Vous vous souvenez de BadUSB ? Mais siiii, c'est ce truc dévoilé en 2014 à la Black Hat qui avait foutu la trouille à tout le monde. Ça montrait qu'un simple périphérique USB pouvait se faire passer pour un clavier et balancer des commandes à votre place. Hé bien depuis, les attaques se sont bien raffinées et c'est pourquoi un dev vient de proposer un module kernel Linux capable de détecter ces saloperies.
Enfin !
Ce module s'appelle
hid-omg-detect
et c'est signé Zubeyr Almaho. Le patch (déjà en v2) a été soumis le 4 avril dernier sur la LKML. Alors je pense que vous allez vous dire que c'est encore un truc qui va bloquer par défaut vos périphériques USB sauf que non, ça ne bloque rien. En fait, il surveille passivement les périphériques HID (claviers, souris...) et leur attribue un score de suspicion basé sur trois critères.
D'abord, l'entropie des frappes clavier. Un humain tape de manière irrégulière, avec des pauses, des hésitations, des fautes (perso je fais au moins 3 fautes de frappe par phrase ^^). Un câble trafiqué, lui, balance ses commandes avec une régularité de métronome, genre 500 caractères en 2 secondes sans une seule erreur. Ensuite, y'a la latence entre le branchement et la première frappe. Si votre "clavier" commence à taper immédiatement après avoir été branché... y'a comme un souci. Et enfin, le fingerprinting des descripteurs USB pour repérer les vendor/product IDs suspects ou les anomalies dans les descripteurs HID.
Pas con hein ? Et si le score dépasse un certain seuil (configurable), hop, le module balance un warning dans dmesg et vous oriente vers
USBGuard
pour bloquer le périphérique. Parce que hid-omg-detect ne touche à rien lui-même. Il sonne juste l'alarme, et c'est à vous d'agir !
Mais alors pourquoi lancer ça maintenant ?
Hé bien parce que les outils d'attaque USB sont devenus légion ! Les
câbles O.MG
(créés par le chercheur MG et distribués via Hak5), par exemple, ça ressemble à un câble USB lambda que vous emprunteriez sans réfléchir pour charger votre téléphone. Sauf que dedans y'a un implant WiFi capable d'injecter des frappes, de les logger, de spoofer les identifiants USB, le tout contrôlable à distance. Quand je pense qu'il y a quelques mois,
des chercheurs montraient qu'une simple webcam Lenovo pouvait être transformée en dispositif BadUSB
... Sa fé grav réchéflir 🤓 comme dirait les citoyens souverains ^^.
Maintenant, en attendant que le patch soit accepté, vous n'êtes pas totalement démunis non plus. Des outils comme
USBRip
(un script Python, pip3 install usbrip) permettent déjà de tracer les connexions et déconnexions USB en parsant /var/log/syslog. Y'a pas ce scoring d'anomalies, mais au moins vous avez un historique pour savoir qui a branché quoi et quand. Et si vous êtes vraiment parano (et franchement, vous avez raison de l'être), USBGuard peut carrément whitelister vos périphériques de confiance et bloquer tout le reste. Mais le problème d'une telle solution c'est que ça demande de maintenir une liste blanche à jour, ce qui n'est pas toujours pratique quand on branche 15 trucs par jour.
On verra si les mainteneurs du kernel l'accepte... Après ça ne protégera pas contre tous les scénarios non plus. Un périphérique qui attend 30 secondes avant de commencer son injection pourrait passer sous le radar. Et si un attaquant injecte du jitter aléatoire dans ses frappes pour simuler un humain, là ce sera plus compliqué. Mais combiné avec USBGuard, ça donnera enfin une vraie ligne de défense native contre les
attaques par périphériques USB piégés
. Et c'est quand même mieux que de boucher ses ports au plâtre et ciment (Mais pleure pas au dessus du mortier...) !
UniFi and the Airwire – Did Ubiquiti just SOLVE Everyone’s WiFi MLO Issue?
Ubiquiti has introduced the UniFi AirWire, a WiFi 7 client adapter designed to address one of the more limited areas of current WiFi 7 deployment: the client side. While WiFi 7 access points and routers have been marketed heavily around Multilink Operation, many currently available client devices still rely on single-radio implementations that switch between bands rather than maintaining simultaneous links. The AirWire is positioned as a dedicated external client that aims to deliver true STR MLO operation across 5 GHz and 6 GHz, with Ubiquiti claiming improved throughput, lower latency, and better resilience than conventional integrated client hardware.
