General security checklist (advise needed)

[admon]

Here is a general checklist:

Luci brute force protection

This is a topic that cannot be answered in general terms, as it has many dependencies. It depends on the size of the company, the purpose, the number of employees and the technology used. Basically, you can say that deactivating Wi-Fi (or disconnecting the network so that Wi-Fi can only be used for surfing and has no access to internal systems) is a proven standard method for securing the internal network. Otherwise, it also belongs in this category: Use a firewall (no, OpenWrt is usually n…

“more secure” always depends on what “more” means and what you are doing with the device itself.
It’s pretty secure out of the box.