How robust is the embedded firewall?

[mawheele]

Hi everyone,
I know this is quite subjective as a question, but how robust would you describe the embedded firewall in the 8900 to be in terms of protection against intrusions? Would you classify if as enterprise strength - I guess not? What settings would you apply to maximise security e.g. switch off uPnP etc? What else?

Has anyone put a dedicated security product (appliance or cloud service) in front of their router? What did you use?

How else could you make it enterprise strength?

Appreciate suggestions / input to enhance overall security at the entry point.

Thanks.

[billion_fan]

Hi everyone,
I know this is quite subjective as a question, but how robust would you describe the embedded firewall in the 8900 to be in terms of protection against intrusions? Would you classify if as enterprise strength - I guess not? What settings would you apply to maximise security e.g. switch off uPnP etc? What else?

Has anyone put a dedicated security product (appliance or cloud service) in front of their router? What did you use?

How else could you make it enterprise strength?

Appreciate suggestions / input to enhance overall security at the entry point.

Thanks.

Bipac 8900AX-2400 Firewall specs below

Firewall -
‧ Built-in NAT firewall
‧ Stateful Packet Inspection (SPI)
‧ Prevents DoS attacks including Land Attack, Ping
of Death, etc
‧ Remote access control for web based access
‧ Packet filtering (v4/v6) - port, source IP address,
destination IP address
‧ URL content filtering (v4/v6) - string or domain
name detection in URL string
‧ MAC filtering
‧ Password protection for system management

[mawheele]

Thanks Billion_Fan. Not sure that answers my question. I guess I'm looking for more of an opinion on whether I should be investing further to bolster my security and the specs don't really tell me enough.

[billion_fan]

Thanks Billion_Fan. Not sure that answers my question. I guess I'm looking for more of an opinion on whether I should be investing further to bolster my security and the specs don't really tell me enough.

Turning off UPNP will stop the router automatically opening ports for devices/programs eg Skype, Xbox, but these devices/programs might have issues when UPNP is disabled

The firewall is good on the 8900 series, when running a port scan via shields up, all incoming ports come up as stealthed, so the firewall is doing its job.

[anajames]

If it has a Nat Firewall i think that would be providing some added layer of security as it blocks any unauthorized traffic to your system.