How to Choose the Best Mesh Wireless System For Your Home

Page 3: Software: Intrusion/Malware Protection, and Parental Controls

Software: Intrusion and Malware Protection

The more devices we have in our home, the greater the chances that one of them will get compromised and start doing something undesirable. For most of us this is largely a question of when, not if. The good news is that our routers are in a perfect position to detect, report, and even stop this activity. Even better news is that some routers are able to do exactly this!

  • eero: eero offers basic protection for everyone, including automatic detection and blocking of suspicious devices. Their $9.99/month (or $99/year) eero Plus service, available for all eero hardware, adds anti-malware, anti-phishing, anti-ransomware, and anti-virus.
  • Google Wifi: Not currently supported.
  • Linksys Velop: Linksys Shield, available on tri-band Velop units, adds some level of threat protection by keeping you and your devices from visiting malicious sites.
  • Netgear Orbi: Orbi owners can subscribe to Netgear Armor, a Bitdefender-powered cybersecurity engine that, for $69.99/year, protects all the devices on your network from malware and visiting malicious sites.
  • Plume SuperPods: Plume A.I. Security (previously “Secure & Protect”) includes advanced IoT protection, malware filtering, botnet protection, and more.
  • TP-Link Deco: Deco includes a full-featured “Antivirus” system with a malicious content filter and intrusion protection system, and will quarantine infected devices. The entire Antivirus system is powered by Trend Micro’s database and is automatically updated every day. A three-year Trend Micro subscription is included with every Deco package sold, after which users would have to activate with a monthly fee.
  • Ubiquiti AmpliFi HD: Not currently supported.

Advice: This will become more and more important as time goes on. I don’t yet consider this a make-or-break feature, but it’s close. The good news is that it’s available on enough units that most folks will be able to get all the other features they want and have some level of intrusion and malware protection, too.

The Tri-Band Linksys Velop units stand tall and can often blend in well with other items in your home.

Software: Parental Controls

The term “Parental Controls” can mean a lot of different things, but at its most basic – and common – level, it means allowing you to set profiles for each person in your house, assigning all of that person’s devices to their profile. Then you can pause or resume any given person’s internet access, either manually or on a set schedule. Some devices go beyond this with packet inspection and active category filtering, as well.

  • eero: eero includes a basic profile-based system by default. With an eero Plus subscription, you can get a little more granular with these controls.
  • Google Wifi: Basic profile-based feature included.
  • Linksys Velop: Velop supports a standard, profile-based parental control model, and adds to that the ability to block up to 10 specific website URLs per user. As of February, 2019 support for the Linksys Shield service has been aded to the tri-band Velop models. Shield is $49.99/year and gives you parental controls, category blocks, and more.
  • Netgear Orbi: Orbi uses Disney’s Circle for parental controls. Circle comes in both a free and $4.99/month Premium version. The free version allows filters, pause, and history for every user in the family. Premium adds things like Time Limits on apps/people, bedtime, rewards, and usage tracking.
  • Plume SuperPods: Parental controls are possible via a clever password-based profile setup.
  • TP-Link Deco: Profiles and time limits are supported in a fashion similar to the others, and in addition Deco contains a content filter that lets you not only filter from a pre-set list content categories, but also lets you configure the filter to block specific websites and apps on a per-user basis, too.
  • Ubiquiti AmpliFi HD: Parental Controls let you set quiet time for specific devices/profiles.

Advice: Most people we surveyed don’t seem to use or need any sort of parental controls, but for some this is a necessary feature. For us, the TP-Link Deco has the best out-of-box controls, and an eero Plus subscription brings that product up-to-speed, as well.

Table of Contents

  1. Summary Chart, Hardware: Streams/Antennas/Radios, and Ethernet Backhaul
  2. Software: QoS and BufferBloat Protection, Band Steering and Access Point Steering, and Cloud vs. Local Management
  3. Software: Intrusion/Malware Protection, and Parental Controls
  4. Geekier Features, Buying Advice, and Article Changelog

Notify of

This site uses Akismet to reduce spam. Learn how your comment data is processed.

Oldest Most Voted
Inline Feedbacks
View all comments

Dave, I was wondering when you might update your article?  Some mesh makers are now offering WIFI 6 and while I am very happy with my Orbi’s performance I will need to update my son’s home someday soon and he may be the recipient of my Orbi’s.  With all the chatter about the super plume, Ubiquiti, and others I would like to be able to make the best choice when his system fails. Is Synology going to have a new WIFI 6 mesh system?  Also I thought that the ability to use WPA3 was controlled by the router but my network… Read more »


Are you peeps looking for a massive discount on VPNs this Cyber Monday?

One of the most reliable names in the industry, PureVPN, is offering their 5 Year plan at 88% OFF. This means you only pay $79 for 60 whole months of VPN service!


Yeah i also have no idea of it.


I had nice read on your informative write on wireless system. Keep up the good work and keep sharing such useful information. Share something on how to secure your wireless system and on VPN. Great deals are live this Black Friday like

PureVPN’s Black Friday VPN Deal With More Than 88% Off offering 5 Year Plan for $1.32/m per month and total $79.


Thumbs up and thanks…


Where are the tips?

Hi Dave
Can’t wait much longer, need to either put in Synology mesh to extend my 2600 router, or scrap it and buy another mesh system (ouch), any hints or preview you are willing to share of your review findings so far?  

I have just completed the installation of a MR 2200ac Synology Mesh router extending my 2600AC to my entire house. I started by following the instructions to set the two units physically together and go through the setup process via a wireless connection, then moved the 2200ac to the other side of my house and connected it via ethernet (for a wired ethernet backhaul) between the two units. It took a while for the units to complete each step, but the process was fairly painless and the units now appear to be working flawlessly. Speeds are at the max expected… Read more »


I wonder how the new UniFi Dream Machine (and the pending “Pro”) will fare?

Hi Dave! Any updates on your Synology mesh test?

thanks, I will try

@Dave, thanks for the great comparison. Since you’ve used them all I wonder if you could answer 2 questions? Is there any other difference in the Ubiquity Gamer Edition? And do you HAVE to connect a social media account to do remote administration or can you creat an account with username/password?


John Kheit

Great compendium Dave. Any chance you might add the Synology mesh to this list? Also, any thoughts on if when we will see AX and/or AD added to these mesh offerings?


@Dave Hamilton sounds good — I’m already such a huge fan of Synology that it might be nice to just use their mesh and be done with it. Looking forward to that review!


I got the two node Orbi system for a little over $200 back in Black November and it has been great. The three node (AC3000) system is regularly available at Costco for for about $300. A friend of mine put one of those in his more challenging for wifi home and it has also worked out very well. In both cases, wifi performance now matches the performance of ethernet direct to the cable modem anywhere in the house. The Orbi app and admin web page both are mediocre. Strangely, there are some functions one can only do on the app… Read more »

Great article. With the demise of Apple’s offering, the search for a worthy replacement has been daunting. This article definitely helps. However, I recently switched to CenturyLink fiber 1Gbs service. I’m told I don’t need a modem if the router supports PPoE and VLAN tagging. Do any of these mesh systems support those?


Thank you so much for info!


Nice article. Can you also visit how well Apple AirPlay works with the various mesh Wi-Fi systems? I installed Google WiFi and it substantially degraded the Airply performance between a newer iPad and older Apple TV located just 3 feet away.

thanks for that  


In the conclusion, you cited Plume’s adaptive management service as one of the features that earned Plume its recommendation. However, I have scanned the article (albeit from my phone) and cannot find any mention of such a service. Can you help me by pointing to what I am missing?

thanks for that 


Thanks for this article! 🙂