Turris Shield - Plug-and-Play High Security Router

The Turris Shield is a single-purpose device for anyone that wants to easily secure their entire home or small office without having to change their modem or router. Hardware-wise it is based on the Turris MOX. The main difference being its software and target audience. Whilst the MOX is as customizable as possible, the Turris Shield on the other hand tries to be as simplistic as possible while still being secure.

Software:

The Turris Shield comes with Turris OS along with several important configuration tweaks by default. The setup guide is simplified to just entering your password, which is then immediately checked locally against a list of passwords collected from recorded attacks (without sensitive data ever leaving the router). You are then good to go and can connect to the Internet. Turris Shield is also the first device to feature the reForis user interface by default. It does not contain LuCI nor Foris. Automatic updates are enabled by default as is Turris Sentinel – a key feature of the Turris Shield. Other features readily available include support for DNSSEC, OpenVPN (both server and client) or for example, automatic notification of newly connected devices. The Shield also contains the NetMetr application.

Key Features:

• Plug-and-play setup - Easily connects between your modem and router. Setup is just a matter of minutes.
• Always up to date - Unique firewall software does not put you at risk and brings updates instantly.
• Easy VPN - Enjoy encrypted connection to your local network from anywhere with a few clicks.
• Anonymity and Security - With an encrypted connection, your ISP will not be able to track you and ad targeting will get more of a challenge for the third parties as well.
• Safe connection from anywhere - You can connect to your VPN server even using an untrusted public Wi-Fi connection, for example in cafés, which are often a veritable paradise for hackers.
• No geographical discrimination - Thanks to a VPN, it is possible to browse even websites that would otherwise discriminate against users on the basis of the location of the device.
• Single authentication - You don't have to think about logging in to your VPN every single time. You can set it up as automatic just once for all the devices you need.

Shield vs. MOX

Although Shield is based on MOX, there are some substantial differences between them:

• Shield cannot be extended by additional modules. Eventually added modules cannot cause hardware damage but will not work due to missing software support. It is also not possible to replace the current C module (4x Ethernet) by any other module.
• Shield uses some “magic” to determine the best address range on the LAN. This is intended to avoid address collisions because the given situation is more prone to them. Additionally, Shield always listens on 192.168.1.1.
• Shield has modified rescue modes. Because of simplified setup, the default is to reset to the factory state. See Rescue modes for more information.
• Only one setup type. Shield supports only the router setup. It means that the WAN socket is connected to the up-link (with support for PPPoE) and the four LAN sockets are downlinks (with IPv4 NAT and IPv6 DHCPv6 prefix delegation).
• No support for guest networks. There is no Wi-Fi adaptor and the purpose of Shield is different than building complex networks.
• No port forwarding nor custom firewall rules. These features are out of the scope of Shield.
• Automatic updates are always enabled and not configurable. There is no reason to disable or delay automatic updates which are one of the key security features.
• Additional software is not supported. While MOX supports a wide range of installable software, Shield is intended to be as simple as possible and any additional software could lead to potential problems, e.g. with memory or CPU power.

The Shield is recommend if you want a simple device that "just works", straight out of the box and is easy to setup. If you need more features, a custom network setup and additional opensource software, consider the MOX or Omnia.

Take a look at the Shields simplified GUI here.

*with power adaptor and cable

• 1x Turris-Shield
• 1x 1.5M Cat5e Patch Cable
• 1x 12v 2.4A Power Adaptor
• 1x UK power lead