I have this turned off and looking for your opinions. What exactly does this option do? Why do you need more than the NAT Firewall that comes with the router? For some interesting reason, is no longer listed. So, a check for updated firmware is in order if you own one of these routers.
This goes well beyond a NAT firewall. This utility appears to use a blacklist of sites that are known to contain malware. If you attempt to go to one of these sites, you will first receive a popup warning from the Trend Micro protection system. This is essentially a first line of protection, to protect your own network and its clients from malware laden sites. The Asus site and others, indicates that the AiProtection uses packet inspection to check for malware, however, further reading online indicates that this is not the case as it would result in patent claims against Trend Micro.
Who is right, good question, as the press release from Trend Micro and info from Asus is nebulous to say the least. I believe so. So, for now, I'm satisfied that there doesn't appear to be any problems by letting it run. If you run a google search for Asus AiProtection, you will come across numerous references to it as it is included in other Asus routers as well. It can operate in detection or prevention mode to protect operating systems and enterprise application vulnerabilities.
It protects Web applications from application-layer attacks, including SQL injection and cross site scripting. Detailed events provide valuable information, including who attacked, when they attacked, and what they attempted to exploit. Administrators can be notified automatically via alerts when an incident has occurred.
DPI is used for intrusion detection and prevention, Web application protection, and application control. So, in theory, running AiProtection Utility should protect your network in two ways, first by checking the site address, and by running packet inspection. Thanks for a detailed response Datalink. I will enable the AiProtection too. Glad for the links too. This is a very interesting option and it makes perfect sense. One thing I noticed is that AiProtection's parental control option lets you schedule times that a connected device is able to access the Internet.
I'm sure this will appeal to many parents out there who have posted on these forums asking if there is such a capability available to them. On another note, the hacking being reported by my router is getting stranger by the day.
Yesterday, in addition to the hack attempts I reported earlier, I got a different one overnight: "Apr 1 HTTP login: Detect abnormal logins at 5 times. The newest one was from I may be wrong, but I'm convinced that I'm seeing these things for the first time since the new firmware update, which must have enabled this feature somehow.
It would be interesting to hear from some other Asus owners about their experience with this. I enabled AiProtection and did a scan.
It is showing that the routers access password was not changed even though I did. I have changed the admin password twice and rebooted, but AiProtection Scan is still showing that the password was not changed. Is this a bug or is my sysem compromised? I logged out and checked that I can only log back in with my password, not the default. Did you also change your User ID? If not, that would explain it because it checks both your ID and password.
I do have a bug on mine, though. I've even turned it on and off, but it still gives me that message. Just an update on the hacking issue. I turned on AiProtection and no longer see hacking attempts. I cleared the log a couple of days ago and only see normal NTP activity. This supposed hacking thing was very strange. There appears to be no logic behind what happened. I'm seriously questioning if they were legitimate hacking attempts, rather than the router doing something strange related to my firmware update problem.
Rogers Community. Turn on suggestions. Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type. Showing results for. Search instead for. Did you mean:. Go to solution. Accepted Solutions. Datalink Resident Expert. In response to VivienM. VivienM I'm an Advisor. In response to Datalink. Datalink: Thanks for that info. VivienM: My router has an automatic firmware update notification.
In response to jimboden. I review the System Log every day and, since the update, I've been receiving messages similar to this one: "Mar 30 dropbear[]: login attempt for nonexistent user from ::ffff Datalink: Thank you, suspicions confirmed.
Datalink: I understand what you're saying. In response to malam. Datalink: This is a very interesting option and it makes perfect sense. I'm also going to enable AiProtection to see how it responds to these intrusion attempts. Post Reply. Related Content. Topic Stats. China CN. I just don't understand why it is slowed down. The cpu and memory are barley being utilized on the router. Any thoughts? Seems like it should go faster than that. Seems like it should be.
I would strongly suggest resetting back to factory defaults. Especially if it's had a few updates. This device has hardware accelerated offload, it should be able to route wire speed gigabit with basically no CPU utilization. That you are getting poor performance, and not seeing CPU load is interesting. The Merlin firmware preserves the offload capability, while Tomato does not. I would suggest trying Merlin, then Tomato and comparing the results.
The CPU is adequate to route gigabit, it just adds a hair more latency. Definitely disable QoS outright, I can't imagine needing to traffic management on a gigabit connection at home. I would suspect packet loss too. Because it's always packet loss and DNS. If you turn on features like QoS and traffic monitoring, that disables the hardware offloading of your router and forces the CPU to handle it.
That isn't a big deal on slower connections, but it is a major impact on gigabit. Luckily you don't really need QoS with a gigabit connection anyway, so just turn that stuff off. I also recommend Merlin, but it shouldn't actually be necessary to get gigabit speeds. Both previous replies are correct. Enabling QoS is pointless on high speed residential. Let the bandwidth handle the bandwidth. Two things about QoS that everyone should know: 1.
0コメント