Vigor2928 series is the next evolution of the successful Vigor2927 series, featuring upgraded Dual-WAN router models equipped with 10GbE ports for businesses that want to fully utilize available high-speed connectivity.
Vigor2928 router hardware interface includes multiple 10GbE and 2.5GbE port options. Specifically, it features 1 × configurable GbE WAN/LAN port, 1 × 10Gbps SFP+ WAN port, 1 × configurable 10GbE WAN/LAN port, 1 × 10Gbps SFP+ LAN port, 1 × 2.5GbE LAN port, and 3 × GbE LAN ports. In addition, it includes 2 × USB 2.0 ports and a factory reset button. Of the three 10G combo ports (P2, P3 & P4), only two can be active simultaneously, with the third remaining inactive when the other two are in operation.
The router runs DrayTek’s new DrayOS 5 operating system, which is Zero Trust–ready and integrates Identity and Access Management (IAM), enabling the enforcement of management policies and access control to enterprise resources. It supports up to 50 VPN tunnels using IPsec, GRE over IPsec, IKEv2, OpenVPN, and WireGuard protocols, as well as LAN-to-LAN and Teleworker-to-LAN VPN connections, with hardware-based AES/DES/3DES encryption.
Additionally, through EasyVPN, VPN connections for teleworkers and remote users are established automatically, quickly, and securely by entering a username and password or receiving a one-time password (OTP) via email. If a VPN connection fails for any reason, the EasyVPN Client automatically switches to the next available protocol and retries the connection.
The Vigor2928 series also includes advanced security features such as URL Reputation and IP Reputation threat intelligence services. The Port Knocking function adds an extra layer of protection by keeping ports hidden and opening them only for authorized users, ensuring on-demand access. Furthermore, Vigor2928 models comply with the European NIS 2 directive.
Routers in the Vigor2928 series can be managed via the VigorACS platform and the Router App, which simplifies configuration and equipment management from mobile devices. In addition, they feature a built-in virtual controller that allows free management of up to 19 access points and 10 switches directly through the router interface.
DrayOS 5
Next-Generation Management & Security
DrayOS 5 enhances the role of the Vigor router by combining advanced network management, secure remote access and enhanced Cyber Security mechanisms within a unified and easy-to-use environment.
With features such as IAM (Identity & Access Management), EasyVPN, Port Knocking and advanced routing capabilities, it provides greater control over user access, VPN services and the overall operation of the business network.
⌕ Click to enlarge
✓ IAM – Identity & Access Management
Centralized management of users and access rights, with the ability to apply identity-based access policies.
✓ EasyVPN
Simplified and secure remote access without the complexity of traditional VPN configuration. Supports technologies such as IPsec, WireGuard and OpenVPN.
✓ Port Knocking
Adds an additional layer of protection for VPN services by keeping the relevant ports hidden from unauthorized access and port scans until the required authentication process has been completed.
✓ Advanced Routing & Network Management
Advanced WAN/LAN, VLAN, routing and network policy capabilities provide greater control over the business network infrastructure.
VigorShield
Security Built into the Router
With VigorShield, security is applied directly at the network gateway. The router acts as a central point of protection, applying security services before threats can reach LAN devices — without requiring an additional security appliance.
Threat Protection
AI-assisted protection for the router, network and every connected device
Vigor2928 Threat Protection includes 1-year of subscription-based DrayTek Threat Protection service that adds an advanced layer of Cyber Security by combining AI-assisted threat detection, behavior-based analysis, URL/IP Reputation and cloud-based threat intelligence.
It operates agentlessly, enabling protection for PCs and servers, as well as devices such as IP cameras, POS systems, printers and IoT devices, without requiring endpoint security software to be installed.
⌕ Click to enlarge
|
◎
AI-assisted
Threat Detection
Behavior-based analysis for detecting suspicious activity and potential threats.
|
◉
URL/IP
Reputation
Detection and blocking of malicious domains, URLs and IP addresses using continuously updated threat intelligence.
|
◇
IoT & Unmanaged
Device Protection
Network-level protection for devices that do not have antivirus or endpoint security.
|
▽
Safe Browsing &
Content Filtering
Protection against malicious and phishing websites with category-based access control.
|
☁
Cloud Monitoring
& Reporting
Centralized visibility of security events, threats and connected network devices.
|
Threat Protection = Edge Gateway Protection + AI-assisted Detection + Cloud Intelligence

⌕ Click to enlarge

⌕ Click to enlarge
The Threat Protection service is activated through MyVigor / VigorShield using the corresponding License Key and does not require an additional security appliance or the installation of endpoint agents.
Security intelligence data is automatically updated through the cloud, helping keep network protection up to date against evolving online threats.
Threat Protection Guardian | up to 200 LAN Devices
Threat Protection service requires the activation of the relevant subscription.