You are are right. I should. I have Kaspersky installed on all of my PCs, Mac and Windows. Devices that are not sandboxes like Android are iOS are of no concern. But of course I cannot guarantee some guests or family member's laptop has antivirus installed. So I should turn the feature on. I just don't trust the routers horse power to be able to handle all of the traffic and my online gaming not in terms of throughput but in terms of latency. So everything is off on the router side. When I press fire and see my self fire a round on my screen and my friend kills me and he tells me that I never took a shot at him, then I start searching for the weakest link in the chain to blame
.
For the vulnerability protection and infected device prevention and blocking, I haven't got much to say. NAT already blocks all the ports except for the forwarded ones, UPnP is disabled. All of the NAT passthroughs are disabled. Like I said, trying to run a bare router with port forwarding here. I have used some of the features like the VPN server and client, USB router or the downloader in the past. I wasn't 100% satisfied with the downloader I should say. Definitely handy when your router is the only device on 24/7. So it's there for me just in case and I like that.
I know some people disable the hardware switch and use the software one to do QoS and other stuff but they are limited to 300Mbps I understand from what I've read so far. It does make sense. They are limited to what the CPU can process. It has always been like that and apparently hasn't changed even with the latest and greatest quad core multi GHz routers. So, than that, I run just a bare router
.
BTW, I need to add, AiMesh node has not dropped ever since the last 2 firmware updates or so. This thread continuing may be misleading. Just want to let readers know.
KaziQ