A pocket sized network router, Tiny Hardware Firewall (THF) provides firewall protection and secure Virtual Private Network (VPN) connectivity wherever you go. The model I reviewed is worth every penny for its ease of use and security.THF makes it easy to be secure online even if you aren’t a networking expert, and should be part of everyone’s security arsenal.
WHAT’S INSIDE
THF comes in four sizes, named after four famous military generals. Napoleon is the smallest and cheapest, followed by Belisarius, Subutai, and Alexander. All models use the same hardware; the differences are only in the size of the unit and battery capacity. Napoleon and Subutai use regular batteries and are not rechargeable.
Tiny Hardware The Belisarius THF, which I tested, is a TP-Link TL-MR10U portable router, using the Atheros AR7240 chipset and Atheros AR9331 Wi-Fi radio. The 802.11n Wi-Fi router operates in dual radio mode. There is one Ethernet port and one USB port on one end, a power port on the other, and a power switch on the side. The Belisarius measures 1 by 1.6 by 3.6 inches (HWD) and weighs a mere 3 ounces. (Even the largest unit, Alexander, weighs less than 6 ounces.) Belisarius ships with a USB power cable and an Ethernet cable. To connect the Belisarius to a power outlet, you will need to supply your own AC wall adapter.TL-MR10U can be Aashed with a custom firmware, so THF uses OpenWRT, a Linux distribution popularly used in embedded devices such as routers.THF takes advantage of OpenWRT’s built-in firewall capabilities, and you can add the 256-bit version of HotSpotVPN service for an additional $91.25 at checkout, or you can use THF without the VPN, as a standalone firewall. (Most VPN services cost about $50 for an annual subscription.) Norton Hotspot Privacy (49.99), our Editors’ Choice of paid VPN services, protects up to five devices for half the price, but HotSpotVPN’s 256-bit protection, malware scanning, and ad blocking make it worth considering WiFiConsulting said the rechargeable 2,600mAh battery inside the Belisarius has a 10-hour battery life, and that was borne out in our tests. That’s enough time for most situations where you would be on the network but away from a power outlet. In a pinch, you can also use the THF’s battery to charge up other USB devices, such as your phone.
HOW IT WORKS
Instead of connecting directly to wireless networks, you connect to THF and it connects to the public network. Everything you do first passes through THF. If you are trying to access a website, THF lets the traffic through. Tiny Hardware Firewall (Belisarius) PROS reasonably priced. Excellent documentation. Easy to use. Decent battery life. Protects up to four devices. Firewall works even without VPN.CONS VPN service is expensive. No customizable firewall settings. Not always obvious when it’s on.
If a site sends a request you didn’t make, THF knows it’s unsolicited and drops the package. There are three modes of operation: client, access point, and wireless-only. The client mode is the default, and I think it’s more than enough for most users. The client mode is easy, but can be a little cluttered, as you’re using both the Ethernet cable and USB cable (if your THF is charged up, you can just use the battery and free up the USB port), but if that doesn’t bother you, it’s the easiest way to be up and running securely. If you’re using a device that doesn’t have an Ethernet port, such as a tablet or Smartphone, you can switch the THF into either access point or wireless mode and connect over the Wi-Fi network. When you switch to those modes, THF provides a randomly generated SSID and password you use to connect.In access point mode; THF connects to the network via Ethernet and acts as a private access point for up to four Wi-Fi devices within 100 feet. This is handy in a hotel room that offers wired Internet but not wireless, for example. In wireless mode, THF connects to both The network and the device over the wireless. You don’t even have to take the THF out of your bag. Point your laptop to the THF’s special SSID and you’re set to go.
MANAGEMENT INTERFACE AND COMPLAINTS
THF comes packaged with a worksheet listing its username, password, and IP address; just Enter that address into the location bar on your Web browser to enter the bare-bones management interface. In the interface you click on separate buttons to select and connect to a wireless network (and enter the password if necessary), turn on the VPN, disconnect from the wireless, and change the firewall password. There is nothing to fiddle you don’t even have to take the THF out of your bag. Point your laptop to the THF’s special SSID and you’re set to go. With—if you want to be able to tweak your firewall or create custom rules, you’re out of luck. I was a little surprised that, though the thorough manual recommended I change my password from the default, no prompt to do so ever displayed on the screen. Yes, this is a bare-bones system, but when you are trying to make security easy for even the most basic user, you need to do a little bit more handholding. Also, though a green LED on the Belisarius
TINY, BUT POWERFUL
Tiny Hardware Firewall is configured by default to reject all unsolicited outside packets and to allow connected devices to communicate freely. Once I was connected behind THF, I used a different laptop and went hunting. I used Wireshark and nmap and a few other tools, but I never got past the firewall to see the computer itself, let alone try to break in. All the traffic even when I had multiple devices behind THF—was encrypted. THF should be used alongside a security software suite, not treated as a replacement. There’s so much bad stuff out there that it sometimes feels like a losing battle, but this Editors’ Choice–worthy product shifts the balance a bit in your favor.
