Gryphon Guardian Mesh WiFi Router and Parental Control System with Content Filters and Advanced Cyber Security

Purchased this and 3 Guardians to replace a Verizon Fies G3100 and Apple Airport-based wireless network. (Yes, I could have kept the Airport Express setup as non-mesh access points but was worried about compatibility problems, and was time to move on). Provider is Verizon Fios Gigabit.Look, I was of the "just teach your kids/let them teach themselves screen limits, it's part of being a parent". LOL. With COVID, kids home with no one and/or a sitter instead of a parent, and having a kid who considers 24 hours to be a reasonable upper limit of screen time perday" mindset, this was NOT working. Just need some basic structural rules in place besides haranguing, pleading, and threatening.Most of this review is going to be about the parental controls/app, but some basics on the setup:Some people report setup issues. I had no problem, but it took a long time by the clock (as each unit had to connect, update its firmware, etc). I saw no reason to rush this. Best way to do setup, as though there *are* videos on the web they are sometimes out of date: start with the Gryphon app. It will ask you to scan the QR code on the base unit, will then tell you what to plug in or power up and not, then proceed. Once that is up, in the app: network/add mesh repeater, and continue for each Guardian. They have switched to wired pairing--you use a cable--for the initial setup, which I think is wise, then you move the mesh repeater to its final position afterwards.Second step: identify the items (name them) and assign to a user. Sometimes you can tell the manufacturer, but often it's just a MAC address so you may spend some time staring at the labels on devices (MAC addresses almost always on a label or on an internal menu). to narrow it, you can tell how the item is connected to the network though (which repeater, or if hard-wired). Took a while to map out our 30 devices (computers, then thermostats, sprinkler, a scale (!)....)Overall network performance is quite good, nearly as good as Fios' native G3100. [Full disclaimer: my mesh repeaters are hardwired, aka "wired backhaul", which frees up some of the radio issues]. I get 250-500 MBps by Ookla speedtest when a device is connected by 5GHz, about 80-120 Mbps when connected on 2.5GHz, and 850/300 wired just now. Varies somewhat. Haven't load-tested very much, or tweaked, could probably be better. No connectivity issues *except* when I tinker with certain settings in the app--I suspect that the router interrupts service briefly when it saves settings--various cries from around the house when I do so.In terms of the app: I ditched the Verizon G3100 because of the unpleasant discovery that it only allowed one rule per device: that is, one on/off time per day. No afternoon + bedtime. Compared to that, Gryphon is absolutely wonderful. I have not seen most of the issues described by others, so I assume they have been fixed in firmware or app updates. I would praise the following:--Devices are assigned to a user, and you control user access as a group. So, if I suspend access, it ends access for all the devices at once. (More on devices that use cellular later).--Thermostats, printers, etc. have no user, so don't get accidentally suspended (though as some have noted you can give them a user group if you want extra control).--There are pre-assigned categories of filtering based on the age group that you assign to the user. For example, assigning toddler I think blocks everything, but you can approve individual websites (done by attempting them, finding them in the "blocked" list and saying "allow"). Assigning Middle School allows website monitoring but does not autoblock everything, but allows screen time restrictions (see below), app-use restrictions, and enforces google safesearch/youtube comment block, and does not allow VPNs. "Adult" lets you do everything and does not track websites. You have some control within each re. turning things on and off relative to those defaults.--Screen time: Very, very good. Not perfect, but by far the best. For each user, you can set 3 sections of time: BEDTIME (which is suspended internet), SUSPEND (which seems to be the same), and HOMEWORK which allows internet use but blocks certain categories/apps (we don't have Facebook, but could block it then; or Youtube; etc). You can set this for multiple days of the week at once, but also can vary it by day of week. So I can set BEDTIME for Sat/Sun in one step, and BEDTIME for Mon-Fri in a second step. Done. (No copy from user to user I think though).--Screen time 2: there is also a total screen time per day limit, also changeable/fixable by day. I don't know how this works, but there seems to be some sort of "rescue request" that can be sent and/or approved if the user runs out of screen time and wants to ask for more.--Simple internal safeguards: Devices are "known" by their MAC address. Savvy users will know how to spoof the MAC address and pretend to be a new device, but there is a setting to block internet access for new devices until you approve, preventing this. [You get pinged that someone has tried, so you can for example let the babysitter have access if you gave her the password but forgot to do this before you left]. Other safeguards: VPNs can get around the website filters, but there is a setting to block VPN use for a given user.--Using cellular: Another quick workaround is to use cellular to escape the router. However, there is a HomeBound app which institutes a VPN on the mobile device, which enforces the same restrictions as if you are the home network. I have tried this (iPhones only) and it works (though we will see if my kids can defeat it). Unlike what some wrote, it is *not* (at least on iOS) dependent on having the app running on the target phone, closing the app makes no difference. You need to block "deleting apps" in ScreenTime as deleting the app will reportedly defeat it. Important: texts and phone calls still work, even if the service is in the "suspended" state at home/through HomeBound. This is good--don't want to deactivate the phone. I don't know about Google Maps (maybe would function as if offline). Need to deactivate for a few days while your kid is visiting Grandma? You can turn this entire Homebound control on and off from the Gryphon app at the user level, no need to uninstall/reinstall.Nice additional options:--There is a "suspend" quick option for all users or individual users, and you can set it to suspend immediately or in 5 or 15 minutes. Dinner in 5 minute kids! I mean it!-You can turn off the screen time limits above for a given user for a day, then they will restart again normally the next day. I imagine this is: kid home sick, or it's a holiday, no need to dismantle your entire elaborate screen time program and rebuild it. No need to remember to turn it back on.--Works with OpenDNS.One thing I didn't see: Some report that users are able to ask for website such-and-such to be allowed, or to send a list of websites to be allowed, or getting some kind of splash screen saying how to ask for access. Got none of this yet--just the internet works, or it doesn't, for a given site. I'll look for this.Overall--love it. Not perfect. Much better than anything else I've tried.

