206Eero Plus - View Devices/Sites that Triggered "Threat"
I love eero Plus and the fact that it is protecting our network. What would be nice is under the Activity log where it shows Threat Blocks for Botnet, Malware, Phising, Spyware (and ditto for Content Filters), it would be nice to be able to click on what was blocked and see the following:
- Device that was the source of the block (Was it my TV, my laptop or my iPhone)
- Site that was visited
- What the threat was that was blocked, if it's a known threat
Obviously there are privacy concerns so you should be able to toggle the above feature on or off.
-
Just signed up to add my voice to this request.
-
I bailed on Eero+ for this reason. I talked to support multiple times. It’s been requested basically since Eero has been around and they’re not going to add this feature. I bought myself a Firewalla device and was like YES!! THIS is what I’ve been wanting from Eero. I still love the Eero devices, but the Eero paid protection feature is peanuts compared to Firewalla. Eero+Firewalla is a great combination.
-
01000001ron Thank you so much -- I'll check out Firewalla!
-
-
Agree with OP. There’s no chance I’m paying for something that doesn’t give me more context into why something was malicious.
1 day left on my trial and these gems pop up out of no where…
-
3 years old and still no movement on this from eero? I'm likely to dump eero+ for Firewalla now.
-
markomni Love my Gold with eero 6 pros.
-
markomni I did the same last year and it was a great decision. Bailing on Eero+ and getting a Firewalla Blue has been amazing. Firewalla keeps getting better too.
-
-
Details please! We know you have them. I just got the erro pro 6 and have the 30 day security trial. I will not purchase it because I don't know what exactly is being blocked. Only listing categories is too veague for me. For all I know it's fake.
-
big10spartan In order to know details, it means that those details would be available and stored. Eero chooses privacy over visibility for their customers. If you want more visibility, try a Firewalla Gold.
-
txgunlover thanks, I actually saw the comment about Firewalla after my post. Looks pretty neat, I might be getting one.
-
-
Adding my vote.
”Trust us, we know what we’re doing” can only be stretched so far. Let’s be able to see what’s happening on our networks. Pretty-please?
-
I now remembered why I cancelled eero Secure before, I'm going to do it again. None of my streaming devices can play Disney+ (kids profile) with Advanced Security turned on. Just checking the Activity in the eero app, it shows my Sony TV attempting to connect to phishing sites 20 times in an hour. Because eero doesn't say which, I have no idea what to to add to the allowlist.
Going back to opendns for some basic security (not sure eero does any better than preventing DNS lookups). Or install pihole on a raspberry pi.
-
cmarinas get a Firewalla. Best affordable home internet security device out there in my opinion.
-
cmarinas Replying to myself. I solved the Disney+ app blocking with eero Secure on by:
- install dnsmasq on a local Linux machine (Raspberry Pi for me)
- configure dnsmasq to enable logging and route to queries to the eero gateway (192.168.4.1)
- change the DNS to manual on my phone for the WiFi network and point it to my Raspberry Pi running dnsmasq
- start the Disney+ app on the phone, try to watch some movie (it won't work)
- check the dnsmasq log for replies with 192.168.4.1 (that's where eero redirects blocked sites)
- allow media.dssott.com in the eero app (the subdomains that Disney+ attempted were vod-akc-eu-west-2.media.dssott.com and vod-btoc-eu-west-2.media.dssott.com).
- kids happy again
Now, it would be better if the eero had a troubleshooting mode to log blocked sites for half an hour or less. It would have saved me the hassle to get dnsmasq installed.
-
-
We 100% agree. The fact this is missing makes the stats not super helpful. How can we solve if the trigger data is not available.
-
I would like to be able to see what content is being filtered. I can see that adult content is being filtered from my child’s device, but I want to know if it’s a website she was trying to visit or if it was a website that was filtered from a google search.
-
I know its been 3-yrs on this topic. However, this needs more votes. Eero what’s the point of leaving the end-user in an ignorant bliss? It’s important to know what is malicious, what is really being blocked and etc… Please add to your future roadmap.🙏🏾 🙏🏾🙏🏾 I have no idea what I am paying for but a pretty picture …
-
crayeg01 if you look on other threads it’s actually been like 6 years of consistent feedback. I think it’s perfectly clear this is NOT on their roadmap. Personally I canceled the “Eero Secure” and bought a Firewalla device. The Firewalla experience has been amazing and even exceeded my expectations for how they continually improve the service. Eero makes great hardware, but fails on the service model.
-
01000001ron thanks ! this was the first one I came across. I will check it out. I appreciate the info.
-
I agree, I have had eero Secure for many years and they have not provided any details to the threats and other areas we have been asking for so I bought a Firewalla device and it’s worth every penny. It surpasses my expectations. I have since cancelled my eero Secure subscription and WILL NOT renew ever again.
