To secure a router available at a public static IP address from various vulnerabilities discovered and exploited from time to time (or other examples), would it help to separate its firewall and/or VPN capabilities into dedicated device put in the front of the router?

(At the first sight, it appears safer – since to gain access, two devices must be exploited instead of one.)


   ISP --------------------------------> [Router w/Firewall]

Is the following more secure?

   ISP ---------> [Firewall] ----------> [Router w/Firewall]

(or maybe even with original firewall disabled)

   ISP ---------> [Firewall] ----------> [Router with disabled Firewall]


Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.