AI Protection and other privacy policies

[RMerlin]

A widespread adoption of ESNI would hobble Aiprotect & maybe scripts like Diversion?

It would affect security products, but it also would greatly enhance privacy. So overall, wider adoption of ESNI would still be a good thing.

 

[Tech9]

With DoH on top it will be perfect for business networks... I'm blocking everything until control and management solution is found.

 

[panni]

FlexQoS uses the AiProtection engine for categorization of network traffic.

Is that so? Do I have to enable AiProtection for FlexQoS to work? (I've never done so)

 

[Tech9]

Is that so? Do I have to enable AiProtection for FlexQoS to work?

It uses Adaptive QoS, not AiProtection. Adaptive QoS needs TrendMicro engine. You don't have to enable AiProtection for FlexQoS.

 

[RMerlin]

DoT, DNSSEC and ESNI are pieces of the same puzzle. You ideally need all three to truly secure an HTTP connection. But with DNSSEC and ESNI being barely supported by anyone, I suspect this isn't going to change anytime soon.

 

[Tech9]

If not really needed - not used. IPv6 type of deal.

 

[DJones]

Has anyone had any luck installing Snort on HND models? Packet inspector seems like a good security addition although performance taxing application. My only complaint is their isn’t a web application so stats are all logs or on SSH.

 

[Tech9]

Suricata, but home routers have very limited CPU/RAM:

Suricata - Suricata - IDS on AsusWRT Merlin

Suricata is a free and open source, mature, fast and robust network threat detection engine. The Suricata engine is capable of real time intrusion detection (IDS), inline intrusion prevention (IPS), network security monitoring (NSM) and offline pcap processing. Suricata inspects the network...

www.snbforums.com

 

[Mogsy]

Luckily, I am using my home network just for the basic, no vpn, no NAS, or even SMB. I only have one client who upload projects on ftp3 which uses port 21, which I have no knowledge about how bad it is or how it is affecting me. Having installed AsusWRT Merlin + Skynet + Diversion, I stopped looking at logs/event viewer anymore. Now I have Ai Protection back on again because it is another layer safety as discussed.

But one final thing tho, on my iphone, I noticed there is analytic reports every time I connected to my main wifi. I have been away for 4 days. And no WiFiLQMMetrics reported, only when I am connected to my wifi. Any idea why this is? It doesn't matter, just curious to why. Switching off iPhone analytics anyway

 

[gabox]

I have it AIP active along with several extensions in my browser. Just curious which extensions do you use?

 

[Mogsy]

I have it AIP active along with several extensions in my browser. Just curious which extensions do you use?

For me, I use NoScript, Https Everywhere and Malwarebytes browser extension