Setting up firewall on Ubiquity Edgerouter Lite ?

[GGW]

Based on recommendations here I've replaced my old BEFSX with an Edgerouter Lite. Performance improvement is exceptional. Now I'm looking for recommendations on how best to set it up for tight security. We have fairly simple SOHO needs. Don't need remote access for anything at this point (may hang an Apache server off a DMZ port on the edge router in the future, but not now). No gaming consoles. Just PC's, iPhones, and tablets that need normal internet access.

Any recommendations would be greatly appreciated.

Thanks,

 

[Cloud200]

If you set it up with the soho config wizard you are good to go.
At that point it is a stateful firewall with pretty much everything closed off.
Set it up with the 1 port WAN, 2 port LAN config that way you don't need to worry about setting up the DMZ port later.

 

[abailey]

I agree with Cloud200. I have an Edgerouter Lite and configured it before they had the Wizards, but my understanding is that the Wizards work well. Though, looking at your post, if you have seen performance improvement then it looks like you already have it set up. If you want to test some things to make sure your firewall is blocking, you can go to a number of different sites to test. I use this one:
https://www.grc.com/x/ne.dll?bh0bkyd2
You can test all service ports. Just make sure they show as closed or stealth.

 

[mlg321]

Are you familiar with CLI? I tried and tested this router and it was way above my head. I got the hang of CLI config for my WAN and ethernet interfaces but failed to commit changes when it came to firewall settings. I could have gotten the hang of it eventually but I didn't have the time.

 

[stig]

Are you familiar with CLI? I tried and tested this router and it was way above my head. I got the hang of CLI config for my WAN and ethernet interfaces but failed to commit changes when it came to firewall settings. I could have gotten the hang of it eventually but I didn't have the time.

As abaily mentioned, the new setup wizard should handle a standard SOHO type configuration with stateful firewall, dhcp-server, dns-forwarding, NAT, etc.

 

[GGW]

Thank you guys. I did the wizard, I think, so hopefully good to go then. I ran GRC tests and all looked good from their standpoint.

Performance of this router is quite amazing.