Reply to thread

Message

<blockquote data-quote="ForgottenSeer 58943" data-source="post: 737624">Routers aren&#039;t adequate protection in the modern age. Firewalls are better, but still antiquated. What you probably want is a UTM/NGFW, especially if you have any IoT in your home, those won&#039;t have security except for what your edge device can offer.At the very least ASUS Routers with AiProtection, then switch out to Merlin Firmware.<a href="https://www.asus.com/AiProtection/" target="_blank">AiProtection – Commercial-Grade Security for Your Home Network</a>F-Secure Sense is&nbsp; by far the best home UTM imo that requires little to no IT knowledge. It also comes with an unlimited device license for the F-Secure Sense Application (including for Windows)<a href="https://www.f-secure.com/en_US/web/home_us/sense" target="_blank">F-Secure SENSE — Secure router and app</a>If you have some basic IT knowledge, Untangle is the way to go.<a href="https://www.untangle.com/untangle-ng-firewall/" target="_blank">NG Firewall | Untangle</a>If you have moderate IT knowledge and some money, Fortigate Appliance or Sophos XG is the way to go.<a href="https://www.fortinet.com/products/next-generation-firewall.html" target="_blank">Next-Generation Firewalls | NGFW | FortiGate</a><a href="https://www.sophos.com/en-us/products/next-gen-firewall.aspx" target="_blank">Sophos Next-Gen Firewall: Enterprise Protection with Security Heartbeat | Centralized Firewall and Endpoint Integration</a>Also follow my router hardening techniques in this thread;<a href="https://malwaretips.com/threads/router-hardening.80650/" target="_blank">Q&amp;A - Router hardening</a>Then you won&#039;t have to worry since nobody is going to have WAN access to your stuff. The &#039;proper&#039; way to have remote access to your UTM/Firewall is via VPN. Any other method will burn you, eventually, especially SSH. Don&#039;t expose the user space of your router to the WAN!</blockquote>

[QUOTE="ForgottenSeer 58943, post: 737624"] Routers aren't adequate protection in the modern age. Firewalls are better, but still antiquated. What you probably want is a UTM/NGFW, especially if you have any IoT in your home, those won't have security except for what your edge device can offer. At the very least ASUS Routers with AiProtection, then switch out to Merlin Firmware. [URL='https://www.asus.com/AiProtection/']AiProtection – Commercial-Grade Security for Your Home Network[/URL] F-Secure Sense is by far the best home UTM imo that requires little to no IT knowledge. It also comes with an unlimited device license for the F-Secure Sense Application (including for Windows) [URL='https://www.f-secure.com/en_US/web/home_us/sense']F-Secure SENSE — Secure router and app[/URL] If you have some basic IT knowledge, Untangle is the way to go. [URL='https://www.untangle.com/untangle-ng-firewall/']NG Firewall | Untangle[/URL] If you have moderate IT knowledge and some money, Fortigate Appliance or Sophos XG is the way to go. [URL='https://www.fortinet.com/products/next-generation-firewall.html']Next-Generation Firewalls | NGFW | FortiGate[/URL] [URL='https://www.sophos.com/en-us/products/next-gen-firewall.aspx']Sophos Next-Gen Firewall: Enterprise Protection with Security Heartbeat | Centralized Firewall and Endpoint Integration[/URL] Also follow my router hardening techniques in this thread; [URL="https://malwaretips.com/threads/router-hardening.80650/"]Q&A - Router hardening[/URL] Then you won't have to worry since nobody is going to have WAN access to your stuff. The 'proper' way to have remote access to your UTM/Firewall is via VPN. Any other method will burn you, eventually, especially SSH. Don't expose the user space of your router to the WAN! [/QUOTE]

Verification