IoT home router

[djs]

I now have 6 IoT devices on my home network. This network is fed from the FIOS ISP router which probably has not in years. So I am looking into purchasing a new router. I want some level of protection for the IoT devices, most of which will not get updated. In doing some research there are three categories:

1. Routers with anti-malware built-in. Examples are Bitdefender BOX 2, Norton Core Secure and ASUS AirProtection.

2. Routers with advanced packet sniffing. Examples Cujo AI, Dojo and RATtrap.

3. Open source routers. Various types of hardware and third party software such as DD-WRT and Open-WRT.

Cost goes down as you go down the list but maintenance goes up as you go down the list. I would like to hear your opinions on this.

 

[IRstuff]

for #1, alternately, there are purpose-built firewall routers like SonicWall

https://www.sonicwall.com/en-us/products/firewalls/entry-level

I should note that many of the features require a paid subscription. But, if you are serious about protection, then you do want something that is current and well-funded, and you want something that is a general solution, as opposed to "Routers with advanced packet sniffing" which is only one of a myriad of defenses required to protect your network.

Nevertheless, the biggest flaw of any security system are the humans, and you would need to step up your game as well. Alternately, you can air-gap your IOT devices onto an isolated network inside the house, but if they're connected by a WiFi, you already built in an attack path, so whatever might be coming through your FiOS is machts nichts if your WiFi itself is weak.

TTFN (ta ta for now)
I can do absolutely anything. I'm an expert!

https://www.youtube.com/watch?v=BKorP55Aqvg

faq731-376 forum1529 Entire Forum list

http://www.eng-tips.com/forumlist.cfm

 

[djs]

IRstuff I agree. The biggest issue will be keeping the router updated. 1 & 3 are the best in that regard. #2 some have paid subscriptions but some do not. Three of the IoT devices are hardwired, the others do not have that option. I try to have as much as possible hardwired. The WiFi is currently WPA2 with pre-shared key. Don't know if the encryption is TKIP or AES.

The Sonicwall devices kind of fall into category #2 with some of the "features" of #3. Good firewall configurability but also high maintenance. but a contender.