At a hardware level, the AirWire is a USB-C connected WiFi 7 adapter with a 4-stream design, support for 5 GHz and 6 GHz 2 x 2 MU-MIMO operation, and a quoted uplink capability of up to 5.8 Gbps on 6 GHz and 4.3 Gbps on 5 GHz. It also adds a high-gain antenna design and a dedicated scanning radio for real-time spectrum analysis. At $199, this places it well above the cost of generic USB wireless adapters, but it is also targeting a more specific role: enabling multi-gigabit wireless client connectivity in environments that already have the access point infrastructure to support it.
You can buy the Airwire via the link below – doing so will result in a small commission coming to me and Eddie at NASCompares, and allows us to keep doing what we do!
UniFi Airwire – Design
The UniFi AirWire has a noticeably different physical design to the compact USB WiFi adapters that are typically associated with desktop or laptop client upgrades. At 117 x 117 x 42.5 mm and 537 g, it is much closer in appearance to a standalone wireless bridge or directional client than a conventional dongle. That larger enclosure is directly tied to its intended function, as Ubiquiti is clearly building around higher power operation, larger antenna structures, and the thermal requirements that come with sustained WiFi 7 activity across multiple radios.
The housing is made of polycarbonate and includes a fold-out top section that appears to be part of the antenna assembly and directional positioning of the unit. This gives the AirWire a more deliberate deployment profile, where placement and orientation are likely to matter more than they would with an internal laptop radio or a low-profile USB adapter. On the front, there is also a 0.96-inch status display, which provides at-a-glance information during setup and operation without needing to rely entirely on software feedback from the host system.
From a practical standpoint, the design reflects that this is not intended to be an invisible add-on for casual wireless use. It is an external client device built to sit on a desk or near a workstation, with a form factor that prioritizes radio performance and signal handling over portability. That makes it less discreet than mainstream client adapters, but it also aligns with the product’s stated purpose as a high-performance WiFi 7 endpoint for users trying to push beyond the limitations of standard integrated wireless hardware.
UniFi Airwire – Internal Hardware
Internally, the UniFi AirWire is built around a dual-band WiFi 7 architecture that focuses entirely on 5 GHz and 6 GHz operation, without any 2.4 GHz support. Ubiquiti rates the device as a 4-stream client, split across 2 x 2 MU-MIMO on 5 GHz and 2 x 2 MU-MIMO on 6 GHz.
This layout is central to its stated role as an STR MLO client, allowing both bands to be active simultaneously rather than relying on the more common single-radio behaviour seen in many current WiFi 7 client devices.
Ubiquiti also specifies a high-gain antenna design, with 11 dBi quoted on both 5 GHz and 6 GHz, which is significantly more aggressive than the antenna arrangements found in most integrated laptop or mobile WiFi hardware. Alongside this, the AirWire includes a dedicated scanning radio for real-time spectral analysis. That separate scanning capability is notable because it suggests the unit is not just focused on link speed, but also on monitoring local RF conditions and interference in parallel with normal client operation.
The trade-off for that hardware approach is power and thermals. Ubiquiti lists maximum power consumption at 18 W, with USB PD 5/9/12V support and separate normal and performance power profiles. In practical terms, that places the AirWire closer to a compact external network appliance than a typical USB wireless adapter. It also helps explain the larger chassis, the need for external power flexibility, and the expectation that sustained performance operation will demand more cooling headroom than a smaller bus-powered client device could realistically provide.
UniFi Airwire – Connectivity
The UniFi AirWire connects to the host system over USB-C, but from a networking perspective it is presented as a 5 GbE interface over USB 3.2 Gen 2. That distinction matters, because although the wireless side of the device is rated far higher in combined theoretical bandwidth, the host connection places an upper practical ceiling on what can be delivered to the attached PC, laptop, or workstation. In effect, the AirWire is designed to behave more like an external multi-gig network adapter than a conventional USB WiFi dongle.
On the wireless side, the AirWire operates on 5 GHz and 6 GHz only, with support for WiFi 7, WiFi 6, WiFi 5, and 802.11n data rates across a wide range of channel widths. Ubiquiti lists support for EHT 20/40/80/160/240/320 MHz, alongside HE, VHT, and HT modes on earlier standards. The maximum quoted link rates are 5.8 Gbps on 6 GHz using 320 MHz bandwidth and 4.3 Gbps on 5 GHz using 240 MHz bandwidth, though actual results will depend heavily on access point capability, spectrum availability, regional channel restrictions, and signal conditions.
