Choosing a Business Router for a UAE Office
The router your internet provider supplies will carry a small office adequately until the day you need a site to site link, a second circuit, or any visibility into what is happening on the connection. A business router is bought for those three things, not for speed.
This is how to decide what you actually need at the edge of a UAE office network.
First, work out what sits at the edge already
In most Dubai offices the provider hands over a device that terminates the circuit and does everything else badly. Before buying, establish three facts: whether that device can run in bridge mode so your own equipment does the routing, whether you have a static public address, and whether the circuit is fibre, fixed wireless or something else. Those three answers decide half the specification.
If the provider equipment cannot be bridged, your router sits behind it and you live with double network address translation, which complicates inbound services and some voice traffic. Worth knowing before you design, not after.
Router, firewall, or one device doing both
For most UAE businesses under a couple of hundred people, a single next generation firewall at the edge doing routing, security inspection and remote access is the simpler and cheaper answer. Two boxes is the right pattern when you have complex routing, multiple circuits from different providers, or a service provider handover that expects a real routing platform.
The split matters for throughput. A firewall's headline throughput figure and its throughput with inspection enabled are different numbers, often by a factor of three or more. Size on the inspected figure, which is covered in our guide to sizing a firewall for a UAE SME.
Two circuits, and making failover real
A second internet circuit is the single most valuable resilience purchase a UAE office makes, and it is routinely bought badly. Two things go wrong.
The first is buying both circuits from the same provider over the same physical path into the building. When the fault is in the riser or the street, both drop together. Ask where the second circuit physically enters the building.
The second is never testing the failover. A backup circuit that has not been failed over deliberately, during working hours, with someone watching what breaks, is an assumption rather than a control. Voice calls, VPN tunnels and anything relying on a fixed public address usually need attention on the failover path.
Fixed wireless on a business SIM is a reasonable backup for a small office, and it is the case where a cellular capable router earns its place. Treat it as a backup, since performance varies by location and time of day.
SD-WAN, and when it is genuinely worth it
If you run one office, you do not need SD-WAN. If you run several UAE sites, or sites here and abroad, it changes three things: traffic can use both circuits at once rather than sitting idle on the backup, application aware routing can put voice on the better path in real time, and site configuration comes from a central place rather than from device by device edits.
The cost is a subscription per site and a platform you have to understand. For three sites or more it usually pays for itself in the operational time it saves. For two sites, a straightforward tunnel between two firewalls is often the better engineering answer.
The specification checklist
- Throughput with inspection on, sized against your circuit speed and your headcount, not against the headline number.
- Enough WAN ports for the second circuit you will add later, plus a port for out of band or cellular backup.
- VPN capacity, counted in concurrent users for remote access and in tunnels for site to site, both of which have ceilings on smaller models.
- Routing features you will actually use. Policy based routing and BGP matter to some businesses and to nobody else. Do not pay for a platform you will run as a default gateway.
- Logging. A router with no usable logs is a router that cannot answer the question everyone asks during an incident.
- Management access that survives the circuit being down, which in practice means cellular or a console you can reach.
Local rules worth knowing
Voice over IP in the UAE is regulated, and what a business may run differs from what is generally assumed. Check the current position with your provider and with the Telecommunications and Digital Government Regulatory Authority before you design a calling platform around a specific service, rather than discovering the constraint after the handsets arrive.
Wireless features on a router are also subject to local spectrum rules, so equipment set to another country's regulatory domain is not compliant here even when it works.
What usually gets missed
- Licence expiry. Security subscriptions on edge devices lapse quietly, and on some platforms the inspection features stop with them. Diarise the renewal.
- Firmware. Edge devices are internet facing by definition, and unpatched edge equipment is the most common route into a business network. Plan updates with a maintenance window rather than doing them never.
- Power. The router, the provider equipment and the switch all need protected power, or the office is offline during every brief interruption.
- Spare. An edge device failure stops the whole office. For a business that cannot absorb a day of downtime, a cold spare on the shelf is cheaper than the fastest support contract.
Specifying it properly
Decide bridge mode and circuits first, size on inspected throughput, plan the second circuit before you need it, and buy SD-WAN only when you have sites to justify it.
Codeeo Tech supplies routing and edge platforms from Cisco, Juniper, Fortinet and D-Link to businesses across the UAE. Tell us your circuits, your site count and your headcount through the contact page and we will size the edge against them.
Cover photo: Meydan dubai by Sakena, via Wikimedia Commons (CC BY 2.0).
