More and more companies are upgrading theirnetwork security gateways—with amazing results.
What is a Security Gateway? A security gateway is that crucial first line of defense between the internet and your valuable business network. Its security functions are similar to those of a router, but the gateway processes traffic better and faster. Extend SD-WAN with cloud-delivered security that provides flexible, secure access for a diverse and distributed workforce. Lower operational complexity and TCO with converged networking and security.
How does it work? As the name implies, the security gateway concerns itself primarily with securing a network. It’s the network sentry inspecting all incoming traffic to filter out malware, malicious content, and material prohibited by company policy. It can handle high-flow rate filtering and packet inspection with incredible efficiency. It allows business owners to personalize a security system just for them. Cloud-delivered web security services provide comprehensive protection to address threats including ransomware, credential-theft, phishing, spam, and other web-borne attacks.
How is it different from a router? A router’s primary function is to direct traffic to the proper destination within and between networks. The security gateway’s primary function is to make sure that everything coming into the network belongs there and everything else gets shut out. This means that while its function is simpler than the router, it operates with far greater complexity.
What makes the security gateway so reliable? Some security gateways have what’s called built-in failover, which means if an ISP goes down, another port connection will kick in. Gateways also balance the traffic load by sending traffic from an overloaded port to one that isn’t.
I made a 4 page poster of all the Wi-Fi channels including 6Ghz thanks to Wireless LAN Pros for the great image. There are way too many 6Ghz channels to put on one page. Now you just need a wall wide enough to hang it.
The FCC opened new channels in the 6 GHz spectrum back in April 2020 for new Wi-Fi standards. It is widely believed that the iPhone 13 will have a 6Ghz Wi-Fi 6E chipset immediately flooding the market with 6E capable client devices . We saw fast adoption of Wi-Fi 6 largely because of the iPhone 11.
Wi-Fi 6E offers the features and capabilities of Wi-Fi 6, including higher performance, lower latency, and faster data rates, extended into the 6 GHz band. See the graphic above which depicts the huge increase in channels over 2.4Ghz and 5Ghz. The additional spectrum will provide a lot more airspace beyond existing 2.4GHz and 5GHz Wi-Fi, resulting in increased bandwidth and less interference for devices that support Wi-Fi 6E.
If you are deploying new Wi-Fi networks today using Wi-Fi 6 AP’s like the EnGenius ECW230 or Ruckus R750 you will be able to supplement the network later when Wi-Fi 6E AP’s become available. They are running on different frequencies and can coexist alongside each other. Likewise all future Wi-Fi 6E devices will be able to connect to your current Wi-Fi 6 AP’s. 6GHz band will be best suited for close-range connections, ideally between devices that are in the same room as one another so you will want a mix of lower cost Wi-Fi 6 AP’s along with strategically located Wi-Fi 6E AP’s to start.
One thing is for sure you will need fast switches with plenty of PoE power budget to support all these new devices. The Wi-Fi 6E AP’s will for sure support multi gigabit and have higher power requirements so you would be smart to build out your wired network now with cloud managed switches like the EnGenius ECS2512FP.
One of the advantages of Wi-Fi 6 is faster speeds and distance. Mesh access points can take advantage of these increased speeds as well as client devices. Once you have a access point connected to Wi-Fi mesh you can then use it’s wired port to connect to a device or switch to extend a network inside or between buildings.
I setup a hidden SSID on the EnGenius cloud and deployed it to both ECW230’s. This way there are no client devices connected and we will get full throughput. I used iPerf on both computers to test speed.
I first tested at 5 feet and was able to maintain close to 1Gbps.
Next I tested at 50 feet with multiple walls in between the AP’s I was able to maintain 350Mbps.
So another advantage of Wi-Fi 6 access points is they make a great bridge. You could also use the outdoor ECW260‘s to bridge between two buildings at fast speeds. More information on the ECW230 here
With may people than ever working from home bad cell coverage is a huge issue. The best way to get around bad cell coverage at your home is by having great Wi-Fi.
If you want to use Wi-Fi calling the most important thing is to have full coverage and good signal quality in and around your home. Wi-Fi calling does not need high throughput but it does require good quality of service so you calls are not dropped. You are not going to get this from your Internet service providers wireless router.
What you need is multiple Wi-Fi 6 access points like the Ruckus R550 or the Engenius ECW230 most homes will need 2 to 3 wired in to provide full coverage with great Wi-Fi.
The Ruckus cloud goes a step further and allows you to enable a Wi-Fi calling profile and apply it to a SSID.
This will give Wi-Fi calling traffic higher QOS priority so if someone is uploading a big file or gaming your call will not have reduced quality.
You can also pull analytics reports and see how much traffic is going over Wi-Fi calling and from which devices.
You can enable Wi-Fi calling on both IOS and Android devices. On the iPhone you go into the cellular setting menu and enable it. It will ask for your location for 911 emergency’s and that is it.
I did a quick performance test of the new EWS377AP Version 3 There have been some minor revisions including a new ethernet chipset and more memory. These upgrades should allow the EWS377AP to handle more connection in highly dense business environments.
The EWS377AP is heaver than the V1 and has a larger aluminum heat sync on the back.
I connected the EWS377AP to my ECS2512FP 2.5Gb PoE switch and then configured the EWS377AP for channel 149 with 80Mhz channel width using the enwifi app.
I then did a speed test with my iPhone 12 pro on my 1 Gb down 40M up Internet connection.
If I run speed test on a wired station I get about 940M down so this is not far off.
The lights flash like crazy during a speedtest.
Lastly I ran jperf a graphical iperf client with 8 parallel stream to my iPhone 12 pro iperf server.
I saw a maximum combined throughput of 1,077Mbps on one of the runs not too shabby.