There is room for improvement, particularly when dealing with the substantial volume of traffic that routers in highly complex networking companies typically handle. The firewall has the potential for enhancements, and it's essential to explore and implement those improvements. It is sensitive to electrical fluctuations. Even slight changes in the electrical current can disrupt the functioning of the switch or the overall network infrastructure. Addressing this sensitivity might involve hardware modifications to make the devices less susceptible to disruptions caused by variations in electrical conditions. I would appreciate enhancements to impose more restrictions on VPN connections. Currently, VPN connections have no restrictions whatsoever. The user interface needs improvement to be more user-friendly and intuitive.

The updates as well as the patches could be improved.

I believe it would be beneficial to automate the process of router patching to avoid the need for manual checks. With automated patching, as long as the router is connected to the internet, it can automatically perform necessary updates. Failing to patch the router can leave me vulnerable to potential security threats.

Currently, my security is vulnerable due to this potential risk.

I would like to see automated updates for the patches.

The solution does suffer from freezing and corruption issues. 

I cannot recall coming across any missing features. It offers us what we need. 

A central management platform would be great.

There is an area of improvement. The firewall features are self-contained, but features like email scanning and voice control should be improved. This is the best routing product.

It has the firewall feature, but we have to configure it manually, and it is more of a graphic feature, not an advanced one like Layer 7. 

MikroTik Routers and Switches are very fast, and it is easy to operate. If it is combined with the firewall features, which we use from the Sophos firewall, then it will be great because we won't have to use more devices in the same place.

And also, for the second layer, we use Sophos for the firewall control. If that is built into the MikroTik router, then that would be very fair. Then we don't have to log in to another device. Only one device can be used for support purposes.

The solution needs to be more robust. In case of power fluctuations, MikroTik routers are more vulnerable to malfunctioning. Also, there is an IPDR requirement to which MikroTik does not provide any information when it is used as a NAS, and it has to pass the parameter to the radius, so for a delegated IPv6 Prefix, MikroTik doesn't give any information to the radius. So there, they need to work on something, and they also need to work on IPDR logs using NetFlow.

In the future, I would like to see some more entry-level products with at least two SFP ports. What we normally face is we put the fiber on the ring, but there are no entry-level MikroTik products with two SFP ports inside. Normally, it has four or five copper ports and one SFP only. We need two SFPs to have the proper fiber ring sort of redundancy, which is the need of the hour for MSMEs.

The scalability has room for improvement.

MikroTik's firewall is acceptable, but it is not as advanced as some of the other vendors. I would like to have some additional filtering options added in the future.

It would be nice if the interface was easier to use. It's probably one of the most complicated user interfaces to use, but then again, MikroTik routers are also the most flexible routers to use. So I guess it's a price you pay for using a product that's capable of doing pretty much anything.

The solution should improve the features of Wi-Fi 6 a little bit.

MikroTik Routers and Switches needs to improve stability. 

MikroTik Routers and Switches need a firewall policy to secure the network. My company is looking for a new firewall device to secure the network.

I also want Mikrotic to add load balancing to the firewall policy, as it's currently hard to do in Mikrotik devices.

MikroTik Routers and Switches lack a user-friendly interface for applications or specific settings. For example, compared to a router from VGG Network, MikroTik's DNS and UI apps might require more technical knowledge to configure easily. While MikroTik offers certified support and clear website guides, some features, like Webex configuration, lack an intuitive interface for automatic setup.

Additionally, MikroTik often requires manual tasks like uploading hotspot tickets and setting up certificates. This can be burdensome, unlike easier solutions like UniFi, especially for monthly updates.

If the reporting functionality of the solution is considered, I think it is not good.

I think MikroTik should include features like antivirus into their prevention and detection system to prevent any kind of attacks.

I want them to improve their reporting functionality and include antivirus in the solution.

I have not really faced any difficulties. 

We'd like for them to improve the UI and improve on speed. The interface capacity must be bigger.

The routers that this vendor makes are quite small and I think that they should make their products such that they conform to what the industry is used to. Not that it matters from a technical perspective, but often, customers see the size of the router and they think that it is used for a small environment because of its size. They look at the router and because it doesn't look like the Huawei or Cisco models, they think that it is underpowered because of the size. If they changed the external look and feel of the products to match what the enterprise environment is used to, then it would be good. Again, in no way does it affect the performance. Rather, it's just the perception.

They should improve technical support and make direct access available to the customers.

I don't like the product's performance. Sometimes, it disconnects my network. Sometimes, when browsing or downloading something, the download rate comes down to zero. I have to use a VPN to check my right to use the Internet. The telecommunication company using MikroTik to control this does not give me satisfaction. I would like to see the product improve its buffering time.

Improvements could be made in terms of SD-WAN capabilities and zero-touch provisioning.

I cannot speak of any missing features. 

