stevedaulton
join:2004-05-12
Ruston, LA
| reply to camattin
Re: Pre-N and VOIP woes
Here is what I can tell about the firewall part of the router:
1) It prevents DOS, SYN, UDP, etc.. floods and attacks. That is pretty cool, except it is screwing up VOIP. Ironic that this router has a QOS setting that smooths out VOIP yet the SPI firewall kills it almost completely.
2) The NAT functions on the router are protecting it as well as just about any other run of the mill router out there, even with the firewall off.
3) As far as I can tell, v2 of the router adds the firewall and v1 did not have it at all. So it is no more insecure as running the original v1 (which I have as well).
Bottom line, I am just as protected as I was before I bought the v2 to replace my broken v1, so I am happy. Although I will really love it if and when they fix the firewall for VOIP. |
|
mozerd
Light Will Pierce The Darkness
Premium,MVM
join:2004-04-23
Nepean, ON
| said by stevedaulton  :3) As far as I can tell, v2 of the router adds the firewall and v1 did not have it at all. So it is no more insecure as running the original v1 (which I have as well). The F5D8230-4 version 1000 series, has from its release, support for Stateful Packet Inspection [SPI Firewall] and Network Address Translation [NAT - also a form of Firewall]. The version 1000 series did not provide security logging of value where anyone who understands how to read the output could make an intelligent assessment of the traffic being logged. The QoS implementation on the 1000 series works well for me [VoIP specifically]
The version 2000 series of the F5D8230 improves on the logging -- however I have not had the time needed to fully asses its merits. My tests so far also show that the 2000 series of this device is [30% +/- 5%] slower than the 1000 series.
--
David Mozer
IT-Expert on Call
Information Technology for Home and Business |
|
