Security Triggers
127
Model 3086FR ATM IAD User Guide
10 • Security
After configuring the FTP portfilter, you can open an ftp session from Remote to Local, however you can issue
ftp commands (e.g., login, cd, etc.) but transfer data (e.g., ls, dir, get, put commands). The portfilter allows an
ftp control channel but does not allow the use of a secondary data channel for passing data by ftp.
To enable the ftp data channel, add a trigger which will open a secondary channel only when data is being
passed. This prevents the need to open too many ports which offer a security risk.
1.
From the Configuration Menu, > Configuration > Security > Firewall Trigger Configuration > New Trig-
ger.
2.
Set the parameters as follows:
– Transport Type = tcp
– Port Number Start = 21
– Port Number End = 21
– Allow Multiple Hosts = Block
– Max Activity Interval = 3000
– Enable Session Chaining = Block
– Enable UDP Session Chaining = Block
– Binary Address Replacement = Block
– Address Translation Type = none
3.
Click on
Apply
.
You should now be able to use ftp commands to pass data between Remote and Local.
Summary of Contents for ipRocketLink 3086FR
Page 8: ...8 Model 3086FR ATM IAD User Guide Contents...
Page 26: ...Product Overview 26 Model 3086FR ATM IAD User Guide 2 Product Overview...
Page 34: ...Hardware installation 34 Model 3086FR ATM IAD User Guide 3 Quick Start Installation...
Page 82: ...Web Configuration Methods 82 Model 3086FR ATM IAD User Guide 7 Local Management Interface...
Page 130: ...Intrusion Detection System IDS 130 Model 3086FR ATM IAD User Guide 10 Security...
Page 135: ...135 Chapter 12 Monitoring Status Chapter contents Status LEDs 136...
