Security
14 Topics
Feature request: provide true network segmentation for guest wifi
It would be great if you could improve the guest wifi capabilities, at least giving the option of complete network segmentation for guest networks on your routers. Visitors, and untrusted devices (e.g., IoT devices) should be able to connect to a separate SSID, on a (separate) VLAN (or other logical segmentation), so that guest devices can't discover, communicate with, or sniff traffic from, devices on the trusted SSID, except as explicitly permitted through user-created rules. Ideally, VLAN management should also extend to the ethernet ports on the router and satellites, so that wired devices can also be segmented out to the untrusted VLAN (e.g., wired IoT devices).8.4KViews25likes4CommentsSupport HTTPS oin GS1xxE web Managet Switches
Please consider using HTTPS for the web management of the GS1xxE line of switches. Especially the smaller models need a secure way to configure them as there are no real replacements for in-field deployments outside special technical rooms where is no room to fit an entire rack into... As the current state of security of many of the embedded or IoT thingis is sub-optimal it is crucial to prevent login credential sniffing via other pOwnd network devices within the same subnet. Thanks, Stefan Seide12KViews8likes1Commentnew idea for security for all modem and raouters
update your security new inteligent firewall and monitor so you can see what is passing over the firewall and what is bloking in real time like attack ,junk,virus,scrips attack,dos,ddos,bots,malware,exploit bloking,portscan,domain infected,dns,ip ,devices ect IP spoofing attack dns poisoning attack arp poisoning attack tcp and upd port scaning attack protocol SMB attack protocol RPC attack protocol RDP attack Man in the middle attack Session hijacking Server spoofing Ping broadcast Ping of death Smurf Teardrop syn flood brute force ect so you can you can block any coonection with servers ,dns,ips,uknow device conected to the firewall,like hakers ,ect make allow rule or deny so you can deside what block or not or the same firewall tell you that is safe or not makenew ids protection and new gen intrution prevention ( fix all false and positive attack ) network monitor so you can block or deny network too of devices see all conection conected and full speed running so you can see what speed is running like 50mbs or more ect see ping and pakage lost and signal stable and see lag spike ect like for example xboxone or ps4 make new inteligent anti exploit protection protect from any exploit and zero exploit over the network or any new atack tech make memory protection ,protect from any attaack from memory modem or raouter make ready nas and share protection make usb protection make new anti dos or any attack wirless make anti jamming wirless for 2.4ghz and 5ghz prevent wirless drops and secure voice ect make a new turbo nat for gaming make new turbo firewall fix the dos and portscan and security make modem slow playing online games speed up the setting that dont affect gaming on any security setting scrip protection make anti bypass firewall make new unpnp protection make hhtps login and secure make dns protection make new gen turbo qos gaming set upload and download speed make a new modem or router speed test fix put the same ip on portward dont work fix that like example fist ip 192.168.10 for xbox second ip 192.168.9 for xbox in case the ip change dont let you fix that dont support mutiple ip make a new disnotic mode test security or vulneravility settings you have make new smart ip conflic fix make new uknow change have been made incase of hakers and what setting was change make turbo chanels for download and upload make to change upload and download frecuency make a new gen modem software for all make super fast software fix always disconection on modems for gaming make super fast cpu 4 core 2.20ghz or higth turbo for modem ect make gaming modem make smart porforward ports nope error and security make support ipv6 for portfoward and all settings like dns ip ect make to disable ready share for the modem add protection for printer security cold be vulnerable and easy for hakers make anti remote bypass and security wps security ect just helping30KViews7likes2CommentsProsafe M4100-26G TLS 1.2 Not Available and Weak Cipher Suites
Our vulnerability scanning shows that our switch's management over HTTPS only has TLS 1.0. In today's world, everything should be at TLS 1.2, so it is causing our vulnerability scanning to report it as a high vulnerability. We have the latest firmware (10.0.2.20), and have recently re-issued the certificates, so I'm not sure what to do. We have the ability to create self-signed certs externally to the switch, but it doesn't seem to allow us to use them. I can only see how to let the switch generate its own certificates. It is also reporting that it is using weak cipher suites. How can I ge these upgraded?47KViews4likes7CommentsAdd Multiple Access Schedules
