AudioCodes MP-26 series, User Manual

Page: 253 / 464

User's Manual 14. Security
Version 4.4.0 253 MP26x/MP27x
14 Security
The device's security suite includes comprehensive and robust security services: Stateful
Packet Inspection Firewall, user authentication protocols and password protection
mechanisms. These features together allow users to connect their computers to the
Internet and simultaneously be protected from the security threats of the Internet.
The firewall, which is the cornerstone of your device's security suite, has been exclusively
tailored to the needs of the residential/office user and has been pre-configured to provide
optimum security.
Figure 14-1: Firewall in Action (e.g., MP-264)
The device firewall provides both the security and flexibility that home and office users
seek. It provides a managed, professional level of network security while enabling the safe
use of interactive applications, such as Internet gaming and video-conferencing.
Additional features, including surfing restrictions and access control, can also be easily
configured locally by the user through a user-friendly Web-based interface, or remotely by
a service provider.
The device firewall supports advanced filtering, designed to allow comprehensive control
over the firewall's behavior. You can define specific input and output rules, control the order
of logically similar sets of rules and make a distinction between rules that apply to WAN
and LAN network devices.
The Web-based management screens in the Security section feature the following:

The 'General' screen allows you to choose the security level for the firewall (see
'General Security Level Settings' on page
254 ).

The 'Access Control' screen can be used to restrict access from the home network to
the Internet (see 'Local Servers (Port Forwarding)' on page
258 ).

The 'Port Forwarding' screen can be used to enable access from the Internet to
specified services provided by computers in the home network and special Internet
applications (see 'Port Forwarding' on page
258 ).

The 'DMZ Host' screen allows you to configure a LAN host to receive all traffic arriving
at the device, which does not belong to a known session (see' Port Triggering' on
page
263 ).

The 'Port Triggering' screen allows you to define port triggering entries, to dynamically
open the firewall for some protocols or ports. (see 'Remote Administration' on page
291 ).

The 'Website Restrictions' allow you to block LAN access to a certain host or web site
on the Internet (see 'Website Restrictions' on page
266 ).

'Advanced Filtering' allows you to implicitly control the firewall setting and rules (see
'Advanced Filtering' on page
272 ).

'Security Log' allows you to view and configure the firewall Log (see Security Log).