Idea Exchange For Business

How could you not have port forwarding with Insight?? This is a standard requirement. I have to disable cloud management to get this working. This is NOT okay.  ... View more

Dear Netgear & Orbi Pro Supporter I recently bought the Orbi SXR80 router and want to use VPN to remotely connect to my office. But I am amazed that the certificates for the connection cannot be changed in the administration interface. VPN is unusable because if the certificate falls into the wrong hands, anyone can connect to my device via VPN. This happens quickly if a cell phone is lost or stolen. Why not add a function to change the certificate? This should be very easy to do. According to the following link, this was apparently already planned: https://community.netgear.com/t5/Orbi-Pro-WiFi-for-Small-Business/Orbi-Pro-SRK60-Revoke-OpenVPN-client-certificate/m-p/2139485 This function is also required by other users: https://community.netgear.com/t5/Orbi-Pro-WiFi-for-Small-Business/How-to-renew-VPN-private-key/m-p/1689399 I urgently ask you to install this function, because without a VPN switched on is a major security problem! Kind regrads Carlos ... View more

It would be helpful if the SRK80 router supported defining firewall rules between VLANs. This would enable administrators to allow limited access to devices in other VLANs, more precisely than "Network Isolation" on (completely closed) or off (completely open).   A common use case of this feature would be to place IoT devices such as Chromecasts on an IoT VLAN and allow personal devices such as smartphones to control these IoT devices from a personal VLAN, withouth allowing IoT devices to access the personal VLAN. An example of this use-case is illustrated in OpenWRT which is already what the Orbi Pro Wifi 6 firmware is based on: https://www.youtube.com/watch?v=UvniZs8q3eU&t=310s ... View more

It would be immensely helpful to be able to add/edit names of client devices. It would be heck of a lot easy to figure out what each device is... Should be whatever system gets by default and then allowing user to edit, so I can name something like "Printer by Coffee machine" ... View more

Orbi Pro AX1800 WiFi 6 Mini Router(SXR30), V3.2.33.108   Current limitation requires that the DMZ host be on LAN 1 (VLAN 1) instead of allowing us to use any of the configured LANs. Considering that LAN 1 is supposed to be your most secure network for your administrative users, it seems odd that if we need a DMZ host be open to the Internet that we also have to open it to our securest network...   I'd like to be able to create a VLAN specifically for my DMZ host, associate it with a different LAN (eg, LAN 5), and then setup the WAN port to send traffic to the DMZ host. ... View more

Given that your entire product line of ProSafe Smart switches only supports up to TLS 1.0, I'd like to suggest that you start working on making TLS 1.3 available.   Especially, since TLS 1.2 has been around since 2008 and you should really be embarassed that your business line of switches only support insecure communication methods.   ... View more

Would love to see Armor available for the Orbi Pro SXK80. ... View more

Many fibre optic providers in Switzerland are upgrading speeds to 1Gbps up to 10Gbps. With the current WAN/LAN throughput of 924 Mbps, the BR200/BR500 are no choice. It would be great to have a business insight managed router in your lineup to serve this market which I believe is growing everywhere. ... View more

It would be great to drill down on the daily Content Filtering Report, to see which connected clients tried to visit blocked sites.     It would also be nice to offer parental controls for the device or connected client browsing history.    The system is amazaing however it needs some additional features to be a reasonable solution for a work from home user with children.    ... View more

We are looking to use manage accounts for households using Insight and the Orbi Pro.  Right now, the Insight portal needs some help.  Here are some things I wish it could do: Allow you to rename clients so they are identified easier Only the Router shows up in devices and not the satellite so if someone unplugs the satellite, you don't get any kind of a notification. No way to set up port forwarding remotely.  Have to use the local orbilogin.net and be onsite If you make a change using the cloud, there is nothing that tells you that config is being pushed to the devices.  They should have a status like "configuring" or something... You just have to wait and hope the the command worked. I will say that the portal and app make it very hard to find information.  Like notifications being under Account Management?  That is very un-intuative.   Other than these things and the delay of using the cloud, I think it is a good solution.  It just needs some work. ... View more

