ETIC RAS-E, User Manual, Page: 112 / 132

ADVANCED SET-UP
Page 112
DOC_DEV_RAS_User guide_A
Machine Access Box RAS
Firewall set-up
14.1 Overview
The firewall filters IP frames between the LAN interface on one hand and
 the WAN interface,

or transmitted inside a VPN,

or transmitted inside a remote user connection,
on the other hand.
The
It consists of three parts :

The « deny of service » filter
That filter is active on the WAN interface only and protects against the Internet attacks.
It cannot be set-up.
 The main filter
It filters IP packets whether carried inside one of the VPNs or outside a VPN.
The main filter checks source and destination IP addresses and the source and destination ports.
The main filter does not check the IP packets included in a remote user connection. That packets are
checked by the remote users filter.
The main filter does not check the IP packets defined in the “Port forwarding” table. That packed are directly
forwarded to the defined device (see Port forwarding ).
 The remote users filter
The remote user filter filters the IP frames according to the identity or the remote suer (Login & PWD).
Access rights to the devices of the LAN network are assigned to each user according to his identity.