User's Manual
141
February 2007
MP-202 Telephone Adapter
12. Security
12 Security
The MP-202's security suite includes comprehensive and robust security services: Stateful
Packet Inspection Firewall, user authentication protocols and password protection
mechanisms. These features together allow users to connect their computers to the
Internet and simultaneously be protected from the security threats of the Internet.
The firewall, which is the cornerstone of your Telephone Adapter's security suite, has been
exclusively tailored to the needs of the residential/office user and has been pre-configured
to provide optimum security (refer to the figure below).
Figure
12-1: Firewall in Action
The MP-202 firewall provides both the security and flexibility that home and office users
seek. It provides a managed, professional level of network security while enabling the safe
use of interactive applications, such as Internet gaming and video-conferencing.
Additional features, including surfing restrictions and access control, can also be easily
configured locally by the user through a user-friendly Web-based interface, or remotely by
a service provider.
The MP-202 firewall supports advanced filtering, designed to allow comprehensive control
over the firewall's behavior. You can define specific input and output rules, control the order
of logically similar sets of rules and make a distinction between rules that apply to WAN
and LAN network devices.
The Web-based management screens in the Security section feature the following:
The 'General' screen allows you to choose the security level for the firewall (refer to'
General Security Level Settings' on page
142
)
The 'Access Control' screen can be used to restrict access from the home network to
the Internet (refer to 'Local Servers (Port Forwarding)' on page
146
).
The 'Port Forwarding' screen can be used to enable access from the Internet to
specified services provided by computers in the home network and special Internet
applications (refer to Port Forwarding on page
146
)
The 'DMZ Host' screen allows you to configure a LAN host to receive all traffic arriving
at your Telephone Adapter, which does not belong to a known session (refer to' Port
Triggering' on page
151
).
The 'Port Triggering' screen allows you to define port triggering entries, to dynamically
open the firewall for some protocols or ports. (refer to 'Remote Administration' on page
171
).
The 'Website Restrictions' allows you to block LAN access to a certain host or web