A new firewall device is a capital expenditure for tax purposes, meaning it’s a long-lived business asset rather than a routine operating cost. In practice, though, most businesses deduct the entire purchase price in the year the firewall is placed in service. Three routes make that possible: the de minimis safe harbor for lower-cost units, 100% bonus depreciation, and Section 179 expensing. Which one applies depends on the price of the device, whether your business has audited financials, and how profitable you are for the year.
Why a Firewall Counts as a Capital Expenditure
Any asset expected to benefit the business for more than one year is a capital expenditure, not an operating expense. A firewall clears that bar easily; most enterprise-grade units stay in production for three to five years before replacement. The purchase price goes onto the balance sheet as an asset.
That classification matters because an ordinary operating expense reduces taxable income dollar-for-dollar in the year you pay it, while a capital expenditure normally has to be recovered through depreciation deductions spread across the asset’s useful life. The immediate-expensing provisions below are exceptions to that default rule, not a change in what the firewall fundamentally is.
The De Minimis Safe Harbor for Lower-Cost Firewalls
If your firewall is inexpensive enough, you can skip capitalization entirely and deduct it as if it were a supply. The IRS calls this the de minimis safe harbor election.1Internal Revenue Service. Tangible Property Final Regulations
The threshold depends on whether your business has an applicable financial statement (AFS), which generally means audited financials or SEC filings:
- With an AFS, you can immediately expense items costing $5,000 or less per invoice or item.
- Without an AFS, the ceiling drops to $2,500 per invoice or item.2Internal Revenue Service. Increase in De Minimis Safe Harbor Limit for Taxpayers Without an Applicable Financial Statement
Most small businesses lack audited financials, so the practical limit is $2,500. A basic firewall appliance for a small office often falls under that line. A mid-range unit at $3,500 would exceed the $2,500 non-AFS limit and has to be capitalized, then either depreciated or immediately expensed through one of the provisions below.
The election isn’t automatic. Each year you want to use it, you attach a statement titled “Section 1.263(a)-1(f) de minimis safe harbor election” to your timely filed return, with your name, address, taxpayer identification number, and a declaration that you’re making the election. No Form 3115 is required.1Internal Revenue Service. Tangible Property Final Regulations
Immediate Expensing for Firewalls Above the Threshold
Once a firewall costs more than the de minimis limit, the question becomes whether you can still deduct the full amount in the purchase year. For 2026 purchases, the answer is almost always yes.
100% Bonus Depreciation
The One, Big, Beautiful Bill Act permanently restored 100% first-year bonus depreciation for qualified property acquired after January 19, 2025.3Internal Revenue Service. Treasury, IRS Issue Guidance on the Additional First Year Depreciation Deduction Amended as Part of the One, Big, Beautiful Bill A firewall bought and placed in service during 2026 qualifies. There’s no dollar cap and no taxable-income limitation, so a business showing a loss for the year can still claim the deduction, and bonus depreciation can itself create or enlarge a net operating loss that carries forward.
If your business acquired a firewall before January 20, 2025, and placed it in service in 2025, the older 40% rate under the previous phasedown still governs that specific purchase.4Internal Revenue Service. Interim Guidance on Additional First Year Depreciation Deduction Anything acquired after that date gets the full 100%.
Bonus depreciation applies automatically unless you specifically elect out of it for the entire class of five-year property. You can’t pick and choose asset by asset. Most businesses have no reason to opt out now that the rate is back to 100%.
Section 179 Expensing
Section 179 is a separate route to a full first-year deduction. You elect to expense the cost of qualifying property, including computer and network hardware, in the year it goes into service.5Office of the Law Revision Counsel. 26 USC 179 – Election to Expense Certain Depreciable Business Assets Unlike bonus depreciation, Section 179 lets you choose how much of each asset’s cost to expense, up to the annual limit.
Two limits matter most for a typical firewall buyer:
- The maximum Section 179 deduction for 2026 is $2,560,000 across all Section 179 property placed in service during the year.
- The Section 179 deduction can’t exceed your business’s net taxable income for the year. Any amount blocked by this cap carries forward indefinitely and can be deducted in a future year when income is sufficient.6eCFR. 26 CFR 1.179-3 – Carryover of Disallowed Deduction
That income cap is the practical difference between Section 179 and bonus depreciation. Bonus depreciation can generate a loss; Section 179 cannot. For a profitable small business buying a single firewall, either provision reaches the same result. A startup running at a loss would rely on bonus depreciation because Section 179 would be blocked.
