Juniper SSG 20-WLA, Hardware Installation And Configuration Manual

Page: 47 / 82

Basic Firewall Protections
„ 37
The V.92 Modem Interface
The V.92 interface provides an internal modem to establish a PPP connection to an
ISP. You can configure the serial interface as a primary or backup interface, which is
used in case of interface failover.
To configure the V.92 interface, do either of the following:
WebUI
Network > Interfaces > Edit (for serial1/0) > Modem: Enter the following,
click
OK :
Modem Name: mod1
Init String: AT&FS7=255S32=6
Status: Enable (select)
Inactivity Timeout: 20
CLI
set interface serial1/0 modem idle-time 20
set interface serial1/0 modem settings mod1 init-strings AT&FS7=255S32=6
set interface serial1/0 modem settings mod1 active
For information on how to configure the V.92 modem interface, refer to the
Concepts & Examples ScreenOS Reference Guide .
Basic Firewall Protections
The devices are configured with a default policy that permits workstations in the
Trust zone of your network to access any resource in the Untrust security zone,
while outside computers are not allowed to access or start sessions with your
workstations. You can configure policies that direct the device to permit outside
computers to start specific kinds of sessions with your computers. For information
about creating or modifying policies, refer to the
Concepts and Examples ScreenOS
Reference Guide .
The SSG 20 device provides various detection methods and defense mechanisms to
combat probes and attacks aimed at compromising or harming a network or
network resource:
„ ScreenOS SCREEN options secure a zone by inspecting, and then allowing or
denying, all connection attempts that require crossing an interface to that zone.
For example, you can apply port scan protection on the Untrust zone to stop a
source from an remote network from trying to identify services to target for
further attacks.
„ The device applies firewall policies, which can contain content filtering and
intrusion detection and prevention (IDP) components, to the traffic that passes
the SCREEN filters from one zone to another. By default, no traffic is permitted
to pass through the device from one zone to another. To permit traffic to cross
the device from one zone to another, you must create a policy that overrides the
default behavior.
NOTE: The V.92 interface does not work in transparent mode.