Home > Consumer Reviews > Linksys BEFSX41 EtherFast Cable/DSL Firewall Router (4-Port 10/100 Switch / VPN Endpoint)

I've used two SX41s for over three years on DSL and they are rock solid providing that I don't violate the cardinal rules of operation. The VPN tunnels are easy to set up if you follow the guidelines. First of all you must use a stable firmware. 1.45.7 is the most stable. The latest 1.52.9 is okay, but not as stable. Also you must NEVER set any of the Web Filters to deny or you will have reboots. Generally it is as simple as that.

There are also rules for flashing that must be observed. It doesn't matter whether you use a ver 1 firmware on a ver 2 router or visa versa. Thinking there is a difference is nonsense. What DOES matter is that the router MUST be reset to factory defaults (30 secs on the reset button will do this) before a flash or you risk bricking the router. When flashing with the Web page flashing tool, use IE or you will risk bricking the router. Use the TFTP utility for the SX41 obtainable from Linksys if you wish to use a Mozilla-based browser to flash. After you flash, you should reset once again to factory defaults. There are residual register settings carried over from the previous firmware versions that can cause reboots and other malfunctions.

Even the best flashing procedures can fail, but there are procedures for recovering from a bad flash at DSLReports.com. The recovery rate is probably better than 90% using those techniques. Guidelines for setting tunnels up are also posted there as well as access to the 1.45.7 stable firmware.

Successful operation of the SX41 requires modest intelligence, some networking experience, and following the operating rules. Linksys support hasn't a clue as to what those rules are so don't even bother with them unless you are trying for an RMA for a defective unit. Basically the router has gotten a bad rap from people who don't know how to operate it. Unfortunately they can't learn how to do that from the minimalist manual or from the so-called tech support personnel. Ask for operation help in the Linksys forum on the above mentioned web site if you are struggling with this router.

I bought this in July 2003 just for the firewall capability. The install wizard wouldn't run properly on my machine (WIN ME), so I just followed the setup directions. They are very simple. I left my Mcafee Firewall Plus software running. After a week, I found certain port probes are passing through Linksys and then being caught by Mcafee!

The firmware in my router is 1.44.3 dated 12/24/02. There is no upgrade available on the Linksys website. Linksys customer suport sent me a Beta release of firmware 1.44.7. It installed easily and seems to have fixed the problem.

Reviews say this is the best consumer firewall router on the market. It may be, but don't turn off your software firewall. A copy of Norton internet security products comes with the router. Free updates for virus checking and firewall rules are included for 60 days. After that an annual license must be purchased to stay current. The programs are single use only licenses.

A very useful program to read the firewall log is WallWatcher. It is freeware, source included. WallWatcher runs as a SNMP server and collects events from the router as they happen. Linksys does not include a similar program with the box, but they do have a download available. I didn't try it.

If you play Internet games, you may need to adjust the MTU setting or performance may suffer. Download the documentation from the Linksys site. This is an easy change to make.

Amazon does have the best price for this product. Locally I found it for $$$$$. The router ships with a patch cable, so you don't need to buy anything else.

This is a very good product for SOHO with minimal requirements. For a business, I'd keep looking.

Buyer Beware - I have been using for the BEFSX41 for over six months now. Initially everything was great, easy setup, tests from GRC showed everything looks good. Then it started auto-booting. To say the least it is very annoying waiting for it to come back in middle of web browsing. Testing hasn't produced a consistent pattern. Contacted technical support - their solution is to revert to older firmware version. Old firmware version has known exploitable vulnerabilities, but tried anyway (they are tech support right) which reduced frequency of problem, but has not truly corrected the problem. I then went searching for answers - I'm not the only one seeing this and other problems. Check out http://www.dslreports.com/. Do search on BEFSX41 and read up on their forum. I'm sorry, but I haven't started buying competitive brands to do comparisons so I can't recommend a better alternative. Personally though I'm working on building a Linux based firewall. I know that is not a solution for most people, but illustrates my frustration with Linksys and their parent Cisco in this product and it's support.

I'm a "techie" guy. I'm not a professional but I know plenty about computers. I configured the advanced rules on my software firewall myself, I've built computers using other people's instructions and parts lists, and I've programmed in C++ for fun.