The initial setup is a bit complex. 

It could be more scalable. Product awareness could also be better. There's a lack of awareness when it comes to MikroTik. People only know about Cisco and others, and they won't rely on MikroTik. This is primarily because of hardware limitations. While this product is good economically, it's unsuitable for high-end projects. In the next release, I want this product to be more compatible.

They lack the extended warranty for the equipment. They only provide a warranty for one year as compared to the other vendors who offer a warranty for three years, five years, and lifetime, etc.

There are some bugs in the newer modules. For example, when it comes to Routing, which is already a very old module, it is very stable. However, Hotspot is a fairly new module. They still need to work on things regarding that module. It's not as reliable. 

The interface for management could be improved. 

The initial setup could be easier. It would be great if the tool would be open source.

The product needs to include more power. 

They can improve the way the user interface is laid out. Their user interface is slightly geeky. There is more than one way to do the same thing in the user interface, and they need to work on that. 

They should also provide official training and webinars to help us understand all of its capabilities and to be able to set it up easily.

It would be good if it comes with included tech support.

The product's setup process could be easier. Additionally, its interface needs to be modern, similar to Grandstream.

The user interface is not very good. The functionality is off. Sometimes it can be difficult. There are old manuals and documentation that need to be updated. 

I would like to see some content filtering with MikroTik Routers and Switches.

Troubleshooting can be complex.

Sometimes, we see some problems specifically around the upgrading of the software and framework. It's not the upgrading that's hard. It's the fact that there isn't enough space. Typically, if we find we have a lack of space we must upgrade and the issue goes away.

Scaling can be an issue.

The Soft-GRE support needs to be improved.

To use this product, people must have some network knowledge and a little bit of training on the MikroTik devices.

The payment conditions from the manufacture need to be improved. Nobody wants to pay immediately, especially for large companies like ISPs and big corporations.

The solution is a complicated device. 

If the client wants bigger capacity, there may be some issues. That is, there may be issues with scalability.

There's a general complaint of slowness, but it could be a bandwidth issue.

I would like to see the addition of Wi-Fi features in the next release.

If they can improve the OpenVPN, to make that a bit more straightforward, that would be ideal. Obviously, it's got a built-in OpenVPN server that you can do. I've played around with it a bit, however, normally, if people want OpenVPN, they just use a virtual machine with Ubuntu, as it's just easier to set up. 

When you block a website, so what I normally have to do is create a script with the domain name in it. And then it auto-updates the IP list. If they can maybe implement something where you can block websites using this domain name rather than the IP address, that'll be great. You can also obviously block it via the certificate, however, the problem is, a lot of the websites use a generic certificate from, Certbot or something like that. And then you block that, and it blocks a whole other list of websites. If they can do something like that, it will be great as well. I know it's not so easy as everything's encrypted, however, that'll be a great thing to improve.

If they can implement something for the hotspot, where you can actually filter out, that would be ideal. With the hotspot, you've got your counters. If they can implement something that if you use local data, it doesn't go towards your hotspot. I've got a client and they've set up the hotspot. They use it so they don't use the internet. If they copy something from the server, it goes towards their quota. Now, if you copy a big file from the server, and it uses your quota, then you have to obviously first call them and say, "Listen here, I've copied this thing. Please increase my quota, or reset it," or whatever. That's the only struggle that I found. Other than that, I can't really think of anything else.

The only issue is with the software. The Winbox has many log-ins to it.

The only thing I would improve would be with the software Winbox. It would be helpful to have more than one login capability. 

With the ability that we now have, when you want to change to another user account, using the Winbox and go through the user name and password for one device, the current user name and password for Winbox will be lost. Even if I try to copy the Winbox to a different location, it uses the same user name and password, and if I change it on the copy, it will also be changed on the other destination.

I would like to have the option of having multiple logins.

You should always do something to be better.

In the Israeli market, we are in need of Hebrew support. We would like a Hebrew GUI or something that can translate it. We need this because when we remotely support end-users, they do not always speak English. Hebrew would be lovely.

There are a lot of issues regarding the power supply.

The interface for this solution is in need of a dashboard. Thinking about somebody who is in control of hundred of small routers, they need a way to manage all of them.

Technical support could be better. They don't have good support like Cisco. It can also be more stable and scalable.

The MikroTik weblog, web user log, was supposed to be remotely accessible. However, it was not as good as I had wanted it to be. I found its functionality disappointing. There's no proper interface. They show only IPs but not the DNS address or complete address. It only shows the IP addresses. Also, they only show real-time data and not the history of the user's log address. We would like to see a history on a daily, weekly, or monthly basis.

The solution needs to improve its security firewalls and mirror that of, for example, Sophos, or FortiGate.

The solution needs to focus on UTM in its devices.

