对于所有网络（包括家庭网络）来说，安全性都是一个大问题，这些网络通常不受管理并且缺乏对外部威胁的任何保护。如果您有华硕无线(ASUS wireless)路由器或华硕 Lyra 网状 WiFi 系统(ASUS Lyra mesh WiFi system)，或者您打算购买一个，您可以使用许多先进的安全工具来保护您的整个网络以及与之连接的所有设备。以下是使用华硕无线(ASUS)路由器或网状(router or mesh) WiFi时如何最大限度地提高网络安全性：
重要提示：(IMPORTANT:)如果您拥有华硕 Lyra 网状 WiFi 系统(ASUS Lyra mesh WiFi system)，但没有看到本指南中共享的配置选项，则表示您拥有旧固件。要解决此问题，请前往华硕支持，下载并安装适用于您的(ASUS Support)华硕 Lyra(ASUS Lyra)的最新固件。
步骤 1(Step 1)。访问华硕路由器或华硕 Lyra 网状 WiFi 系统的设置(ASUS router or ASUS Lyra mesh WiFi system)
虽然华硕(ASUS)提供移动应用程序来管理您的路由器或网状(router or mesh) WiFi 系统(WiFi system)，但最详细的配置是通过您的网络浏览器中的(web browser)用户界面(user interface)完成的，网址为 router.asus.com。在笔记本电脑或 PC(laptop or PC)上打开您最喜欢的网络浏览器(web browser)，然后访问router.asus.com。然后，使用您的用户帐户和密码登录(user account and password)。
注意：(NOTE:)如果您在登录华硕路由器(ASUS router)的其他方式方面需要帮助，请阅读：如何登录华硕路由器(ASUS router)：四种工作方式。
步骤 2(Step 2)。使用趋势科技(Trend Micro)启用 AiProtection
华硕 Lyra(ASUS Lyra)网状WiFi系统，以及华硕(ASUS)的中档和高级无线路由器(mid-range and premium wireless routers)，包括与趋势科技防病毒(Trend Micro antivirus)供应商合作创建的AiProtection 模块(AiProtection module)。该模块能够为您的整个网络提供一流的安全性。第一步是进入左侧菜单中的AiProtection，将“ Enabled AiProtection”开关设置为On，接受许可条款，等待AiProtection开启。
此过程通常需要大约一分钟才能执行。
步骤 3(Step 3)。开启恶意网站拦截(Malicious Sites Blocking)
AiProtection模块(AiProtection)具有三个功能。首先是恶意网站拦截(Malicious Sites Blocking)。确保其开关设置为On。
此功能可监控用户在网络中的所有设备上访问的所有网页。(web page)如果有人试图访问可能会伤害访问它的人或该人正在使用的设备的恶意网页，它会自动阻止访问，如下面的屏幕截图所示。(web page)
这就像为您网络中访问互联网的所有设备和计算机安装实时防病毒软件。
第 4 步(Step 4)。打开双向 IPS(Two-Way IPS)（入侵防御系统(Intrusion Prevention System)）
AiProtection模块的下一个重要功能是双向 IPS(Two-Way IPS)。这充当整个网络的防火墙，它可以阻止垃圾邮件和分布式拒绝(spam and Distributed Denial)服务(Service)( DDoS ) 攻击对连接到您网络的任何PC 或设备(PC or device)的攻击。它还阻止恶意传入数据包，以保护华硕路由器或网状(ASUS router or mesh)网络免受网络漏洞(network vulnerability)攻击。此外，它还会检测来自网络中受感染设备的可疑传出数据包，从而防止僵尸网络的攻击。
因此，请确保将双向 IPS(Two-Way IPS)开关设置为On。
步骤 5(Step 5)。打开受感染设备的预防和阻止(Infected Device Prevention and Blocking)
“受感染设备预防和阻止”(Infected Device Prevention and Blocking")功能可防止来自网络内受感染设备的僵尸网络或僵尸攻击。例如，一位客人可能会拜访您，并且他或她的笔记本电脑在该人不知情的情况下被感染。开启此功能后，您的华硕路由器或网状系统(ASUS router or mesh system)会自动阻止受感染的设备攻击您网络中的其他健康设备，从而使问题不会蔓延。
确保将“受感染设备预防和阻止”(Infected Device Prevention and Blocking")开关设置为On。
步骤 6(Step 6)。激活华硕路由器或华硕 Lyra 网状 WiFi 系统上的防火墙(ASUS router or ASUS Lyra mesh WiFi system)
与任何华硕路由器或华硕 Lyra 网状系统(ASUS router or ASUS Lyra mesh system)捆绑在一起的另一个安全工具(security tool)是防火墙。在左侧菜单中，转到Firewall，然后在右侧的General选项卡中，为Enable Firewall选中(Enable Firewall)Yes。防火墙将保护您的网络免受黑客的攻击。
另一个有用的设置是将“ Respond ICMP Echo (ping) Request from WAN”设置为No。这可确保来自网络外部的 ping 命令无法到达您的网络。
步骤 7(Step 7)。为您的客人创建一个单独的WiFi，并将他们与您的其他网络隔离
每个人都会接待需要上网的客人。因此，他们要求您提供WiFi 密码(WiFi password)。不要给他们您的WiFi 密码(WiFi password)。相反，请转到访客网络，(Guest Network,)单击启用(Enable)，然后为您的访客创建一个单独的WiFi，使用不同的网络名称和密码(network name and password)。最好将访问 Intranet(Access Intranet)字段设置为禁用(Disable)并将其访问时间(access time)限制为几天或几小时。
当您执行此操作时，您的客人会收到您为他们创建的WiFi(WiFi)的 Internet 访问权限，但他们与您的网络的其余部分隔离，因此他们无法感染或攻击它，并且他们不知道您的WiFi 密码(WiFi password)，该密码仍然存储在他们的设备上。
步骤 8(Step 8)。定期更新固件
当您的ASUS 路由器或 ASUS Lyra 网状系统(ASUS router or ASUS Lyra mesh system)通知您有可用的固件更新时，请执行这些更新。不要使用已有多年历史的固件，因为它不安全，并且无法保护您的网络免受安全威胁。通过定期固件更新，华硕(ASUS)提高了为用户提供的安全性和性能(security and performance)，并且您的网络安全性保持一流。
你保护你的家庭网络了吗？
完成本指南中分享的所有步骤，告诉我们您对华硕(ASUS)捆绑的防病毒和安全功能(antivirus and security features)的喜爱程度。他们做得好吗？它们易于使用吗？在下面发表评论(Comment)并告诉我们您的想法。
8 steps to maximize the security of your ASUS router or ASUS Lyra mesh WiFi
Securitу is a big issue for аll networks, including home networks, that are often unmаnaged and lаck any protection from оutside threats. If yоυ have an ASUS wireless router or an ASUS Lyra mesh WiFi system, or yoυ plan to buy one, you gеt accеss to lоts of advanced securitу tools that can protect your entire nеtwоrk and all the devices that are connected to it. Herе is how to maximize the security of your network, when using a wireless rоuter or mesh WiFi from ASUS:
IMPORTANT: If you own an ASUS Lyra mesh WiFi system and you do not see the configuration options shared in this guide, it means that you have old firmware for it. To fix this problem, go to ASUS Support, download and install the latest firmware available for your ASUS Lyra.
Step 1. Access the settings for your ASUS router or ASUS Lyra mesh WiFi system
While ASUS offers mobile apps for managing your router or mesh WiFi system, the most detailed configuration is done from the user interface available in your web browser at router.asus.com. Open your favorite web browser on a laptop or PC, and go to router.asus.com. Then, sign in with your user account and password.