However I had never really done any local area type networking. I knew it was something I could do but just hadn't tried, partly because I was kind of intimidated.

It was time for me to get over it though. I wanted a hardware firewall with "Stateful Packet Inspection" for my home system because I just switched to a Vonage phone and I now have to leave my cable modem on 24 / 7 or the 'net phone won't ring. Knowing that this would mean my computer would be more exposed than I was comfortable with, I decided to pick up one of these routers to put the PC behind, and also to permit me to try building a small home network for fun.

So I ordered one of these bad boys. So what did I learn installing this thing? Hardly anything. Why? Becuase the included CD does the whole thing for you! I really couldn't believe it. You pop in the CD, and it examines your net connection. Then it tells you to plug in the router. Presto, you're networked. Repeat for all computers you want hooked up to the net and you're done.

Now - why have so many people had trouble with this thing? Well, I managed to break (and then fix) this thing in about 10 minutes just "fiddling" with the settings. Since I know nothing about LAN type setups, I started experimenting with the router's settings. Cluelessly, I changed the IP address of the router to the internal IP address assigned to my computer by the router. Ah, this screwed everything up instantly. Having done this I could no longer pull up the configuration utility in the router. So I had to unplug all the wires and hold down the "reset" button for 30 seconds to restore the factory settings, then reinstall.

In short: LinkSys may have made networking seem deceptively simple, but that doesn't mean that a n00b can't break the thing. I broke it without hardly trying, and as I said, I'm no n00b.

Once I stopped breaking the thing with my curious-george type antics, there were no problems, no conflicts, not the slightest bit of a stutter. For the more tech inclined: I left Sygate on my system. You know all the "noise" traffic (ie ICMP) that hits your software firewall if you're hooked up directly to the net? Every drop of it is gone, of course, because the hardware firewall is deflecting it and discarding it if it's not relevant.

Tech specs: I'm using a Win 2K machine, p4 1.5 with 640ram, with a Motorola Surfboard cable modem and a 3Com Ethernet card.

So if a friend called me and said: "I need a firewall router, but I don't have anyone to install it for me. Is there a 'For Dummies' book I can get?" I'd tell them to forget the books and just buy this router.

If a techie oriented friend called me and said "You got a favorite firewall?" I'd say this one - with one caveat. The included firewall, while seemingly sturdy, is very limited in it's configurability, especially when compared to Sygate. (Possibly an unfair comparison - I don't know.) For example it only allows the forwarding and blocking of UDP and TCP traffic. I would have liked a firewall that let me work with ICMP too - the firewall seemingly just "deflects" all ICMP.

Regardless: If you'd like a router and improved PC security, I'd highly recommend this thing. You don't need to know a single thing about networking to both improve your computer security ten fold and get up to 4 PC's hooked up online.

I bought this router/switch based on PC Magazine's editor's choice rating in the Nov. 19, 2002 issue. Wanted to move my Linksys "network-in-a-box" home network (3 computers, 2 print servers) to high-speed cable, but wanted the extra security provided by the firewall in this router. First, I upgraded to cable access on one of my computers by disconnecting it from the old network and connecting it to the new cable modem. After I got that setup working, I setup the router as directed. I used Linksys' automated setup. It copied over the Internet connection settings from the cable modem/service into the router setup. Bang, it worked. High speed access through the router. I used that access to download the most recent firmware for the router and installed that without a hitch. I then set up the other two computers as the directions dictated in just a few minutes, making sure to use the rounter to automatically assign IP address (it is a DHCP server, too). It all worked. No problems. Amazing. I use three of the four 10/100 ports on the router/switch for the computers and the fourth to attach to the Linksys 5-port switch I had left over from the old network. Through that I connect to Linksys and HP print servers to get to HP LaserJet and OfficeJet (duplex printer/fax/scanner/copier) printers. I just plugged this stuff in, followed the set up directions and it worked. I have had very good luck with Linksys equipment. My only complaint is that it would have been nice to have an eight-port rather than a 4-port 10/100 switch with all the other features of this device. A very minor complaint.