Actions - **Get alarms**: Return the newest active alarms and optionally archived alarms with normalized details and shared report metadata. Each alarm carries its own exception\_id; the full silence-exception table is only included when requested. Fields: Limit, Include archived, Refresh, Alarm type, Include silence records, Fetch detail, Config entry ID (Optional), Config entry name (Optional) - **Get rules**: Return the current live policy rules as a flat, selectable list with rule id, action, enabled and paused state, target, scope, and any originating alarm. Use this to resolve the rule target for pause\_rule and resume\_rule. Fields: Config entry ID (Optional), Config entry name (Optional), Enabled, Action, Target type, Applies to, Include purpose, Include system-managed, Alarm ID - **Get system overview**: Return a curated system summary: appliance health, the networks with per-network device counts, and counts for devices, VPN peers, groups, users, rules, and alarms, plus per-WAN speed-test and quality metrics. Counts and identities only, never record collections. Use include to add the group and user names and ids that other services accept as selectors. Fields: Include, Config entry ID (Optional), Config entry name (Optional) - **Sync runtime**: Poll the Firewalla box now and report when the snapshot was taken. Requests within the coordinator's debounce window are coalesced, so calling this alongside other actions still costs at most one poll. Fields: Config entry ID (Optional), Config entry name (Optional) - **Create rule**: Create a persistent block rule, optionally scoped to an alarm's target. Blocking a target from an alarm creates an ordinary policy rule that records the alarm id as a back-reference. Fields: Alarm ID, Target type, Target value, Config entry ID (Optional), Config entry name (Optional), Host MAC, Host name, Group ID, Group name, User ID - **Archive alarms**: Move one alarm or the whole active set to the archive. Archived alarms remain retrievable. Fields: Alarm ID (Optional), Alarm status (Optional), Config entry ID (Optional), Config entry name (Optional) - **Delete alarms**: Permanently delete one alarm or a whole set. This cannot be undone. Fields: Alarm ID (Optional), Alarm status (Optional), Confirm permanent deletion, Config entry ID (Optional), Config entry name (Optional) - **Mute alarm**: Create a scoped silence for an alarm type, domain, or IP address. Fields: Alarm ID (Optional), Alarm target type, Alarm target value (Optional), Duration, Config entry ID (Optional), Config entry name (Optional), Host MAC, Host name, Group ID, Group name - **Unmute alarm**: Remove a silence by exception ID or an alarm-linked silence by alarm ID. Provide exactly one identifier. Fields: Alarm ID (Optional), Exception ID (Optional), Config entry ID (Optional), Config entry name (Optional) - **Delete rule**: Permanently delete one live policy rule, including a rule created by an alarm block action. Fields: Rule ID, Confirm deletion, Config entry ID (Optional), Config entry name (Optional) - **Get hosts**: Return the Firewalla host (device) records with naming fields, IP address, device type, kind, group membership, and online state. Filters narrow the result on the box. Non-admin; for the full runtime inventory use get\_runtime\_inventory. Fields: Detail, Host name, Host MAC, Group name, Kind, Network UUID, Online, User ID, Refresh first, Config entry ID (Optional) - **Get rule and runtime inventory**: Return the current Firewalla rule, group, user, and related runtime inventory as structured data plus a markdown summary. Fields: Config entry ID (Optional), Config entry name (Optional) - **Get network segment report**: Return one configuration-oriented network segment report in the shared report envelope from the Firewalla local API. Fields: Network UUID (Optional), Network name (Optional), Refresh first, Config entry ID (Optional), Config entry name (Optional), Include - **Get flow report**: Return one flow report for a device, group, or user in the shared report envelope from the Firewalla local API. Fields: Host MAC, Host name, Group ID, Group name, User ID, User name, Window hours (Optional), Detail (Optional), Record count (Optional), Fetch all records (Optional) - **Get network segment usage**: Return one window-selected usage-oriented network segment report in the shared report envelope from the Firewalla local API. Totals in bytes over a window of at least 60 minutes; for the current per-host rate use get\_live\_throughput. Fields: Network UUID (Optional), Network name (Optional), Window, Top N rankings, Include sections, Refresh first, Config entry ID (Optional), Config entry name (Optional) - **Get speed test results**: Return normalized Firewalla internet speed test results from the coordinator refresh path. Fields: WAN UUID (Optional), WAN name (Optional), Result limit, Refresh first, Config entry ID (Optional), Config entry name (Optional) - **Get internet quality report**: Return normalized Firewalla internet-quality samples (ping latency and packet loss) from the manager cache. Fields: WAN UUID (Optional), WAN name (Optional), Sample limit, Refresh first, Config entry ID (Optional), Config entry name (Optional) - **Get live throughput**: Return live throughput in bytes per second, read from the box now. One host, one network, or every host, depending on the selectors given. A rate, not a total; for data volume over a window use get\_network\_usage. Network figures are that interface's counters and exclude same-segment traffic between hosts; host figures are complete. Fields: Host MAC (Optional), Host name (Optional), Network UUID (Optional), Network name (Optional), Host limit, Sample window, Config entry ID (Optional), Config entry name (Optional) - **Wake host**: Send a Wake-on-LAN command to one Firewalla host. Fields: Host MAC (Optional), Host name (Optional), Host ID (Optional), Refresh first, Config entry ID (Optional), Config entry name (Optional) - **Delete host**: Permanently delete one or more Firewalla host devices identified by MAC. Fields: Host MAC, Confirm, Refresh, Config entry ID (Optional), Config entry name (Optional) ## Troubleshooting - **Diagnostics**: Downloads a diagnostics file to attach to a bug report. ## At a glance - Kind: Marketplace integration - Category: [Presence and location](https://vulpo.app/integrations/category/presence-and-location.md) - Number: 85 installs sharing analytics; 52 GitHub stars - Connection: Works locally - Upkeep: Updated in the last 6 months - Needs: Needs the Marketplace (HACS on 2026.10 and older) - Latest version: 2.5.3, last updated November 4, 2026 - Domain: `firewalla_local` - Source: - Issues: In Vulpo: Quick Toggle card, Button card, Chart card, Apple Watch, Control Center Independent directory, made by the developer of Vulpo. Not affiliated with Home Assistant or the Open Home Foundation. [About these numbers](https://vulpo.app/integrations/about) Last updated 2026-11-05. Source: https://vulpo.app/integrations/marketplace/ccpk1-firewalla-local-ha --- - HTML version of this page: https://vulpo.app/integrations/marketplace/ccpk1-firewalla-local-ha - Site index for agents: https://vulpo.app/llms.txt - Everything in one document: https://vulpo.app/llms-full.txt - All pages: https://vulpo.app/sitemap.xml