
Nokia ALCL ONTs Family
Report IMRS-NOK-FAMILYMethod: public-record scoring
Apr 2026
Is the Nokia ALCL ONTs Family safe?
No. This router leaves your home network open.
It has none of the 8 protections we check, your internet provider controls its updates, and it has 1 serious security finding.
$20 off for router checkers. $179.99 with code CHECKED20, applied at checkout.
What this means for you
The top 3 risks, most serious first.
-
Serious
It’s made abroad, so the FCC’s 2026 foreign-made router rule applies
Nokia ALCL ONTs (CE1E38, CE1E38-22, and related models) are manufactured in China. The FCC's March 2026 foreign manufacture ban applies to ISP-deployed optical network equipment.
-
Moderate
Your internet provider controls its software, not you
Nokia ALCL ONTs are locked hardware managed entirely by your ISP. Users cannot change firmware, configure firewall rules, or audit network activity on the device itself.
-
Minor
Nokia Corporation is a Finnish company (NASDAQ: NOK)
Manufacturing in China is the regulatory concern under the FCC rule, not Nokia's corporate jurisdiction.
Protections it’s missing
Missing 8 of 8.
We check every router for the same 8 protections. Here is how the Nokia ALCL ONTs Family does.
-
Blocks unknown devices from joining
Locked by your ISPNew devices stay out until you approve them once, even if they have the Wi-Fi password.
Zero-Trust Device Admission -
Keeps smart gadgets away from your computers
Locked by your ISPDevices are kept apart, so a hacked smart TV can’t reach your laptop.
Network Segmentation (VLANs) -
Encrypts internet traffic for every device
Locked by your ISPTraffic leaving your home is encrypted, even from devices that can’t run a VPN app.
Router-Level VPN -
Locks a device to approved sites
Locked by your ISPA device can reach only the sites you approve. Everything else is blocked.
Domain Allowlisting -
Separate Wi-Fi passwords per group
Locked by your ISPEach part of your network gets its own password.
Granular Password Control -
Guest access that expires
Locked by your ISPGuests are removed when they leave and need your approval to reconnect.
Guest Auto-Expiry -
Made outside China’s legal reach
Locked by your ISPNot subject to China’s National Intelligence Law.
Clean Supply Chain -
Watches for attacks in real time
Locked by your ISPSpots suspicious devices, traffic and known attacks as they happen.
Active Threat Monitoring
Fix it today
- Contact your ISP to ask about replacing Nokia ALCL hardware with FCC-compliant alternatives
- Request a US-manufactured or Taiwan-manufactured gateway from your provider
- Install a secondary router in bridge mode for advanced security control
- Secure ISP account credentials with 2FA
Keep your ISP internet. Rio runs your Wi-Fi.
- You approve every device. Nothing new joins your network until you say yes in the Rio app.
- Smart devices live apart from your computers. Up to 16 separate rooms, each with its own password.
- US company, made in Taiwan. No government flags.
$20 off for router checkers with code CHECKED20, applied at checkout. Regular price $199.99.
1 year of Rio VPN included, then $7.99/month or $79.99/year · 30-day returns · 1-year warranty
Rio builds this site and is graded by the same method. See the method
Get alerts for your ALCL ONTs Family
Get an email if it shows up on the US government's list of actively exploited flaws, or loses updates. Plus the 5-step lockdown checklist now.
How we scored it70% from who makes it, FCC status and updates. 30% from the 8 protections.
1Scores
2Calculation
46 × 0.7 + 0 × 0.3 = 32/100, grade F. 85+ is an A, 65+ a B, 45+ a C, 30+ a D, below 30 an F. ISP gateways made in China get an F.
3The facts behind it
- Who makes it
- Finnish-headquarteredNokia Corporation, Espoo, Finland - NASDAQ: NOK. Nokia ALCL optical network terminal family deployed by ISPs.
- Made in
- China
- Security updates
- Managed by ISP
- FCC approval
- FCC authorized - foreign manufacture rule applies
- FCC restrictions
- Foreign manufacture - subject to FCC March 2026 ban
- Last verified
- April 2026
Your ISP does not publish a public security patch log or end-of-life schedule for residential gateways. Patch status here is inferred from firmware release notes and third-party advisories.
4Sources
Every finding traces to public sources: FCC filings, NIST CVE records and US government advisories. Read the full method · Report an error
Other Nokia models
See every Nokia model: Nokia brand overview →