Serious Discussion What Routers are the most secure?

[Azazel]

That have lowest attack surface (secure software implementation - memory safety - not many unneeded functionalities) and many years of security updates.

 

[Jonny Quest]

It's less about attack surface for routers because all hardware has bugs. it's more about how long it takes for vendors to patch bugs/exploits. ASUS, Neatgear, Mikrotik are all good choices for consumer devices with frequent security patches/updates. Ubiquiti is good value too but has had a few hum dinger bugs lately like all enterprise gear.

If you choose enterprise level gear like Cisco, Palo Alto, Juniper or Fortinet you probably have too much money because subscriptions every year will drain you bank account. Enterprise doesn't guarantee you security, they have just as many bugs/exploits/attacks like consumer devices.

Enterprise is nice too fool around with in your home lab but from experience consumer devices protect the home network just as good as the Cisco's etc for much less money.

Amen...thank you After reading this thread, I knew it was time to upgrade my cheaper and outdated Linksys "basic in, basic out" router as I couldn't remember its last firmware update. I know this ASUS RT-AX3000 router is still a mid tier consumer model, but, it is still getting firmware updates, has no perceived EOL as of now, and does have the Trend Micro security.

It seems like for my use, Trend Micro is a benefit.

[AiProtection] How does AiProtection protect my home network? | Official Support | ASUS Global

When I set up the router, I got this message when trying to switch to WPA3 Personal from WPA2. Should I switch to 3 for its better security, and relog in in to all of my devices that it may affect?

 

[Practical Response]

When I set up the router, I got this message when trying to switch to WPA3 Personal from WPA2. Should I switch to 3 for its better security, and relog in in to all of my devices that it may affect?
View attachment 282582

As you suggested WPA3 plugs some security vulnerabilities and weaknesses found in WPA2 but you may run into compatibility with certain devices, if so you can always revert back to WPA2 if needed as suggested by the prompt.

 

[Jonny Quest]

As you suggested WPA3 plugs some security vulnerabilities and weaknesses found in WPA2 but you may run into compatibility with certain devices, if so you can always revert back to WPA2 if needed as suggested by the prompt.

Yep, I just found out, back to WPA2. Thanks for your quick reply

 

[Tume]

I use Fujitsu Futro S930 with AMD G-Series GX424CC @2.4Ghz 4-core CPU. It cost 75€ from Ebay Germany. I also bought correct riser to it and Intel i350-T4 Quad Port NIC.

Installed OPNSense to it.

As switch and WLAN AP I use Ubiquiti devices.

Great review about Futro S920 as hardware firewall

 

[blackice]

But it has no malware protection. To do that means it'll need to tie up with a large AV/AM company and likely to provide a subscription service

No Wifi support. Can overcome with a travel router like the Beryl AX (GL-MT3000) from below

GL-MT3000 / Beryl AX

Beryl AX (GL-MT3000) is an OpenWrt multi-gigabit Wi-Fi 6 wireless router for frequent travelers and remote workforces to protect their digital assets and footprints online.

www.gl-inet.com

It can protect IoT devices through creating VLAN and setting up a network segment for the IoT devices

2Gb WireGuard.....would this be a bottleneck for VPN? 10Gb would be better.

Its supports 3rd-party VPN service. That's great for now one can ride upon those 3rd-party VPN 10Gb servers

From its website OOKLA Speedtest

They claim they do block malicious sites and intrusions:

 

[HarborFront]

They claim they do block malicious sites and intrusions:

View attachment 282589

I was referring to protection against viruses, Trojan, worms etc. You'll need an AV/AM to do that