If your goal is network security, you’d probably be best off deploying something like Security Onion.
After the basics like having a firewall, making sure you have the strongest wireless encryption your devices support (WPA3 probably, WPA2 if 3 isn’t supported), stuff like that.
ClamAV is an anti-virus software that you would run on end-devices, an intrusion detection scans network traffic to detect anything potentially malicious. I don’t know your exact router model but I suspect it’s way too weak to run intrusion detection. If you have a switch that’s capable of mirroring you could use that to utilize a more powerful machine to scan network traffic.
What do you mean by “increase security”? Security isn’t a thing where you get +5 points for every antivirus you have installed - it’s about risks, and how you mitigate them. A perfect antivirus isn’t going to protect you if you have a crappy password on something you forgot about, or if you are running software with a serious security vulnerability.
eth0slash0@lemmy.world 1 year ago
But, why?
ClamAV is a scanning engine that uses a database and heuristics to detect an infection.
Are you looking for an Anti Virus Scanner, or Intrusion Prevention System?
Dust0741@lemmy.world 1 year ago
I guess I’m not 100% sure. Which would I need/which would increase security?
SheeEttin@lemmy.world 1 year ago
If your goal is network security, you’d probably be best off deploying something like Security Onion.
After the basics like having a firewall, making sure you have the strongest wireless encryption your devices support (WPA3 probably, WPA2 if 3 isn’t supported), stuff like that.
eth0slash0@lemmy.world 1 year ago
It sounds like you’re looking for intrusion detection or prevention rather than antivirus.
Great list here github.com/sbilly/awesome-security#ids--ips--host…
However it’s likely that these do not run on asuswrt-merlin out of the box and may require additional setup.
You may even be good enough by using the built in firewall on the router interface and making sure no ports are open/forwarded.
bookworm@feddit.de 1 year ago
ClamAV is an anti-virus software that you would run on end-devices, an intrusion detection scans network traffic to detect anything potentially malicious. I don’t know your exact router model but I suspect it’s way too weak to run intrusion detection. If you have a switch that’s capable of mirroring you could use that to utilize a more powerful machine to scan network traffic.
RegalPotoo@lemmy.world 1 year ago
What do you mean by “increase security”? Security isn’t a thing where you get +5 points for every antivirus you have installed - it’s about risks, and how you mitigate them. A perfect antivirus isn’t going to protect you if you have a crappy password on something you forgot about, or if you are running software with a serious security vulnerability.