I bought this based on the reviews here. I'm an IT pro (but not a security pro). I have a home based business and young children in the house. I was worried that this wouldn't meet my needs because it wouldn't be "configurable enough". As it turns out, it serves my needs just fine (at least in the critical areas). Until I got this Gryphon, I have used several different routers from Asus in the past. These all worked fine for me, but the ability to monitor/control internet access for my children was lacking.I was especially leery that the only way to configure the Gryphon was via smart phone. I understand its a security hole to allow web based configuration, but I'm not a bank, so I wasn't extremely concerned about that. Most routers you can lock down so only a wired local connection can administer the router (which is good enough for me). While its convenient to do quick stuff with a smart phone, the geek in me would like to have a full screen on a desktop to make configuration changes and review browsing history. But this is a relatively minor gripe, and certainly not enough to dock it a star.The main reason I purchased this router was to allow me to control internet access for my kids. They have a habit of trying to stay on the computer after bed time, or even getting on the computer after bed time "cause they can't sleep". I can't look over their shoulders 24/7 to make sure they aren't getting in to inappropriate places on the internet. And when I noticed that my oldest would sometimes quickly close/switch browser windows when I came in the room, I felt like it was time to get a little more involved and "be a good parent". Now I get notifications on "questionable" websites, and can view their browsing history if desired. All of this being done BY the router means there isn't any (easy) way for them to circumvent their access by installing software on the PC or unplugging an add on access/monitoring device. Also, my kids love YouTube videos (especially really stupid ones). Allowing them wide open access to all the YouTube videos out there is kind of scary. You can force YouTube SafeSearch at the router level. Awesome.Documentation is a little bit lacking for this device. Here are some key things that I wondered before purchase that I didn't find out till after I got it:Can I control which subnet the router hands out IP addresses on? (I prefer 10.1.1.x)?Can I set static IPs for devices? (I have a couple of network connected devices I use for work that I need/want static IPs addresses on)Can I turn off browser history for certain users? (didn't want my wife to feel weird because I could see her browser history at any time)The answer to all of those questions is YES.Pros:- Easy setup- Intuitive interface- Great WiFi coverage (as good or better than any of my past Asus routers)- Set bedtime and homework time to shut down internet access per user group (e.g. "family/kid" devices)- Safe browsing options for web sites and native device apps per user group- Get a notification if your kids browse into "scary internet" territory- Kids can request access to a "scary internet" website from the browser, and I can research and approve/deny access from my phone- Set up my wife's phone so she can monitor/approve/deny and extend bedtime as wellCons:- Kid/Family access can only be controlled with bedtime and homework time spans. Would be better/nicer if there was a little more fine grained control (e.g. allow you to define your own "no internet" times in addition to those two). As it is now, I can't quite define the "no internet" times as well as I'd like. Yes I can turn it off at any time, but I would rather have a little more automated control in this area.- No web based configuration on a desktop- (See above) This means that if I want to review browsing history on my desktop and do some research, I can't. Have to "look at phone", and then "type in address" on desktop.- Documentation a bit lacking (what can it do!?)Overall this router is nearly perfect for my needs. It has exceeded my expectations in WiFi coverage and configurability (at least, for something that you can only configure via your smart phone). I don't find the kids up in the middle of the night on the computer anymore. I have at least some peace of mind that they aren't getting in to "scary internet" stuff. And if I ever feel the need to, I can review their browsing history and check for myself. Two thumbs up!