-
-
Just got my Eeeros today. Bought them to replace a Netgear mesh product that has been acting strange. Setup was great - I’m a tech guy with 35 years experience, and recognize seamless tech and superb interfaces. Looking around the UI - surprised to find supposed malware filtered on my network, but can’t determine what caused it. Setup some profiles (one per device) and narrowed down to an iOS device (also surprising). Just signed up in the community so I could upvote this thread and request this capability. Chance of purchasing any monthly service just went to zero. C’MON AMAZON/EERO MAKE IT HAPPEN! Not holding my breath, starting a search for another mesh router, will swap out in a sec if I find it.
-
Just echoing what's already been said. Would be happy to pay for Secure+ if it included logs (like nearly every other low end router out there).
-
My Internet provider (Spectrum) sent me a vague email saying, based on internet traffic, "A device using your network may be infected by malicious software." I was about to chew them out for being USELESS, when I thought to check my Eero. Spectrum can at least tell which IP address is indicating malicious software, Eero can't (or won't) even do that, making it WORSE THAN USELESS.
I have antivirus scanners on all my PCs, but Eero is in the unique position of looking at independent traffic. So work with us, Eero, and tell us how to fix our problem instead of gloating to yourself.
-
Would be great to see a list of websites my son has visited on his computer. If EERO is doing this, the fact that he deletes his web history would not matter. Blocking websites is not enough
-
Crazy that after 3 years nothing has been done to address this. I’m seeing blocked threats on my TV, which makes me question the accuracy of the reporting.
-
Tubby_TW Yeah, it took me ages to debug why Disney+ didn't work on my TV (ad to set up a local DNS server with logging enabled). It turned out eero was blocking media.dssott.com. Allowing this domain solved it but without logging, it's pretty hard to debug. I now disabled eero secure. While nice in theory, when it goes wrong you really waste a lot of time trying to figure out (and calling eero doesn't help as they don't keep logs either). I kind of understand their "privacy" position but could at least store some logs locally or maybe temporarily in a troubleshooting mode.
-
cmarinas thanks for the tip, seems a few things are blocked by default. Also had to manually unblock Apple.com and iCloud.com as had Find Me issues on profiled connections.
Might also consider turning it off, just first want to find another solution for keeping the kids out of unsuitable sites.
-
Tubby_TW depending on the kids' age, the protection may not work for much longer ;). At some point they'll figure out how to install a VPN.
You can set a default DNS like Cloudflare Family (1.1.1.3) or OpenDNS and should be fine depending on the device/browser (and kid). Eero secure intercepts the DNS requests, so even if a chromebook comes configured with 8.8.8.8 by default, the protection would still work. However, more and more browsers are moving to DoH (DNS-over-HTTPS) and the eero secure filters don't catch those (e.g. you can enable it in the privacy settings on Microsoft Edge and it will use https://dns.google for domain look-ups, bypassing any eero secure feature). Not sure eero can do much other than blocking those domains but just refusing to resolve dns.google won't necessarily work, it would need to block access to 8.8.8.8 and 8.8.4.4 altogether (I tried https://8.8.8.8/dns-query in Edge with dns.google blocked at the eero level and worked just fine).
I'm slowly coming to the conclusion that the best protection is still in the browser, configuring the DNS-over-HTTPS to something like doh.cleanbrowsing.org or cloudflare, opendns. When the kids learn to change that, the only solution is talking to them. Eero won't help unless it can block at the IP level, not DNS.
-
cmarinas thanks for the detailed response.
-
-
3 years ? Come on folks make this happen already.
-
Although I love my eero devices, just like everyone else that has been asking for the enhancements around the activities and details of threats blocked, etc., almost a year ago, someone else posted this in the forum and I decided to do some research. After my research and seeing how much this product could do for me (and keep in mind, with no yearly subscription), I decided to make the jump and acquire this new firewall that I am certain you will love as well. I got the Gold version. Check it out - https://firewalla.com.
PS I am still using my Eero's as my wifi but in bridge mode.
-
I'm getting malware threats on three devices on my network. I ran antivirus and antimalware on all of them without any hits. I factory reset the tablet and only reinstalled Disney+, Hulu, and Peacock, but I'm still getting the warnings. Unless one of those apps is the underlying cause (which I strongly doubt), it's either a false positive or something else in my network is trying to spread to other devices.
If eero isn't willing to tell me what is triggering the alerts, I will have to look for other options. Telling me that you know someone is trying to break into my house but not telling me how you know or where you detected a problem isn't constructive. I still have to do all the work myself to identify (and eventually fix) the problem, except that now I'm annoyed that the security system isn't sharing the information it has about it.
-
euphbriggs for me it was clearly a false positive triggered by the Disney+ app. I did some debugging (details above in this thread) and eventually found that media.dssott.com (and its subdomains) was incorrectly flagged as phishing. I have since canceled eero Secure, too many problems and no logs to debug. If you don't care about setting up profiles at the router level, NextDNS is a good option.
-
-
Like so many others, signed up for this. It's useless without data. Will be single starring as much as possible.