Power delivery is also part of the connection design. Ubiquiti specifies USB PD 5/9/12V support, with 15 W in normal mode and 20 W in performance mode, while maximum device power consumption is listed at 18 W. This means that, depending on how the host system is connected and powered, full performance operation may require more than a single low-power USB port can reliably provide. That makes cable quality, port specification, and available USB power budget more relevant here than they would be for standard client adapters.
The AirWire also includes support for wireless meshing and real-time spectral analysis, which extends its connection role beyond basic client access. In a UniFi environment, setup is intended to be handled through UniFi AutoLink for rapid onboarding, reducing the need for separate client-side software installation. Even so, the broader connection experience will still depend on the surrounding infrastructure, particularly whether the connected UniFi access point supports the required WiFi 7 and 6 GHz features needed for the AirWire to operate in the way it is being marketed.
Specification
Details
Product Name
UniFi AirWire
Model
U-AirWire
Price
$199.00
Dimensions
117 x 117 x 42.5 mm
Dimensions (Imperial)
4.6 x 4.6 x 1.7 in
Weight
537 g
Weight (Imperial)
1.2 lb
WiFi Standard
WiFi 7
Spatial Streams
4
Uplink
WiFi
MIMO 6 GHz
2 x 2 (DL/UL MU-MIMO)
MIMO 5 GHz
2 x 2 (DL/UL MU-MIMO)
Max Data Rate 6 GHz
5.8 Gbps (BW320)
Max Data Rate 5 GHz
4.3 Gbps (BW240)
Antenna Gain 6 GHz
11 dBi
Antenna Gain 5 GHz
11 dBi
Max TX Power 6 GHz
20 dBm
Max TX Power 5 GHz
25 dBm
Supported Standards
802.11be, 802.11ax, 802.11ac, 802.11n
802.11be Data Rates
7.3 Mbps to 5.8 Gbps
802.11ax Data Rates
7.3 Mbps to 2.4 Gbps
802.11ac Data Rates
6.5 Mbps to 1.7 Gbps
802.11n Data Rates
6.5 Mbps to 300 Mbps
Wireless Meshing
Yes
Real-Time Spectral Analysis
Yes
Max Power Consumption
18 W
Power Supply
USB PD 5/9/12V, 15 W normal mode, 20 W performance mode
Networking Interface
1 x 5 GbE port (USB 3.2 Gen 2)
Management
USB-C
Enclosure Material
Polycarbonate
Display
0.96 in status display
Channel Bandwidth
HT 20/40, VHT 20/40/80/160, HE 20/40/80/160, EHT 20/40/80/160/240/320 MHz
NDAA Compliant
Yes
Certifications
CE, FCC, IC
Operating Temperature
-10 to 40 °C
Operating Humidity
5 to 95% non-condensing
UniFi Airwire – Verdict?
The UniFi AirWire is a more specialised product than its USB-C connection initially suggests. Rather than serving as a low-cost way to add basic WiFi 7 support to a system, it is designed to address a specific gap in the current client ecosystem: the lack of widely available true multi-radio MLO hardware on the device side. Its value therefore depends less on headline wireless specifications alone and more on whether the surrounding network environment is already capable of taking advantage of simultaneous 5 GHz and 6 GHz operation, wider channel support, and multi-gigabit client throughput.
On that basis, the AirWire appears to be an interesting but clearly targeted piece of hardware. The larger chassis, higher power requirements, directional design, and likely dependency on a strong WiFi 7 6 GHz deployment mean it is not a universal client upgrade for every user. However, for users already invested in UniFi WiFi 7 infrastructure and looking for a higher performance external client than the current mainstream market provides, it introduces a form factor and feature set that are still relatively uncommon. Whether that translates into a meaningful real-world advantage will depend on testing, particularly around sustained throughput, latency behaviour, thermal limits, and the practical impact of STR MLO outside of ideal conditions.
You can buy the Airwire via the link below – doing so will result in a small commission coming to me and Eddie at NASCompares, and allows us to keep doing what we do!
