Looking for some security

[buggs1a]

Hi all.
I need some help. I am not sure what to buy for my network that will be affordable for me and meet my needs. I don’t think I can find something that meets affordable and my needs.

My old router was Asus AC3100. 3 years or so old. I want something current. I’ve got a MacBook Pro, Note 10+, iPhone 8+, Xbox One X and PS4 Pro. My connection is 275/12 testing at 320/12 roughly.

I want to get an all in one device. One that can provide security and filtering. Support my connection speed as well. I’d like to block adult sites for the network. Shut off the internet at a certain time daily. Provide some security to protect myself. Av IPS etc and provide traffic use info to know how much I’m using up and down etc.

I’ve tried Asus. Their parental control doesn’t work reliably. It does not block adult content on Android that well but does a bit better on iPhone. The keyword filter don’t even work on Android. Tested with three Asus devices and any android phone.

My budget is about $400 plus tax. I don’t have any computer and no room for one. Desktop. I thank you.

 

[AndreiV]

Personally I would save your money, there is nothing wrong with the router you have.
You need to understand that there isn't a service/device anywhere that can block all virus/malware/adult content, it is a catch up game, sites are moved, URL's change, new sites get created every day. Porn gets spammed on to sites and forums every day, that content is hard to block.

There are routers that offer both AV and content blocking but they all offer a short demonstration period or at best a 1 year subscription that you need to renew.

Your ASUS has a lifetime TrendMicro system onboard and will do everything in your list.

Turn onAiProtection and use all the components, then set a DNS filter/or enter the DNS addresses of choice in your WAN section on the router.

You say the DNS filter isn't good on Android or iPhone , sorry but that is wrong, ALL traffic is filtered through your router therefore any PC/laptop/mobile connected has its content filtered.

You are probably receiving data via your mobile provider, you need to remember to turn off mobile data when at home using WiFi.

These 2 services address the adult content issue very well and are offered as NDS filters on your ASUS router.

CleanBrowsing:

https://cleanbrowsing.org

Adult Filter:

Blocks access to all adult, pornographic and explicit sites. It does not block proxy or VPNs, nor mixed-content sites. Sites like Reddit are allowed. Google and Bing are set to the Safe Mode. Malicious and Phishing domains are blocked.

IPv4 address: 185.228.168.10 and 185.228.169.11
IPv6 address: 2a0d:2a00:1::1 and 2a0d:2a00:2::1

filters offered by them are :

Security = Malicious content
Adult = Malicious + Sexual content
Family = Malicious + Sexual + proxy/VPN + Mixed content

OpenDNS:

https://www.opendns.com/home-internet-security/

Utilise the self configured blocking policies OR use "Family Shield "
Home = Regular OpenDNS server (configurable through their portal)

208.67.222.222
208.67.220.220
Family = Family Shield (pre-configured to block adult content)
208.67.222.123
208.67.220.123

These services can be set as a filter on the router in the DNS Filter section or manually set in your WAN section.

It is simple to also set these DNS servers on mobile devices to filter content.

 

[buggs1a]

Ok. I see a reply in my email but this site doesn’t show any. Wtf?

 

[degrub]

Some initial replies are moderated and may be delayed.

There are several threads discussing the issues and some options. It has been discussed in multiple sub forums. Search the threads for ‘control’ or ‘parental’.

 

[buggs1a]

Well anyway. I don’t mean to be hard but you don’t know if there’s something weird with my asus
There is. I am not stupid. I know what I’m doing. I know if I’m on WiFi or mobile I’m not on mobile. I know well anyway I’m not going to argue. I thank you for your reply but it’s not good for me and is wrong about asus and me.

 

[buggs1a]

Some initial replies are moderated and may be delayed.

There are several threads discussing the issues and some options. It has been discussed in multiple sub forums. Search the threads for ‘control’ or ‘parental’.

Uh. Ok. Didn’t know. but anyway my question for still wanting something is still valid. Thank you much.

By the way. One way I know the asus is bad is other routers I’ve tried do better on all my devices in that regard but are too basic. I don’t want basic . But even though some will be I try them out anyway to learn and maybe I’ll like it. Who knows.

 

[AndreiV]

Well anyway. I don’t mean to be hard but you don’t know if there’s something weird with my asus
There is. I am not stupid. I know what I’m doing. I know if I’m on WiFi or mobile I’m not on mobile. I know well anyway I’m not going to argue. I thank you for your reply but it’s not good for me and is wrong about asus and me.

Okay carry on.
Spend $400 or $40,000 you will never find anything that will guarantee to always do what you want perfectly.
Obviously you don't like ASUS , why not just say that instead of saying they are "bad" because you failed to get the result you wanted.
I look after 25+ ASUS routers for other people, many are families with young children and the protection offered, when used correctly, works fine for all of them.

 

[buggs1a]

Okay carry on.
Spend $400 or $40,000 you will never find anything that will guarantee to always do what you want perfectly.
Obviously you don't like ASUS , why not just say that instead of saying they are "bad" because you failed to get the result you wanted.
I look after 25+ ASUS routers for other people, many are families with young children and the protection offered, when used correctly, works fine for all of them.

