vnangia
Senior Member
I think Trend Micro in Asus router would work better. It uses DPI engine and also has malicious website blocking. I'm not sure about Bitdefender Box. I don't think it is as good as the one in Asus router as Bitdefender Box does not perform deep packet inspection(DPI) from https://www.security.nl/posting/409886/Anti-virusbedrijf+onthult+router+die+netwerkverkeer+scant (you can use google translate) while Asus router does, but I'm not sure whether Asus router perform this(https://www.asus.com/support/faq/1012070/) DPI engine on router while use online database or someway else. There is a function on Bitdefender Box that allow your phone to be protected even you are not in local network. Nonetheless, you can do that in Asus router as well, but u need to set up OpenVPN on your phone to connect to Asus router OpenVPN server which make it performs the same way as Bitdefender Box does. In addition, you can set OpenVPN on your laptop and other devices. All of Asus router's functions I mentioned above are all free when u have their products(Asus AC56U, AC68U, AC88U). If it works the same way as Bitdefender Box and u don't need to pay yearly for it, I think Asus Trend Micro is a better choice. Trend Micro and Bitdefender perform at pretty much the same protection performance based on AVTest results. https://www.av-test.org/en/award/2014/ DPI is like what u prefer: IDS/IPS
With all due respect, my experience with Asus' products is that this is nowhere near sufficient. They are extremely powerful and capable devices for consumer products, but they are woefully unprepared to handle a symmetric 75/75 connection. WAN-WAN throughput is under 7Mbps in a best case scenario - single device, wireline connection, no wifi, no dhcp, no other services running. With my usual complement of devices connected, with WAN redundancy, the DDNS daemon and the OpenVPN server running, throughput is under 2Mbps. Moreover, there is no DPI protection, and IDS/IPS is limited to reporting port scans. In addition, it's pretty clear that AIProtect is unable to cope with the non-standard firmware - this is what it reports, for instance, on my Merlin-running router. I've never had WPS enabled, there's a strong, decidedly non-default password, and frankly some of the settings choices leave me confused.