Problem statement: GS324T deactivates the port due to suspected DDoS, but most likely it is a false positive - tuning is not really possible due to the missing information (in the log) about the reason(s).   The Switch log shows only one line:   <11> Apr 11 04:55:29 Main Home Switch-1 DOS[dtlTask]: dos_api.c(1928) 2115 %% ERR Interface g12 has been shutdown by DOS attack notification. Based on the reply on my post in the forum here, it looks like there is no possibility to have more information in the log, and identify the  real reasons, what exactly has triggered the port deactivation.  Hence, there is no possibility to "tune" the DDOS settings and avoid the "False Positive". In other words: only "blind" tuning possible.   Ask: To have the possibility to get more details about DDoS to the log e.g. by having different log level for DDoS, up to the additional information what exactly / what "active" parameter in DDoS settings has triggered the port deactivation.   Thanks, Andrey   ... View more

When I bought this business class mesh system about a year back (1 router and 2 satellites), tech support stated that the product being a business producr does not have a built in firewall and I should procure an external firewall. A year back tech support stated that vlan segmentation and vlan to ssid mapping would be coming in a later release. At this point indeed the feature came in a later release of hardware in AX6000. I was talking to tech support today again as I purchased a decent hardware firewall and I would like to have the same vlan feature Iin the AX6000) of vlan 1,10,20 and 30 married to SSID with trunking available on the AC3000 as this should be basic network fiormware/software update and has nothing to do with wifi6 which may demand a new chipset. In the very least I need to segment the IOT stuff from business traffic. Can you please integrate proper vlan/ssid mapping into the AC3000 (SRR60). The way this should work is a user joins SSID Wireless 1 and should be part of the corresponding VLAN/Subnet and the AC3000 would run in AP mode and trunk (80-2.1q) the vlans via the WAN port to the Firewall which provides the IP routing, dhcp and all other services. I am not looking for wifi-6. ... View more

There are multipule reports of vulnerabilities with SMS based MFA, we would love the ablility to use a TOTP autheinicator like GoogleAuthenticator/Authy/Passly/Duo when logging into our Insight account or any NETGEAR product. ... View more

NETGEAR Insight's tierd admin system leaves alot to be desired. Primary issue is that a Manager doesn't have enough rights to do their roll and we are only allowed 1 single admin account. The ideal solution would be to have a more granular admin system where we can create our own rolls and select which rights each roll has, (i.e. Billing User, Intern (Read Only), Sales, Help Desk, etc) The alternative and easier to implement solution would be to simply allow us to have multipule admin accounts so that we no longer need a shared account. ... View more

To enable blacklisting or whitelisting of large IP ranges, CIDR Synstax in the type 10.140.0.0/16 should become possible.   See also this post: https://community.netgear.com/t5/Hardware-VPN-Firewalls-and/BR200-Advanved-Firewall-Traffic-Rules-error-message-cannot-add/m-p/2097946/highlight/true#M11810 ... View more

Netgear Insight, although I think targeted toward businesses, does not support compliant WPA2 Enterprise.  It forces TKIP+AES mixed mode.  It is impossible to enforce WPA2 Enterprise on an Insight managed device.  The devices are capable, but you have to unmanage a device and set CCMP-AES manually on the local interface, and that AP can never be managed by Insight, or it will change the encryption from AES back to TKIP+AES mixed mode. ... View more

Limiting the antenna power to levels like 100%, 50%, 25%, etc. is ridiculous and severly limits fine tuning it to the local radio enviroment.  Please update to allow changing it to values from 1 dBm to 18 (20) dBm like a normal person. ... View more

Seems like we only have an all or nothing choice: "Allow IoT devices to see each other and access my local network" If I allow this then the whole purpose of the seperate SSID for IoT is lost. I want the IoT devices to see each other, but NOT access my local network. Specifically I have a Hubitat hub which needs to talk to two Android tablets, two Konnected boards and some TVs. They are all on the same SSID, and I would like them to stay removed from my local network.  Seems the newer WiFi 6 router allows this to be configured via VLAN. Personally I'd prefer a method whereby access levels could be granted on a device by device basis.   Thank you ... View more

Hello, the DHCP server is a bit "basic". Would it be possible to integrate some Options in the BR500 router and be able to manage them in the Insight portal. This would be a great advantage to maintain small sites with SIP phones. Option 2 (Time Zone Offset) Option 4 (Time Server) Option 60 (vendor ID) Option 66 (TFTP or HTTP server in stringvalue) Option 114 (URL) Option 120 (P-CSCF address) Thank You, Edouard ... View more