NOTE: If you need help with other ways to log in to your ASUS router, read: How to login to your ASUS router: Four ways that work.
Step 2. Enable AiProtection with Trend Micro
ASUS Lyra mesh WiFi systems, as well as mid-range and premium wireless routers from ASUS, include the AiProtection module created in collaboration with the Trend Micro antivirus vendor. This module is capable of offering top-notch security for your entire network. The first step is to go to AiProtection in the menu on the left, set the "Enabled AiProtection" switch to On, accept the license terms, and wait for AiProtection to turn on.
This process usually takes about a minute to perform.
Step 3. Turn on Malicious Sites Blocking
The AiProtection module has three features. The first is Malicious Sites Blocking. Make sure that its switch is set to On.
This features monitors all the web pages people access on all the devices that are part of your network. If someone tries to access a malicious web page that can harm the person visiting it or the devices that the person is using, it automatically blocks access, like in the screenshot below.
It is like having a real-time antivirus for all devices and computers that access the internet in your network.
Step 4. Turn on Two-Way IPS (Intrusion Prevention System)
The next significant feature of the AiProtection module is the Two-Way IPS. This acts as a firewall for the whole network, and it blocks spam and Distributed Denial of Service (DDoS) attacks on any PC or device connected to your network. It also blocks malicious incoming packets to protect the ASUS router or mesh from network vulnerability attacks. Additionally, it detects suspicious outgoing packets from infected devices in your network, preventing attacks from botnets.
Therefore make sure that the Two-Way IPS switch is set to On.
Step 5. Turn on Infected Device Prevention and Blocking
The "Infected Device Prevention and Blocking" feature prevents attacks from botnets or zombies originating from infected devices that are inside your network. For example, a guest may visit you, and he or she has a laptop that is infected without that person's knowledge. When this feature is turned on, your ASUS router or mesh system automatically blocks the infected device from attacking other healthy devices in your network, so that the problem does not spread.
Make sure that the "Infected Device Prevention and Blocking" switch is set to On.
Step 6. Activate the firewall on your ASUS router or ASUS Lyra mesh WiFi system
Another security tool that is bundled with any ASUS router or ASUS Lyra mesh system is the firewall. In the menu on the left, go to Firewall, and then, in the General tab on the right, check Yes for Enable Firewall. The firewall is going to protect your network from attacks made by hackers.
Another useful setting is to set "Respond ICMP Echo (ping) Request from WAN" to No. This ensures that ping commands from outside your network, cannot reach your network.
Step 7. Create a separate WiFi for your guests, and isolate them from the rest of your network
Everyone receives guests who need internet access. Therefore, they ask you for the WiFi password. Do not give them your WiFi password. Instead, go to Guest Network, click Enable, and create a separate WiFi for your guests, with a different network name and password. It is a good idea to set the Access Intranet field to Disable and limit their access time to a few days or hours.
When you do this, your guests receive internet access to the WiFi that you created for them, but they are isolated from the rest of your network so they cannot infect it or attack it, and they do not know your WiFi password, which remains stored on their devices.
Step 8. Regularly update the firmware
When your ASUS router or ASUS Lyra mesh system informs you that there are firmware updates available, perform those updates. Do not use firmware that is years old as it is insecure, and it fails to protect your network from security threats. Through regular firmware updates, ASUS improves the security and performance it provides to their users, and your network's security remains top-notch.
Did you secure your home network?
Go through all the steps shared in this guide and tell us how you like the antivirus and security features bundled by ASUS. Do they do a good job? Are they easy to use? Comment below and tell us what you think.
