Security
14 Topics
VPN Access with users/passwords
Currently the VPN feature in Orbi, like all other nighthawk routers I have used in past only use certificate based authentication. Meaning authentication is only one-factor. As any security aficiando will tell you, you should always do two factor authentication. Can we get username/password's added to the VPN functionality in this router and the nighthawks? It is a simple mechanism to get two-factor auth. Or if we could hook up to SMS service that would also work :-) Don't want Russia hacking into my home network to steal all my kitten photos.11KViews4likes2Comments
Feature request: provide true network segmentation for guest wifi
It would be great if you could improve the guest wifi capabilities, at least giving the option of complete network segmentation for guest networks on your routers. Visitors, and untrusted devices (e.g., IoT devices) should be able to connect to a separate SSID, on a (separate) VLAN (or other logical segmentation), so that guest devices can't discover, communicate with, or sniff traffic from, devices on the trusted SSID, except as explicitly permitted through user-created rules. Ideally, VLAN management should also extend to the ethernet ports on the router and satellites, so that wired devices can also be segmented out to the untrusted VLAN (e.g., wired IoT devices).8.4KViews25likes4CommentsAdd Multiple Access Schedules
I am not sure how this is still NOT a fearure... Under Advanced>Security>Schedule, we should be able to setup multiple schedules for and it should even be per device. Currently, I can set only one schedule for all devices. This is very limiting compared to competing router options: D-Link, etc. I should be able to set MUTLIPLE access schedules on a per-device basis. For example, if I have two devices that I want to restrict when they can access the Internet, I should be able to state on device A it can access the Internet Sunday-Thursday from 4 pm - 10 pm and Friday-Saturday from 10 pm until 1 am. I should then be able to set a different schedule for device B, for example Sunday-Thursday from 6 pm - 11 pm and Friday-Saturday from 8 pm - 11 pm. How this feature wasn't implemented yesterday is beyond me???27KViews4likes16CommentsFeature Request - Enable Use of Encrypted USB Disks
For the sake of security, I encrypt all of my disks and specifically all of my portable USB disks. Please enhance the USB port software on your WiFi Routers to enable use of encrypted disks. Without that ability, the USB ports on my router are of no use to me.10KViews3likes6CommentsSupport HTTPS oin GS1xxE web Managet Switches
Please consider using HTTPS for the web management of the GS1xxE line of switches. Especially the smaller models need a secure way to configure them as there are no real replacements for in-field deployments outside special technical rooms where is no room to fit an entire rack into... As the current state of security of many of the embedded or IoT thingis is sub-optimal it is crucial to prevent login credential sniffing via other pOwnd network devices within the same subnet. Thanks, Stefan Seide12KViews8likes1CommentProsafe M4100-26G TLS 1.2 Not Available and Weak Cipher Suites
Our vulnerability scanning shows that our switch's management over HTTPS only has TLS 1.0. In today's world, everything should be at TLS 1.2, so it is causing our vulnerability scanning to report it as a high vulnerability. We have the latest firmware (10.0.2.20), and have recently re-issued the certificates, so I'm not sure what to do. We have the ability to create self-signed certs externally to the switch, but it doesn't seem to allow us to use them. I can only see how to let the switch generate its own certificates. It is also reporting that it is using weak cipher suites. How can I ge these upgraded?47KViews4likes7Comments
DEADLINE - 8 Sep 2015 - FCC Comment Period for third-party firmware
As you may know, the FCC has issued a Proposed Rule that affects us all. Although it started out as a good idea, the current proposal would (in part) make it impossible to install third-party firmware such as OpenWrt on a home router. WHAT YOU CAN DO: Learn more about the problem. The Save Wifi page at LibrePlanet has lots of good information. Submit a comment to the FCC. Click the green SUBMIT A FORMAL COMMENT button on this pagehttps://www.federalregister.gov/article … ss-devices Spread the word to your friends, and other forums/blogs. (The millions of the responses about Net Neutrality spawned by John Oliver changed FCC Policy. We can, too.) Finally, come back here and post your comment in the forum so that others know what you've said! Tips for effective comments: Tell how this rule would affect you. What would it prevent you from doing? Why is that important? Anyone can comment, but US citizen's opinions have the most weight with the FCC Use facts, not invective. No cussin' The deadline for comments is short - Tuesday, 8 September 2015. Post comments now - this weekend - before you get too busy. PS: I submitted my comment and also posted it to http://richb-hanover.com/comment-to-the-fcc-re-consumer-router-firmware/new idea for security for all modem and raouters
update your security new inteligent firewall and monitor so you can see what is passing over the firewall and what is bloking in real time like attack ,junk,virus,scrips attack,dos,ddos,bots,malware,exploit bloking,portscan,domain infected,dns,ip ,devices ect IP spoofing attack dns poisoning attack arp poisoning attack tcp and upd port scaning attack protocol SMB attack protocol RPC attack protocol RDP attack Man in the middle attack Session hijacking Server spoofing Ping broadcast Ping of death Smurf Teardrop syn flood brute force ect so you can you can block any coonection with servers ,dns,ips,uknow device conected to the firewall,like hakers ,ect make allow rule or deny so you can deside what block or not or the same firewall tell you that is safe or not makenew ids protection and new gen intrution prevention ( fix all false and positive attack ) network monitor so you can block or deny network too of devices see all conection conected and full speed running so you can see what speed is running like 50mbs or more ect see ping and pakage lost and signal stable and see lag spike ect like for example xboxone or ps4 make new inteligent anti exploit protection protect from any exploit and zero exploit over the network or any new atack tech make memory protection ,protect from any attaack from memory modem or raouter make ready nas and share protection make usb protection make new anti dos or any attack wirless make anti jamming wirless for 2.4ghz and 5ghz prevent wirless drops and secure voice ect make a new turbo nat for gaming make new turbo firewall fix the dos and portscan and security make modem slow playing online games speed up the setting that dont affect gaming on any security setting scrip protection make anti bypass firewall make new unpnp protection make hhtps login and secure make dns protection make new gen turbo qos gaming set upload and download speed make a new modem or router speed test fix put the same ip on portward dont work fix that like example fist ip 192.168.10 for xbox second ip 192.168.9 for xbox in case the ip change dont let you fix that dont support mutiple ip make a new disnotic mode test security or vulneravility settings you have make new smart ip conflic fix make new uknow change have been made incase of hakers and what setting was change make turbo chanels for download and upload make to change upload and download frecuency make a new gen modem software for all make super fast software fix always disconection on modems for gaming make super fast cpu 4 core 2.20ghz or higth turbo for modem ect make gaming modem make smart porforward ports nope error and security make support ipv6 for portfoward and all settings like dns ip ect make to disable ready share for the modem add protection for printer security cold be vulnerable and easy for hakers make anti remote bypass and security wps security ect just helping30KViews7likes2CommentsPassword Protect Security Tab
I would like to see a way to password protect the security tab in the router. Adults caring for adults getting over addictions or tech savvy people know to reset the router. And usually both adults in the home know the router password. So having an email setup password for login or bypass on reset would be rather wonderful.11KViews0likes0Comments