I am not sure how this is still NOT a fearure... Under Advanced>Security>Schedule, we should be able to setup multiple schedules for and it should even be per device. Currently, I can set only one schedule for all devices. This is very limiting compared to competing router options: D-Link, etc. I should be able to set MUTLIPLE access schedules on a per-device basis. For example, if I have two devices that I want to restrict when they can access the Internet, I should be able to state on device A it can access the Internet Sunday-Thursday from 4 pm - 10 pm and Friday-Saturday from 10 pm until 1 am. I should then be able to set a different schedule for device B, for example Sunday-Thursday from 6 pm - 11 pm and Friday-Saturday from 8 pm - 11 pm. How this feature wasn't implemented yesterday is beyond me???27KViews4likes16Comments
VPN Access with users/passwords
Currently the VPN feature in Orbi, like all other nighthawk routers I have used in past only use certificate based authentication. Meaning authentication is only one-factor. As any security aficiando will tell you, you should always do two factor authentication. Can we get username/password's added to the VPN functionality in this router and the nighthawks? It is a simple mechanism to get two-factor auth. Or if we could hook up to SMS service that would also work :-) Don't want Russia hacking into my home network to steal all my kitten photos.11KViews4likes2CommentsFeature Request - Enable Use of Encrypted USB Disks
For the sake of security, I encrypt all of my disks and specifically all of my portable USB disks. Please enhance the USB port software on your WiFi Routers to enable use of encrypted disks. Without that ability, the USB ports on my router are of no use to me.10KViews3likes6Commentsmake a new firewall settings
make a new firewall settings maake a profecional foresic firewall and strong level of security make to set diferent levelof security firewall off firewall low firewall medium firewall high firewall extreme security add turbo turbo firewall and nat aceleration x50 and no matter what security you set that you can play games with nope problem make to set rule or block any ip ,server,dns,,mac ect and firewall monitor you can see all trafic and pagake reach and attack or something rare or hakers try to break in ect add strong hardware encription 512bit or 1000bit or higther add new firewall encription.. encrip your network no matter what you go or what site your enter or sever ect and state secure and your network will always be encripted and will be more complicate to haker bypass the security fix firewall slowdonw when recive alot of junk over the network or attack or malware ect fix that the modem start slowdonw add strong https longin and ect everywhere reinforce webpage security https or trafics add strong anti exploit for all and new zero day attack make infected scrip blocking make infected cookie protection add for the first time adove flash protection to prevent any attack or hole or exploit fix the slowndow dos sistem and portscan when you play on gamming feel slow add deep protection scan dos and portscan ect add all this to support ip 6 too just helping38KViews2likes2Comments
DEADLINE - 8 Sep 2015 - FCC Comment Period for third-party firmware
As you may know, the FCC has issued a Proposed Rule that affects us all. Although it started out as a good idea, the current proposal would (in part) make it impossible to install third-party firmware such as OpenWrt on a home router. WHAT YOU CAN DO: Learn more about the problem. The Save Wifi page at LibrePlanet has lots of good information. Submit a comment to the FCC. Click the green SUBMIT A FORMAL COMMENT button on this pagehttps://www.federalregister.gov/article … ss-devices Spread the word to your friends, and other forums/blogs. (The millions of the responses about Net Neutrality spawned by John Oliver changed FCC Policy. We can, too.) Finally, come back here and post your comment in the forum so that others know what you've said! Tips for effective comments: Tell how this rule would affect you. What would it prevent you from doing? Why is that important? Anyone can comment, but US citizen's opinions have the most weight with the FCC Use facts, not invective. No cussin' The deadline for comments is short - Tuesday, 8 September 2015. Post comments now - this weekend - before you get too busy. PS: I submitted my comment and also posted it to http://richb-hanover.com/comment-to-the-fcc-re-consumer-router-firmware/