Which One Actually Runs the Deduction
When both provisions apply, bonus depreciation typically handles the whole cost and Section 179 doesn’t need to come in at all. A business that buys a $10,000 firewall in 2026 claims 100% bonus depreciation and reports the full $10,000 on IRS Form 4562.7Internal Revenue Service. About Form 4562, Depreciation and Amortization Section 179 becomes useful mainly when a business elects out of bonus depreciation for the entire five-year class but still wants to immediately expense specific assets like a firewall.
Standard MACRS if You Don’t Take Immediate Expensing
If a firewall doesn’t get immediately expensed, its cost is recovered through the Modified Accelerated Cost Recovery System. Computer and network hardware, firewalls included, is five-year property under MACRS.8Internal Revenue Service. Depreciation and Recapture The deductions actually run across six calendar years because of the half-year convention, which treats the asset as placed in service at the midpoint of year one. Under the 200% declining balance method, the annual percentages are:
- Year 1: 20%
- Year 2: 32%
- Year 3: 19.2%
- Year 4: 11.52%
- Year 5: 11.52%
- Year 6: 5.76%
A $10,000 firewall would produce a $2,000 deduction in year one and $3,200 in year two before tapering. Front-loaded, but nowhere near a 100% write-off. Few businesses would choose MACRS for a 2026 firewall when bonus depreciation is available. Depreciation is reported on Form 4562 and flows through to the main return: Schedule C for sole proprietors, Form 1120 for C corporations, and the equivalents for partnerships and S corporations.7Internal Revenue Service. About Form 4562, Depreciation and Amortization
What About Installation, Software, and Subscriptions
Any cost required to get the firewall into working condition, including professional installation, rack mounting, cabling, and initial configuration labor, is part of the asset’s depreciable basis. You don’t deduct installation separately as an operating expense. When you immediately expense the hardware, installation costs ride along and are deducted at the same time.
Embedded operating software or a bundled perpetual license for the firewall’s management platform follows the hardware. Standalone off-the-shelf software that isn’t bundled with hardware is depreciated straight-line over 36 months by default, though it also qualifies for Section 179 and bonus depreciation.9Internal Revenue Service. Publication 946, How To Depreciate Property
Recurring service payments are a different animal. Annual threat-intelligence feeds, cloud-managed firewall subscriptions, and yearly maintenance contracts are ordinary business expenses, not capital expenditures. A one-year subscription paid in advance is fully deductible in the payment year under the IRS 12-month rule, provided the benefit doesn’t extend beyond 12 months from when it starts or beyond the end of the following tax year. A multi-year prepaid contract has to be spread across the years it covers.
Selling or Retiring the Firewall Later
When you eventually retire, sell, or replace the firewall, the tax result depends on how much depreciation you already claimed. If you immediately expensed the full cost, your adjusted basis is zero. Selling the old unit for any amount, even a small check from an IT recycler, triggers depreciation recapture under Section 1245.10Office of the Law Revision Counsel. 26 USC 1245 – Gain From Dispositions of Certain Depreciable Property
Recaptured gain is taxed as ordinary income, not at the lower capital-gains rate. A $10,000 firewall that was fully expensed and later sold for $800 produces $800 of ordinary income. The sale gets reported on Form 4797.11Internal Revenue Service. About Form 4797, Sales of Business Property If you simply decommission and recycle the unit for nothing, there’s no gain to recapture. If the device still has undepreciated basis because you were using MACRS and retired it early, you can claim a loss for the remaining basis in the year of disposal.
State Rules Don’t Always Match
Federal immediate-expensing rules don’t automatically carry over to your state return. Many states decouple from federal bonus depreciation entirely, and several cap their state-level Section 179 deduction well below the federal limit. In those states, you may owe state income tax on the portion of the firewall cost that federal law let you deduct immediately but state law requires you to depreciate. That creates a timing difference and a separate state depreciation schedule. Check your state’s current conformity rules before assuming the federal deduction flows through.
Records to Keep
Hold onto the purchase invoice, any shipping and installation receipts, and your depreciation worksheets for as long as you own the firewall, plus at least seven years after you dispose of it. The IRS can audit the original cost basis, the depreciation method you chose, and any gain or loss on disposal, so the paperwork needs to outlast the device. If you claimed Section 179 or bonus depreciation, those same records back up the immediate deduction if it’s ever questioned.