Panasonic KX-NS1000, Installation Manual

Page: 387 / 416

Setting Description
Protocol number Specify a protocol number directly (0–255)
Specify a protocol type (ICMP, TCP, UDP, TCP&UDP)
Originating IP address By specifying a subnet, you can apply the filter to a range of
addresses.
Destination IP address By specifying a subnet, you can apply the filter to a range of
addresses.
TCP/UDP originating port You can specify a range.
TCP/UDP destination port You can specify a range.
Direction LAN->WAN, WAN->LAN
Operation Allow/Deny
Log Record in log or do not record in log
PC Programming Manual References
27.8 Router Configuration—Firewall—[2-2] Packet Filtering
8.6.12 Firewall—Stateful Packet Inspection
Description
Stateful Packet Inspection (SPI) is a feature where the firewall inspects the contents of a packet and determines
dynamically whether to allow or deny the packet. If SPI is enabled, packets determined to be
"INVALID" (packets that do not apply to any other state) are denied. On this PBX, SPI applies to both incoming
(WAN
®
LAN) and outgoing (LAN
®
WAN).
Using the following "TCP flag state" as the detection criteria, packets that do not match the TCP state change
are discarded by the SPI feature.
This feature remembers each transmission state, and by predicting the next packet that will arrive, it can detect
unauthorised access and discard packets accordingly.
PC Programming Manual References
27.7 Router Configuration—Firewall—[2-1] One Touch Security
8.6.13 Firewall—DoS Protection
Description
The DoS Protection feature protects the system against DoS (Denial of Service) attacks. Security rules for
protecting against port scans and DoS attacks can be set with one touch.
You can enable and disable DoS Protection.
Conditions
•
For details about whether the DoS Protection feature is necessary, consult the network administrator.
Installation Manual 387
8.6.13 Firewall—DoS Protection