This description contains links to Amazon. These links will take you to some of the products mentioned in today's content. As an Amazon Associate, I earn from qualifying purchases. Visit the NASCompares Deal Finder to find the best place to buy this device in your region, based on Service, Support and Reputation - Just Search for your NAS Drive in the Box Below
Need Advice on Data Storage from an Expert?
Finally, for free advice about your setup, just leave a message in the comments below here at NASCompares.com and we will get back to you.Need Help?
Where possible (and where appropriate) please provide as much information about your requirements, as then I can arrange the best answer and solution to your needs. Do not worry about your e-mail address being required, it will NOT be used in a mailing list and will NOT be used in any way other than to respond to your enquiry.
[contact-form-7]
TRY CHAT Terms and Conditions
If you like this service, please consider supporting us.
We use affiliate links on the blog allowing NAScompares information and advice service to be free of charge to you.Anything you purchase on the day you click on our links will generate a small commission which isused to run the website. Here is a link for Amazon and B&H.You can also get me a Ko-fi or old school Paypal. Thanks!To find out more about how to support this advice service checkHEREIf you need to fix or configure a NAS, check FiverHave you thought about helping others with your knowledge? Find Instructions Here
Or support us by using our affiliate links on Amazon UK and Amazon US
Alternatively, why not ask me on the ASK NASCompares forum, by clicking the button below. This is a community hub that serves as a place that I can answer your question, chew the fat, share new release information and even get corrections posted. I will always get around to answering ALL queries, but as a one-man operation, I cannot promise speed! So by sharing your query in the ASK NASCompares section below, you can get a better range of solutions and suggestions, alongside my own.
Gl.iNet Comet 5G Review – The ULTIMATE ALL-ACCESS KVM?
The GL.iNet Comet 5G is a remote KVM built to provide keyboard, video, and mouse control of a connected computer from power on through BIOS, rather than relying on a working operating system like traditional remote desktop tools. It accepts HDMI input from the host and offers HDMI passthrough so a local display can remain connected, with support up to 4K at 30 fps or 1080p at 60 fps, plus 2 way audio. Connectivity is where the Comet 5G differentiates itself most clearly in this product line: it can be managed over Gigabit Ethernet and Wi-Fi 6, but it also includes a nano SIM slot for 5G RedCap with 4G LTE fallback, intended for out of band access when the site network is down, segmented, or simply not trusted. It also supports a local AP mode that broadcasts its own wireless network for nearby management sessions without joining the surrounding LAN. In day to day use, the device is mainly aimed at remote maintenance tasks such as OS installs, recovery and imaging, BIOS changes, and support work on machines that lack built in management like iDRAC or iLO. Compared with the Comet Pro, it keeps the same general platform and interface approach, but adds the cellular path, the AP mode, a larger 3.69 in touchscreen, and 64 GB of eMMC storage for ISO and file staging. The key questions for a review are less about raw compute, since the core platform is similar to the Comet Pro, and more about whether the extra connectivity options, storage capacity, and on device usability justify its higher price for the way it will actually be deployed.
Gli.Net Comet 5G KVM Review – Quick Conclusion
The GL.iNet Comet 5G is essentially the Comet Pro style KVM experience with a stronger connectivity toolkit rather than a major jump in raw performance: you still get reliable BIOS level access, HDMI passthrough so a local screen can stay connected, and flexible access from a browser across different operating systems, but the main reason to choose it is the extra ways it can be reached when the local network is unavailable or not trusted. The nano SIM support (5G RedCap with 4G LTE fallback) gives an out of band route that can keep access available even when Ethernet or Wi-Fi are misconfigured, and the AP mode adds a direct nearby connection for quick point to point management without joining the site LAN, which can be genuinely useful in field work, segmented networks, or recovery situations. It also doubles the internal storage to 64 GB, which makes it easier to keep several ISO images and tools ready to mount remotely, and the larger 3.69 in touchscreen makes local setup and status checks less cramped. The trade offs are mostly about expectations: storage speeds remain modest, so uploading and copying large files is not fast; USB based storage expansion exists but is limited by USB 2.0, can require reboots, and drive compatibility is not always consistent; and while the device supports multiple paths and is marketed around failover, the current interface does not expose deep, router style controls for tuning how those paths behave. If you mostly run KVM over a stable wired or Wi-Fi network, the Comet Pro will usually cover the same core tasks for less money, but if you want a small KVM that gives you more options to regain access when networks are awkward or failing, the Comet 5G is the more complete tool as long as you accept the storage and configuration limitations.
