Omada VPN Gateway with 10G Ports, ER8411

I run a few of these gateways and the hardware is really solid for the price. There's defiantly enough horsepower even with the IPS enabled which can't really be said for the other gateways in the lineup but that's a discussion for a different time. There really was not any trouble setting this up or swapping out my 7206 besides Omada controller not having an easy way to swap them out without deleting the old one before adding the new one. I really think there should be a button to initiate a replacement for really any device in the network.

My main concern is the software which is good because that can always be improved. It seems some features are still missing from controller mode compared to standalone and I think some more effort needs to take place to ensure that regardless of mode, you are still getting all the features. I believe that to quantify this gateway as a security/firewall capable device, some re-work to the ACL system needs to happen. I should be able to have way more customizable rules that allow me to better suit my needs. I should not need to rely on a network switch for some of the different types of ACLs as some of my networks do not utilize a Omada switch. For instance, why can I not have a rule that prevents a network/vlan from talking to one specific device? I would really like to see a more customizable option which can be chosen in the list for advanced users who understand exactly how these lists are supposed to function.
Again however, software and firmware can always be improved. With the rate I've seen these products advance, I hope they continue to keep adding both new features and improving the ones they have now.

One more thing, please please please, let us change the ports for the VPN servers, many of us are not allowed to use these default ports to protect against scanners and bots. Plus it would be nice to have multiple VPN server instances for better control of users.