I'm three days into using my new Orbi RBK50. And, I have a couple of questions... Should UPnP be set to on??? Shoud I have Implicit Beamforming turned on??? And, Enable MU-MIMO???Do I need to do anything about DOS attacks I see in the log??? I gather I'm (relatively) safe...Everything seems to be working now...

DukeSilver UPnP is needed for all sorts of things and our devices use it daily and you will have issues with 2 way communications if its of eg torrents wont work well , windows messenger and facebook messenger wont work plus many more things UPnP is there for far more things that just connecting between machines , turning it of is a paranoid security measure at best and overkill for the average home router pete

Thanks for the advice. It is simple to turn it off and see if you really need it. I have it off and have no issues with any services\devices on my network. I read "paranoid" to be smart and safe. Don't open ports\enable services you do not need. If I have UPnP enabled I see frequent remote access login attempts. As with all advice - do your homework, make your own decisions, live with the consequences. Per Ars Technica article: They identified 81 million unique addresses that responded to standard UPnP discovery requests, even though the standard isn't supposed to communicate with devices that are outside a local network. Further scans revealed 17 million addresses exposed UPnP services built on the open standard known as SOAP, short for simple object access protocol. By broadcasting the service to the Internet at large, the devices can make it possible for attackers to bypass firewall protections.

Hi! The answer to all three questions is an emphatic NO.

Thanks. I notice that UPnP is turned on... I'm wondering if there is a downside to turning it off...

If you have connected devices that need to discover each other then UPnP may need to be enabled. It is likely you do not as this is actually a rarer case then it used to be. If you do not need it then disable it as it is a potential security hole. I had UPnP enabled on my R7000 and had frequent remote access intrusions. Fromhttp://www.makeuseof.com/tag/what-is-upnp-and-why-is-it-dangerous-makeuseof-explains/ Programming Errors – there are oversights in the actual code for UPnP implementations that can be exploited by malicious users, allowing them to execute harmful code through injection.Unintended Exposure – the purpose of UPnP is to make devices on a network easily discoverable by other devices on that network. Unfortunately some UPnP control interfaces can be (and routinely are) exposed to the public Internet, allowing malicious users to find and gain access to your private devices

Newbie questions | NETGEAR Communities

16 Replies

DukeSilver
Star
Jun 21, 2017
Hi! The answer to all three questions is an emphatic NO.
- ArtLee
  Apprentice
  Jun 21, 2017
  Thanks. I notice that UPnP is turned on... I'm wondering if there is a downside to turning it off...
  - DukeSilver
    Star
    Jun 21, 2017
    If you have connected devices that need to discover each other then UPnP may need to be enabled. It is likely you do not as this is actually a rarer case then it used to be. If you do not need it then disable it as it is a potential security hole. I had UPnP enabled on my R7000 and had frequent remote access intrusions.
    
    From
    http://www.makeuseof.com/tag/what-is-upnp-and-why-is-it-dangerous-makeuseof-explains/
    
    Programming Errors – there are oversights in the actual code for UPnP implementations that can be exploited by malicious users, allowing them to execute harmful code through injection.
    Unintended Exposure – the purpose of UPnP is to make devices on a network easily discoverable by other devices on that network. Unfortunately some UPnP control interfaces can be (and routinely are) exposed to the public Internet, allowing malicious users to find and gain access to your private devices

Forum Discussion

Newbie questions