SOFTWARE - 9/10
HARDWARE - 9/10
PERFORMANCE - 8/10
PRICE - 8/10
VALUE - 8/10
8.4
PROS
Cellular out of band access via nano SIM (5G RedCap with 4G LTE fallback) adds a separate path when the site LAN is down or misconfigured Nearby Control via AP mode enables direct point to point access without joining the surrounding network, useful for local BIOS work and isolated environments HDMI passthrough plus capture keeps a local monitor active while still providing remote KVM access (up to 4K 30 fps, 1080p 60 fps) Browser based management and access works across Windows, macOS, and Linux without requiring a dedicated client 64 GB eMMC provides more room for ISO images and utility files than the 32 GB model, reducing how often media needs to be rotated 3.69 in touchscreen makes on device setup and status checks less cramped than smaller panel implementations Multiple remote access approaches are available (LAN, relay, and VPN style options like Tailscale and ZeroTier), allowing different trust and routing models Low complexity deployment with passive cooling and a small footprint makes it viable as a 24/7 appliance when powered independently
CONS
Storage performance is modest, and remains closer to mid range eMMC speeds than fast removable storage External storage expansion has caveats, including USB 2.0 limits, possible reboots, and inconsistent compatibility depending on the USB drive and power draw Failover and cellular controls are not deeply tunable in the current UI, so users expecting router grade policy controls may find configuration limited
Buy the Gl.iNet KVM 5G from Amazon Below:
Buy the Gl.iNet Comet KVM ($219) from the Official Store Below:
Gli.Net Comet 5G KVM Review – Design & Storage
The Comet 5G follows the same general design language as the Comet Pro, but it is physically larger and more deployment focused. It measures 128 × 93 × 33 mm and weighs 285 g, which makes it more of a bag sized tool than something that disappears behind a monitor without planning. The casing relies on passive ventilation rather than active cooling, and in normal use it is intended to be left running continuously, provided it is powered independently rather than from the host machine.
A practical difference in the Comet 5G design is the addition of external antennas to support its wireless roles.
This includes cellular and Wi-Fi antennas, and the unit is clearly built around the expectation that it may be used away from a stable wired network, whether that is via the SIM slot or via a direct nearby wireless connection. In a fixed desk setup the antennas can feel like overkill, but for temporary installs and field support they suit the intended use case.
On the front, the Comet 5G uses a 3.69 in touchscreen, which is notably larger than the Comet Pro’s 2.22 in panel. In practice, that extra size does not materially change the experience of mirroring the host display on the device itself, since you remain limited by the source resolution and scaling.
Where it does help is in the local management interface, where menus and status screens have more room and are less cramped, particularly during setup or when checking network state and service toggles directly on the unit.
Storage is expanded to 64 GB eMMC, and the main advantage is capacity rather than speed. In use, the internal storage is primarily for keeping ISO images, recovery media, and utility files that can be mounted remotely as virtual media or exposed to the host as a remote drive.
File transfers to and from the internal storage typically sit in the same general performance range as the Comet Pro, which means it is functional for staging installers and smaller toolsets, but slow for moving large data sets.
A newer software feature available across the platform also allows external storage via a USB drive, but it comes with constraints that affect how usable it is in practice. Adding a drive can require a reboot, compatibility varies between drives, and the management interface tends to treat partitions individually rather than offering straightforward full disk handling.
Because the port involved is USB 2.0, external storage is more about adding space for additional ISOs than achieving a meaningful improvement in transfer speeds.
Gli.Net Comet 5G KVM Review – Connectivity
The Comet 5G keeps its I/O layout simple, with the core KVM connections built around full sized HDMI input and HDMI output for passthrough. This avoids adapter reliance and makes it easier to drop into existing setups where monitors and capture paths already use standard HDMI cabling. In a permanent install, passthrough is the more important part of that arrangement, since it allows a local user to keep working on the attached screen while remote access remains available in the background.
For host control, the unit presents USB based keyboard and mouse emulation over its USB-C connection, while power is also supplied via USB-C at 5V/3A with PD compatibility.
In practical terms, powering it from an independent adapter is the safer approach, because drawing power from the host machine can remove KVM access when the host is powered off, rebooting, or in a state where USB power is unstable.
