Draytek Vigor 2900G

Draytek Vigor 2900G ... concentrator (endpoint) for up to 16 remote sites - i.e. running 16 simultaneous tunnels to remote locations; either single teleworkers or remote networks/offices. The VPNs use industry standard protocols including IPSec, PPTP and with high level encryption including 3DES, AES and MPPE. Cross compatibility with common Microsoft Windows and MacOS VPN software clients is supported as well as compatibility with many other 3rd party VPN vendor's products, including Cisco Pix, Nokia, Sonicwall, Checkpoint, ZyWall and Watchguard.

The Vigor2900 includes full packet-level firewall facilities, not just the inherrent 'NAT' security and port-blocking of other routers. The router also employs keep-state packet recording; put simply, this means that when a packet is sent out, a reciprocal record is kept to allow a packet coming back in the opposite direction, but a default 'deny' policy means that any packet arriving which appears unsolicited won't get through. The Vigor2900 series also features automatic selectable protection from Dos/DDos (Denial of Service/Distributed Denial of Service) attacks and IP anti-spoofing. User-definable filters also allow you to add additional protection to your connection. For added confidence, potential or foiled attacks are logged and can be reported via the router's syslog facility or emailed to you by the router.

The Vigor2900 also helps protect against internal Internet abuse with its content filter, which can block specified sites, e.g. common email sites or keywords within URLs. Additionally, you can block Java/ActiveX applet download, as well as HTML download of specific file types (e.g. ZIP, EXE, multimedia etc.) You can also block specific PCs from accessing the Internet.

The Vigor2900G supports industry standard WEP encryption. WEP uses a shared key (common to all users) so WEP alone, should someone find out your common key, can be compromised. Therefore, the Vigor2900G also allows you to select additional security methods for wireless clients. 802.1x is an authentication method now supported by WindowsXP whereby a wireless client must enter a unique username and password before wireless access is granted. You can add and delete individual users as required. You can lock the router down further so if the unique hardware ('MAC') address of the wireless client is not in the 'allow' list, the client is also denied access.