Arris NVG595, Administrator'S Handbook

Page: 78 / 226

Administrator’s Handbook
78
Link: Firewall Advanced
When you click the
Firewall Advanced Firewall Advanced Firewall Advanced Firewall Advanced
link the
Firewall Advanced
screen opens.
All computer operating systems are vulnerable to attack from outside sources, typically at the operating sys-
tem or Internet Protocol (IP) layers. Stateful Inspection firewalls intercept and analyze incoming data packets
to determine whether they should be admitted to your private LAN, based on multiple criteria, or blocked.
Stateful inspection improves security by tracking data packets over a period of time, examining incoming and
outgoing packets. Outgoing packets that request specific types of incoming packets are tracked; only those
incoming packets constituting a proper response are allowed through the firewall.
Stateful inspection is a security feature that prevents unsolicited inbound access when NAT is disabled. You can
configure UDP and TCP “no-activity” periods that will also apply to NAT time-outs if stateful inspection is
enabled on the interface. Stateful Inspection parameters are active on a WAN interface only if enabled on your
Gateway. Stateful inspection can be enabled on a WAN interface whether NAT is enabled or not.
DoS Protection – D enial- O f- S ervice attacks are common on the Internet, and can render an individual PC or a
whole network practically unusable by consuming all its resources. Your Gateway includes default settings to