Wired networking is provided by a 1 GbE RJ45 port, which is the most consistent option for image quality and responsiveness when the site network is stable. Alongside this, the Comet 5G supports Wi-Fi 6 on both 2.4 GHz and 5 GHz, and it also includes an AP mode that allows a direct nearby wireless connection without joining the surrounding LAN.
That AP mode is best understood as a local management path rather than a general purpose hotspot, and it is primarily useful when you want a quick point to point session for BIOS work or initial configuration.
The main connectivity addition over the Comet Pro is the nano SIM slot for cellular access, supporting 5G RedCap with 4G LTE fallback. This is positioned as an out of band route that can keep the management channel available when Ethernet and Wi-Fi are unavailable or misconfigured, and it also reduces dependence on VLAN routing rules and other site side constraints.
In the current software experience, the cellular side is exposed through its own configuration section, but it does not offer the same depth of policy and failover tuning found on GL.iNet’s router products.
Gli.Net Comet 5G KVM Review – Internal Hardware
Internally, the Comet 5G is built around a quad core ARM Cortex-A53 SoC paired with 1 GB of DDR3L memory, which is broadly the same class of platform used by the Comet Pro. In review terms, this means the Comet 5G is not trying to win on raw compute, but on connectivity and deployment options, because the core processing headroom is similar. The A53 class CPU is adequate for running the management services, handling multiple control sessions, and keeping the on device UI responsive, but it is not aimed at heavier workloads outside the core KVM functions. The OS is Linux 6.1, and the device behaves like a small embedded appliance rather than a general purpose system you would extend with additional packages and services.
The video path is designed around HDMI ingest and H.264 hardware encoding, with the remote stream adapting to available bandwidth and quality settings in the client interface. Support is listed up to 4K at 30 fps and 1080p at 60 fps, with HDMI passthrough keeping a local monitor active while the unit captures the same signal for remote viewing.
Audio is supported in 2 directions, but the device itself is not treated as a standalone audio endpoint, so the practical experience depends on how the host exposes audio over HDMI or USB and how the client session is configured. Input is handled via USB based HID emulation, which is why copy and paste and keystroke injection can sometimes behave differently between applications depending on how they interpret simulated typing versus clipboard shortcuts.
The storage subsystem uses 64 GB eMMC soldered to the board, and in practice it is tuned for predictable, mid range throughput rather than high performance. Real world transfer rates observed during ISO uploads and mounted storage tests typically sit around the mid 20s to mid 30s MB/s range, which aligns with the Comet Pro experience and reflects the limits of the flash and controller rather than a network bottleneck.
That makes it usable for staging installers, recovery media, and driver packs, but not ideal for repeated large image transfers or heavy file shuttling. Expansion is possible via a USB drive using the USB 2.0 Type-A port, but that is primarily a capacity extension, because USB 2.0 limits both bandwidth and available bus power, and drive compatibility can vary depending on the enclosure controller and power draw.
The Comet 5G uses the same GLKVM software family as the earlier Comet devices, with access provided through a browser interface, a desktop client, and a mobile app. In testing, the browser UI is the most straightforward for configuration and for working across different operating systems, and it also exposes most of the device settings without needing to install anything locally.
Firmware maturity differed slightly between units during side by side use, with the Comet Pro running a stable 1.8 release build while the Comet 5G was still presented as beta, though the overall layout and feature set were close enough that the differences felt tied to hardware options rather than a separate software branch.
#
Account and session security options are built into the platform, including 2 factor authentication and passkey support at the account level, plus the ability to apply an additional password gate per device before entering a remote session. Remote access can be handled locally over LAN, through GL.iNet’s relay service, or through peer to peer options. Tailscale support is part of the platform, and newer software revisions have also introduced ZeroTier support, which addresses earlier feedback around relying on a single remote access option.
For users who prefer not to use relay services, these VPN style paths can provide remote reachability without opening ports or depending on the vendor’s cloud beyond account management.
Where the Comet 5G differs in day to day software behavior is how cellular and nearby access are exposed. Cellular configuration appears as a dedicated section for SIM based connectivity, while the Wi-Fi settings include an AP mode that allows direct nearby connections without joining the site WLAN. In practice, these features improve the chances of reaching the device when the surrounding network is misconfigured or inaccessible, but the management interface does not currently provide the same depth of routing, policy control, or visible failover logic that GL.iNet includes in its router products. Multi path behavior is present at a feature level, but there is limited opportunity to tune it beyond selecting the available connection modes.
