Why is SPI disabled on Firewall

Why is SPI disabled on Firewall
Why is SPI disabled on Firewall
2020-03-16 18:13:41
Model: TD-W9970
Hardware Version: V3
Firmware Version: 1.0.0 0.9.1 v009f.0 Build 190419 Rel.34272n

Folks,

 

Just purchased a new DSL wifi modem router, currently being used with ADSL2

 

Under the WAN setup why is SPI not enabled and why is IGMP Proxy enabled?

 

Geffers

 

0
0
#1
Options
6 Replies
Re:Why is SPI disabled on Firewall
2020-03-17 07:56:59

 

@Geffers 

 

Hi Geffers, theoretically, the SPI firewall and IGMP Snooping are enabled by default both. 

 

IGMP snooping is the process of listening to IGMP (Internet Group Management Protocol) network traffic. The function prevents hosts on a local network from receiving traffic for a multicast group they have not explicitly joined.

 

SPI firewall is used to prevent cyber attacks and validates the traffic that is passing through the router based on the protocol. 

 

You can hard reset it and verify whether the two options are enabled by default. 

 

Good day. 

 

0
0
#2
Options
Re:Why is SPI disabled on Firewall
2021-03-05 16:23:23 - last edited 2021-03-05 16:24:13

@Kevin_Z 

Hey,

 

I am in the same situation as OP, setup as modem Firewall and SPI disabled by default...

What should I do now that I enabled my firewall? Did I litterally have no protection whatsoever for months? How could this happen...

0
0
#3
Options
Re:Why is SPI disabled on Firewall
2021-03-12 08:11:58 - last edited 3 weeks ago

@pattim 

Hi, May I know the model number of your TP-Link modem?

How about the current hardware and firmware version as well?

The SPI firewall has been enabled by default on the new-released models.

Thank you very much.

0
0
#4
Options
Re:Why is SPI disabled on Firewall
2021-03-13 14:42:36

@TP-Link 

hey buddy, 

Model: TD-W9970

Hardware Version: V3

Firmware Version: 1.0.0 0.9.1 v009f.0 Build 190419 Rel.34272n

The firewall was also disabled by default, should I be worried?

0
0
#5
Options
Re:Why is SPI disabled on Firewall
3 weeks ago - last edited 3 weeks ago

@pattim 

Hi, the TD-W9970 V3 is based on the previous platform and did not have separate security settings.

So the SPI  firewall is disabled and the IGMP proxy is enabled under the WAN setup configuration by default;

But Don't worry and there would be no security flaws since a router always offers some protection to LAN from WAN.

Also, They have been improved on the V4 and both IPv4 and IPv6 SPI firewall have been enabled by default;

We would also report this feedback to the senior engineers for further evaluation.

 

Thank you very much.

 

 

0
0
#6
Options
Re:Why is SPI disabled on Firewall
3 weeks ago
Im guessing a router effectively aways offers some protection to LAN from WAN. Geoff
2
2
#7
Options