disable 'remote management' on a Plusnet Hub 2

[#1]

Hi,

Is it possible to disable 'remote management' on a Plusnet Hub 2?

Many thanks

pk

[#2]

I doubt it - I don't use one - but why would you want to? That function is effectively the only way you get updates to the Hub, and AFAIK, that is all it allows.

[#3]

@jab1  Surely a request for an update check should originate from the modem/router. I don't use a Hub 2 but a connection attempt using my external IP address will show the Netgear box login screen. I agree with @philipk this shouldn't happen and I see it as a security risk..........

[#4]

@Champnet I don't use any PN kit, but my understanding is that the 'remote management' designed to enable Hub updates - I could be wrong, and don't really want get into a long discussion -it is a bit off my payscale.

[#5]

Surely a request for an update check should originate from the modem/router. I don't use a Hub 2 but a connection attempt using my external IP address will show the Netgear box login screen. I agree with @philipk this shouldn't happen and I see it as a security risk.

@Champnet you are correct, the update check does originate from the router , it uses TR-069 to contact the Plusnet servers.

There is no remote access to the router GUI on a Hub 2.

@philipk as above BUT it is possible for Plusnet to remotely access the router for diagnostics via the secure TR-069 facility. A connection is ONLY possible from the Plusnet TR-069 servers.

[#6]

@jab1  Nothing personal but just applying logic based on experience, I could be wrong. 

Edit : Thanks for your comment @MisterW 

[#7]

Hi All,

Thanks for your input.🙂

MisterW:

<snip> . . . it is possible for Plusnet to remotely access the router for diagnostics via the secure TR-069 facility. A connection is ONLY possible from the Plusnet TR-069 servers . . . </snip>

Can I interpret, therefore, that a 'bad actor' could enjoy remote access to my router via the Plusnet TR-069 servers?  Feasible?

Many thanks

pk

[#8]

I would have thought that access to the TR-069 servers is highly secure

[#9]

@philipk 

If this of concern to you might I suggest you purchase your own router where you will have full control rather than use a locked down device such as a Service Provider Hub.

[#10]

Personally, I think this is panic over nothing - but each to their own, I suppose.

[#11]

@philipk 

The potential security issues relating to TRS069 are well documented

https://en.wikipedia.org/wiki/TR-069#Security

However if the current best practice recommendations are implemented by Plusnet the risks of  "bad actor" access should be minimal. Plusnet ,of course, still have full management access to your router.

If this is still of concern to you, then the simplest way to avoid it is to get your own router, which will not be on Plusnet's management platform.

HTH

[#12]

Anyone using a PN Hub fallen foul of these 'security issues'?

[#13]

Thanks for the very helpful and varied perspectives; much obliged.

Re: "panic over nothing"

I am taking an inexpensive online course in the 'dark' web. The first lesson is to understand and evaluate all possible "risks" within a standard home broadband network, however remote.  It's all for fun, not business or employment, but since I'm retired and somewhat bored, I may as well get stuck in to this; it's fascinating.  Also, it has it's benefits 😊

Many thanks again, fellas.  You've been a great help

[#14]

---

@jab1 wrote:

Anyone using a PN Hub fallen foul of these 'security issues'?

---

I suspect that you can add BT, EE and most other ISPs that supply a freebie router to the list.

[#15]

Probably, @Baldrick1 . I've been using ISP supplied hubs/routers ever since I joined Plusnet.