List active security alarms from Firewalla (intrusion attempts, abnormal uploads, etc.). Supports filtering by severity, type, and device.

List all devices on the network (hostname, IP, MAC, manufacturer, online status)

Get devices ranked by bandwidth usage (top talkers). Shows download, upload, and total bytes for each device over the recent period.

Get connected devices grouped by network segment/VLAN. Shows which devices are on each network.

List devices that have gone offline recently. Returns devices sorted by most recently seen, filtered by how many hours back to look.

Ping/health check of the Firewalla box — returns uptime and timestamp

Get network statistics: monthly bandwidth usage, recent speed tests, and network monitor data

Get network performance metrics: WAN latency, packet loss, DNS response times, and connection quality from the network monitor.

Get per-WAN data usage breakdown. Shows bandwidth consumption per WAN interface with download/upload totals.

List Firewalla features, global policy, per-network policy overrides, DoH (DNS over HTTPS) status, and system vulnerability scan status including external port scans, weak password scans, and UPnP port forwarding results

Get recent network flows for a specific device by MAC address. Returns flow data from the Firewalla init payload.

Search individual network flow records with filters. Returns per-connection details including destination IP, domain, port, protocol, bytes transferred, country, and app category. Supports filtering by device MAC, domain, IP, port, category, and time range.

Get audit logs showing blocked and allowed traffic decisions. Shows which connections were blocked by firewall rules and why. Supports filtering by device MAC, domain, IP, and time range.

List all firewall rules/policies including hit counts. Shows active rules including block rules, allow rules, route rules, and their targets (devices, groups, networks, domains, ports). Supports filtering by type and target.

Get all target lists (block/allow lists) configured on the Firewalla. Shows custom domain lists, IP lists, and their associated rules.

Get DNS query logs showing every domain a device attempted to resolve. More complete than flow data since it captures queries even for very brief connections. Supports filtering by device MAC, domain, and time range.

List network segments, VLANs, and network groups configured on the Firewalla. Shows network names, subnets, VLAN IDs, and which interfaces they're on.

Get Firewalla system information: firmware version, model, branch, uptime, public IP, CPU/memory usage, and hardware details

Get VPN status including WireGuard, OpenVPN, and VPN mesh connections. Shows configured VPN profiles, connected clients, and connection health.