Performance during remote control sessions depends mainly on the network path and the host workload rather than differences between the Comet 5G and Comet Pro hardware. Video quality controls and stream settings allow the session to be made more stable on weaker links, and the general desktop experience remains usable for BIOS work, OS installs, and troubleshooting.
A copy and paste stress test with a large block of text showed both devices could transfer long input sequences, but the Comet 5G produced fewer odd spacing issues in the final pasted document during that run. On mobile, both devices provide touch mode and cursor mode plus access to a software keyboard, and external Bluetooth keyboards and mice can be used, but fluidity and compression artifacts were more noticeable when the phone was on cellular data compared with a local Wi-Fi or wired path.
The Comet 5G works as a continuation of the Comet Pro platform rather than a clean break. The remote session experience, general interface layout, and core feature set remain familiar, because the underlying compute and encoding approach is broadly the same, and both devices are aimed at the same type of work: BIOS access, OS installs, recovery tasks, and remote troubleshooting where standard remote desktop tools are not enough. The areas that do change the day to day ownership experience are mostly around how you can reach the device when things go wrong. The SIM based 5G RedCap and 4G LTE fallback adds a separate management path, and the AP mode provides a direct nearby connection that avoids relying on the site LAN. The larger 3.69 in screen also makes the on device menus easier to use, even if it does not transform the usefulness of live video mirroring on the panel itself.
On the positive side, the Comet 5G is more adaptable in awkward environments, such as networks with strict VLAN boundaries, unreliable Wi-Fi, or unknown cabling, and it gives you more ways to regain access without a site visit. The 64 GB eMMC storage is also easier to live with if you keep multiple ISO images or toolkits available, although transfer speed remains limited and does not materially improve over the 32 GB model. On the less positive side, the cellular and multi path story is currently presented more as a capability than as a deeply configurable system, so users expecting router style failover policies and detailed controls may find the options relatively basic. The external storage expansion feature helps with capacity, but it is constrained by USB 2.0, requires reboots in some situations, and drive compatibility can be inconsistent, which limits how predictable it is as a long term workflow.
Overall, the Comet 5G is easier to justify when you expect to use the cellular connection or the nearby AP mode regularly, because those are the main reasons it exists and the main differences you will notice. If the device will live on a stable wired network most of the time and you only need a straightforward remote KVM for routine maintenance, the Comet Pro will usually cover the same core tasks for less money. If your priority is having multiple ways to reach the box when the local network is down or not trusted, the Comet 5G is the more complete tool, but its value depends on those deployment realities rather than any large jump in raw performance.
Buy the Gl.iNet KVM 5G from Amazon Below:
Buy the Gl.iNet Comet KVM ($219) from the Official Store Below:
Gl.iNet Comet 5G KVM Pros
Gl.iNet Comet 5G KVM CONs
Cellular out of band access via nano SIM (5G RedCap with 4G LTE fallback) adds a separate path when the site LAN is down or misconfigured
Nearby Control via AP mode enables direct point to point access without joining the surrounding network, useful for local BIOS work and isolated environments
HDMI passthrough plus capture keeps a local monitor active while still providing remote KVM access (up to 4K 30 fps, 1080p 60 fps)
Browser based management and access works across Windows, macOS, and Linux without requiring a dedicated client
64 GB eMMC provides more room for ISO images and utility files than the 32 GB model, reducing how often media needs to be rotated
3.69 in touchscreen makes on device setup and status checks less cramped than smaller panel implementations
Multiple remote access approaches are available (LAN, relay, and VPN style options like Tailscale and ZeroTier), allowing different trust and routing models
Low complexity deployment with passive cooling and a small footprint makes it viable as a 24/7 appliance when powered independently
Storage performance is modest, and remains closer to mid range eMMC speeds than fast removable storage
External storage expansion has caveats, including USB 2.0 limits, possible reboots, and inconsistent compatibility depending on the USB drive and power draw
Failover and cellular controls are not deeply tunable in the current UI, so users expecting router grade policy controls may find configuration limited
This description contains links to Amazon. These links will take you to some of the products mentioned in today's content. As an Amazon Associate, I earn from qualifying purchases. Visit the NASCompares Deal Finder to find the best place to buy this device in your region, based on Service, Support and Reputation - Just Search for your NAS Drive in the Box Below
Need Advice on Data Storage from an Expert?
