NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.
Forum Discussion
CAUTION: Orbi's Wifi Guest Network does not really isolate guests from main network
I was just playing around around with the Guest Network in Orbi and made a rather disturbing discovery that guest clients don't seem to be separated totally from the main network, in fact can access ...
FYI: Problem persists with fw 2.0.0.74 on Orbi in AP mode.
An IP Scanner sees all devices on network. Netgear's Prosafe Plus Utility connects to all Netgear switches. Blocks browsing to some devices, though.
I have Orbi on latest firmware and set in Router mode, not AP mode.
I connect to the guest network on my iPhone and then use the Fing app (https://www.fing.io/) and can see every single device--i.e. it's useless as a guest network. :(
CliffP wrote:
I have Orbi on latest firmware and set in Router mode, not AP mode.
I connect to the guest network on my iPhone and then use the Fing app (https://www.fing.io/) and can see every single device--i.e. it's useless as a guest network. :(
You can see devices with Fing. So what? If you try to ping or connect to any devices from a client connected to the guest WiFi, you will find that you cannot.
st_shaw wrote:You can see devices with Fing. So what? If you try to ping or connect to any devices from a client connected to the guest WiFi, you will find that you cannot.
Security is not about building most of a wall. Security is about eliminating holes in that wall. If you read back through this thread you will find that you can "connect". I was able to connect across the wall using Netgear's switch manager ProSafe Plus Utility.
I was also able to connect... iPhone is on Guest 5GHz, HP AirPrint printer is on Main 2.4GHz. iPhone can print a Safari page on the printer.
I didn't know before now that it was acceptable to even allow seeing clients on the network. Personally, I'd prefer avoiding being able to see other clients on Main if I'm on Guest... ideally not even able to see others on Guest.
Not true. I'm able to connect to any number of devices that use Bonjour. Other posts show similar flaws in the security.
And "so what"? The first step of hacking into a system is know what targets are availble. The product says it hides guest users from each other. So what is that it doesn't do that.
I can confirm that this is still an issue with firmware version V2.1.2.18.
Signed into the guest network and using Fing I can see ALL devices on my regular home network. In the Guest Network settings, "Allow guests to see each other and access my local network" is unchecked.