I agree with others on this topic. My 580’s should be able to do country blocking at the very least and specific ports would be good as well. My mail server gets hit all the time from .ua, .ru, etc… that we have no business with. It’s unfortunate that an expensive router like this can’t have this option.
We never use it for VPN nor bought it intending to. Our core value is HA, DNS, Multi-Wan and Firewall. In today’s world Firewall is even more important then ever. Unfortunate the firewall is one of its weakest links. You can’t even make groups or add multiple non-sequential ports in one rule.
I cannot believe country blocking is not implemented. It would seem simple to add. I’ve looked at the feature set of v7 and it seems more and more geared to VPN. Which is fine as long as you bring the Firewall up to similar quality. We love the 580 and support is excellent but long term this is a growing problem. Maybe we should use drop in mode with something else?