My first impressions of the MikroTik router I have are that it is old and slow. I would like to see a higher throughput in the switch. The throughput speeds are killing us. Our VPN speeds are not up to par. MikroTik may make some routers and switches that do have higher throughput, but the models that we are using are not in that group of products.  

The security itself is lacking. For instance, most later model routers have web filtering so we can filter out websites and types. I would like to just be able to go in and say that I want to block out porn sites, or I want to block out hate speech — whatever the case may be. I would like to do that and get it done in an expeditious manner and have it work as expected. There is nothing like that type of simplicity and functionality in this router.  

So, the two main things that I look for in a router — speed and filtering by classification — are two things that I did not see. It is working, so I kind of leave it alone for right now because I do not really have the time to figure out what is making it work at all.  

I do know that the interface is very archaic-looking. It does not seem like the ease-of-use was a major concern in the development of the product. It is not very good in the area of user-friendly.  

Another problem that I do not like about the MikroTik routers is that I have to use a specific program called Winbox to access it and configure it. I should not be limited to accessing the configuration using just one tool.  

The solution doesn't fit every need. There are lots of things you cannot do. There is no management and there is no controller in wireless. It's not a real whole network. You have to work them into other solutions. Mikrotik is mostly a standalone solution and you have to manage how it relates to other solutions, unlike Cisco, which is something that you can easily put into an ecosystem.

They could improve their product if they set, for instance, a controller for wireless LAN.
That would allow them to really have something more than an access point.

The solution needs to offer better documentation. That is what is lacking right now.

The user interface could be a bit better. It could be a bit more user-friendly with a bit of a re-design.

As far as improvements, there are basically only two things I would suggest. First, I think they should provide extensive training for the new releases of products, especially in the LTE space. Second, they could spend more time ensuring that their OS releases are more stable, rather than waiting for things to fall apart on the customer's premises before they make the necessary changes.

The biggest thing that needs improvement is the support. There are lots of bugs but you can find workarounds for these. However, without support for professional use, you don't know when it fails and why it fails. You have to troubleshoot on your own.

Better security is always better. If they can continue to improve in this area, that would be ideal.

The queuing functionality needs improvement. The initial setup could be simplified.

I would like to see a cluster feature added, where multiple devices can be configured and managed as one. One is in a standby state while the other is active, and if one fails then the other takes over.

The stability can be improved.

Wireless throughput has not kept up with the competition.

The manageability of the web-based UI needs to be improved. I still prefer to use the Winbox application.

It would be great if they included some next-generation features in the future.

We've had difficulties allocating different hubs with different IPs. At times, some users use it on one range and can access computers on another range. We thought isolation would help, but it hasn't. When you assign IP addresses to ports, people can still access those ports, and that's really frustrating.

The solution doesn't offer very good documentation. When we had questions around isolation and allocating different hubs and IPs, we couldn't find any verifiable answers.

The solution's website isn't that good. When I go to it, I can't find what I'm looking for. However, if I go to a third party's website, I can easily find the information.

The overall performance could be improved. The CPU load is too high. This causes the Internet to lag. 

MikroTik should be open source.

Configuring load balancing requires a very ground-level configuration that is not easy for normal users.

The user interface allows you to do a lot of things, but it is not user-friendly. 

This product could offer better integration with VPNs. We have a SOC for network monitoring and all of our clients are connected to it. Through the SOC, we integrate our clients with our VPN.

The switching capabilities could be improved. These devices have a lot of potential but need to improve first.

MikroTik does not have a wireless solution. If they created a high-performance wireless solution we would deploy it in our infrastructure.

They need to create a license for IBS. I have a lot of clients that have spam on their networks. We need to purchase a firewall inside of this solution in order to make their networks secure from spam and to protect the blocking of wanted public IDs that are put in it. Additionally, there is an antivirus needed.

In the next release, there could be an improved user interface.

Next year, we are planning to buy a hardware firewall from Sophos. The firewall and the VPN features in MikroTik are a little bit hard to set and are not user-friendly in terms of configuring those features. 

The protection of the web servers, VPN, and spam mail management, will be better in the Sophos model which we want to buy. We'll still use MikroTik for routing between our objects, however, for the main firewall features and VPN features, we want to use something more specific for this job.

There's a new VPN protocol called WireGuard. It's very good to implement MikroTik in the router as firmware. It is more configurable, with WireGuard. It's very practical.

The interface could be more user friendly and more intuitive in terms of what information or features are found where. I also wish there was a dashboard, kind of like landing page with all the basic system analytics.

This solution is good, but my network is growing and it is no longer sufficient for us. We are considering a Hybrid model or we will replace MikroTik with another good OEM, such as Cisco, or Juniper.

There are limitations to how many users you have simultaneously. It's a max of 300 users.

The batch management could be improved. 

It would be very good if these products are accessible via different kinds of shells and GUI. It will make these solutions very usable.