Good for you. I know what I’m doing. Not going to argue.
Don’t understand why others post the same q I do yet they don’t get flack. Ridiculous.

 

[buggs1a]

Ok. I’m trying the clean browsing one on my Gryphon.

I’m not getting any block page on my iPhone. I just get can’t connect to server. Confusing.

 

[MaD HuNGaRIaN]

Good for you. I know what I’m doing. Not going to argue.
Don’t understand why others post the same q I do yet they don’t get flack. Ridiculous.

I have an ASUS Lyra system and the AI protection crashes after a few weeks forcing a complete reset of the routers.

The parental controls have never worked reliably at all.

I’ve worked with them after reporting detailed bugs and logs and it’s never been fixed. You’re not alone.


Sent from my iPad using Tapatalk

 

[buggs1a]

I have an ASUS Lyra system and the AI protection crashes after a few weeks forcing a complete reset of the routers.

The parental controls have never worked reliably at all.

I’ve worked with them after reporting detailed bugs and logs and it’s never been fixed. You’re not alone.


Sent from my iPad using Tapatalk

Thank you.

 

[Val D.]

I am not stupid. I know what I’m doing.

You are kind of rude, so please do what you know. What @AndreiV knows is working perfectly though.

 

[buggs1a]

You are kind of rude, so please do what you know. What @AndreiV knows is working perfectly though.

Sorry I’m not rude.

 

[MaD HuNGaRIaN]

Sorry I’m not rude.

Yeah, that was a dumb reply. Didn’t add to the discussion at all.


Sent from my iPad using Tapatalk

 

[Val D.]

Didn’t add to the discussion at all.

There is nothing much to add. TrendMicro Parental Controls + CleanBrowsing/OpenDNS block close to 100% of what is selected to be blocked. Tested on multiple devices running Windows, Linux, Android, iOS or custom OS. Hint - if not setup properly the devices may use their own DNS settings and bypass DNS filtering on the router. RT-AC3100 + Asuswrt-Merlin firmware can do everything @buggs1a needs + more. The best new router with Asuswrt-Merlin support is RT-AX88U - fits the budget, one of the fastest router hardware available, WiFi 6 support with excellent speed and range.

 

[MaD HuNGaRIaN]

Except AI Protect and Parental Controls are buggy and don't work reliably. That's a fact, and unresolved issues still exist years after engaging Asus engineers...at least on Lyra systems.

 

[Val D.]

Except AI Protect and Parental Controls are buggy and don't work reliably.

I agree, this is my experience too and this is where CleanBrowsing DNS comes handy. It blocks close to 100% of unwanted content by itself. It’s widely used in schools and offices and is proven safe and secure.

 

[buggs1a]

Thanks everyone. I can’t change dns in my x1 gateway .

 

[Trip]

I'm not sure if you've got the skill and/or willingness to learn, but from the sounds of it you might be ready for a higher class of firewall/UTM than what is available from most consumer products.

IMHO, one of the best blends of control and usability is Untangle (demo here). It can handle everything you stated in your first post. Although it may look a bit daunting, the product is very well documented and supported. A HomePro subscription is only $50 a year, and provides all of their apps, including web and virus filtering. They sell pre-built appliances as well; the e3w with 2x2 AC Wave 2 wifi for $249 is potentially a good fit for you, although its wifi range probably won't rival the Asus you have now, nor most any consumer all-in-one (higher-end network setups usually deploy routing/firewall separately from discrete wireless APs).

If you'd be open to something like this, I would further recommend you run wifi separately (perhaps re-purposing your AC3100 as an access point). This will give you added performance and modularity (for upgrades and maintenance), but I understand if you want to try and keep it all in one box.

 

[buggs1a]

I'm not sure if you've got the skill and/or willingness to learn, but from the sounds of it you might be ready for a higher class of firewall/UTM than what is available from most consumer products.

IMHO, one of the best blends of control and usability is Untangle (demo here). It can handle everything you stated in your first post. Although it may look a bit daunting, the product is very well documented and supported. A HomePro subscription is only $50 a year, and provides all of their apps, including web and virus filtering. They sell pre-built appliances as well; the e3w with 2x2 AC Wave 2 wifi for $249 is potentially a good fit for you, although its wifi range probably won't rival the Asus you have now, nor most any consumer all-in-one (higher-end network setups usually deploy routing/firewall separately from discrete wireless APs).

If you'd be open to something like this, I would further recommend you run wifi separately (perhaps re-purposing your AC3100 as an access point). This will give you added performance and modularity (for upgrades and maintenance), but I understand if you want to try and keep it all in one box.

Thank you.
I’ve tried the Untangle Z4w. The web filter doesn’t block very well on Android which none do except the TP-LINK Archer AX6000 did very well. I have heard this is because of how Google treats the web. Not normal. So filters don’t do good.
I don’t think there’s anything for me.