Need some support to fix my network

[Felice]

Hi there,
as it often happen, slowly slowly I ended up with 48 clients on my network and I realised it is time to review and manage properly the infrastructure.
I am looking for advice/support on what to do to make it more secure.

• I have a 250/125 WAN connection
• My LAN is a Gigabit
• I use a VPN to connect when I am outside
• I need a couple of VLAN to isolate specific devices from personal/business areas
• I need to open some port to allow access to specific device from remote (SHH, VNC, etc.)
• I have been attached (unsuccessfully) a couple of times

At present I am using a GT AX11000 router but it doesn't have VLAN capabilities and no alarms/warning messages in case of attack. I also have a couple of unmanaged Gigabit switches to distribute the traffic.
I am not an expert in networking but I think I should focus on a router more suitable for my needs or a professional to come out and sort it out.
Advices are welcomed.

 

[SauRoNZA]

I’d probably put in a UDM Pro and call it a day, reasonable cost with lots of function and very easy remote management for a relatively small network and offers everything you need.

Future expansion with wireless and cameras and door access likely a natural progression for a small business too.