Finally, for free advice about your setup, just leave a message in the comments below here at NASCompares.com and we will get back to you.Need Help?
Where possible (and where appropriate) please provide as much information about your requirements, as then I can arrange the best answer and solution to your needs. Do not worry about your e-mail address being required, it will NOT be used in a mailing list and will NOT be used in any way other than to respond to your enquiry.
[contact-form-7]
TRY CHAT Terms and Conditions
If you like this service, please consider supporting us.
We use affiliate links on the blog allowing NAScompares information and advice service to be free of charge to you.Anything you purchase on the day you click on our links will generate a small commission which isused to run the website. Here is a link for Amazon and B&H.You can also get me a Ko-fi or old school Paypal. Thanks!To find out more about how to support this advice service checkHEREIf you need to fix or configure a NAS, check FiverHave you thought about helping others with your knowledge? Find Instructions Here
Or support us by using our affiliate links on Amazon UK and Amazon US
Alternatively, why not ask me on the ASK NASCompares forum, by clicking the button below. This is a community hub that serves as a place that I can answer your question, chew the fat, share new release information and even get corrections posted. I will always get around to answering ALL queries, but as a one-man operation, I cannot promise speed! So by sharing your query in the ASK NASCompares section below, you can get a better range of solutions and suggestions, alongside my own.
Démarrer un PC à partir d’une clé USB ou d’un CD/DVD est une manipulation indispensable à connaître lorsque l’on utilise un ordinateur. Que ce soit pour installer ou réinstaller un système d’exploitation (Windows, Ubuntu, etc.), réparer un PC qui ne démarre plus, lancer un outil de dépannage ou tester un système en mode live, vous … Lire la suite
USB ports make your computer more accessible. You may use them to transfer files or extend connections to other devices. However, there are a few occasions when you may want to disable USB ports in Windows 11.
This may be necessary to protect against data leaks, reduce the chance of malware exposure, or prevent unnecessary access to certain features like printing. This guide shows you all possible ways to disable the Windows 11 USB ports.
1. Disable Windows 11 USB Ports from the Device Manager
You can use Windows’s Device Manager to monitor and control connected hardware devices. It is the easiest way to enable or disable ports in Windows 11. Follow the steps below.
1. Right-click the Start menu and click Device Manager.
2. Expand Universal Serial Bus Controllers, right-click USB Root Hub, and click the Disable device option.
3. Confirm your choice, and the ports should be successfully disabled.
2. Disable Windows 11 USB Ports Using the Command Prompt
On Windows devices, the Command Prompt is an interface for communicating with the operating system via text-based commands. You may run specific commands that will disable the USB ports on your computer.
1. Press Windows + R to open your Run dialog.
2. Type cmd and hit the Ctrl + Shift + enter keys to launch the Command Prompt.
On Windows 11, the Registry Editor is a hierarchical database of configurations and settings for the operating system and applications. You may edit certain keys to disable ports in Windows 11.
1. Open the Run dialog by pressing Windows + R.
2. Type regedit and hit Enter to open the Registry Editor.
4. Double-click Start in the right pane, edit the value data to 4, then click OK.
5. Restart your computer for the changes to take effect.
4. Disable the Windows 11 Ports via the Group Policy
Group policies are often used for administration of groups of devices or users. You may edit the port policy to ensure they are disabled. Follow the steps below.
1. Open the Run dialog by pressing Windows + R.
2. Type gpedit.msc and hit Enter to open the Group Policy Editor.
4. In the right pane, double-click Removable Disks: Deny execute access.
5. Click Enabled, then Apply, and OK.
6. Return to the Group Policy Editor and double-click Removable Disks: Deny read access. Then, follow the process in Step 5.
5. Using The BIOS to Disable Windows 11 Ports
The last option for disabling ports is using the Windows BIOS. The BIOS starts your computer and basic hardware components and may be used to disable basic hardware initialization, including shutting down the ports.
1. Turn on your computer and keep tapping the BIOS function key to enter the BIOS. This key may be F10 or some other function key.
2. Navigate to Advanced or More options.
3. Navigate to Advanced.
4. Select USB Configuration.
5. Set the USB port to disable.
No More Windows 11 BIOS
That is as much as you need to know. With the solutions above, the USB ports will no longer function on your computer.
What was your favorite solution? Please tell us in the comment section below. If you are interested in what ports your computer supports, you can check out a related guide.