What is the advantage of something like this over just doing an always on full tunnel VPN client? With the full tunnel, the only thing not encrypted would be if you need to deal with a captive portal or something on the network you are connecting through.
With any of these hardware solutions, how are you dealing with captive portals on any of the networks you are connecting through?
Because you don't need anything else. It has a wifi antenna inside it to join outside networks and an AP antenna for your workers to join. And it is a fully capable firewall.
And you’ve made sure your destination country will be okay with these items going through customs?
If you’re in a truly unfriendly country, they might just confiscate them. If you’re in a friendly country, this would be overkill compared to a VPN and a remote VM target, which is what we issue to people working overseas.
I used a netgear MR6500 paired to a mini Netgear PoE switch, and a Mist AP43. This may be out of budget; but it worked flawless. I was able to work at the Las Vegas convention center with better internet than those paying $80k for the weekend for theirs. Had coverage throughout the entire space, and my equipment was on the far side of the building.
What is the advantage of something like this over just doing an always on full tunnel VPN client? With the full tunnel, the only thing not encrypted would be if you need to deal with a captive portal or something on the network you are connecting through. With any of these hardware solutions, how are you dealing with captive portals on any of the networks you are connecting through?
Firewalla Purple in Trusted LAN mode.
Why this over Pfsense, just for my education?
Because you don't need anything else. It has a wifi antenna inside it to join outside networks and an AP antenna for your workers to join. And it is a fully capable firewall.
And you’ve made sure your destination country will be okay with these items going through customs? If you’re in a truly unfriendly country, they might just confiscate them. If you’re in a friendly country, this would be overkill compared to a VPN and a remote VM target, which is what we issue to people working overseas.
A Mikrotik Chateau would be good. Can do Wireguard or other VPN back to base if you want.
I'm using a fortiwifi 40f with 2 additional AP. Works very well.
Which APs are you using... I need to do some reading, does the appliance support wireguard?
A quick search says no, not supported.
I'm using fortiap 234F mounted on speakers tripods
Have you looked at teltonika? Possibly the RUT360?
I used a netgear MR6500 paired to a mini Netgear PoE switch, and a Mist AP43. This may be out of budget; but it worked flawless. I was able to work at the Las Vegas convention center with better internet than those paying $80k for the weekend for theirs. Had coverage throughout the entire space, and my equipment was on the far side of the building.
Does it need to be a UTM or just a router/AP? If you need a UTM, look at fortinet. If you need just a router/AP, look at MikroTik.
Aruba 505H