Quadro4Li Manual II: Administrator's Guide
Administrator’s Menus
Quadro4Li; (SW Version 5.2.x)
100
The
Firewall Security
radio buttons are the following:
•
Low Security
- Everything that is not explicitly forbidden
will be allowed. This security level doesn't block anything
by default. It is recommended if the device is already
located behind another firewall or if every filter has been
configured correctly.
•
Medium Security
- Traffic originating from the LAN side
may pass and traffic from the WAN side will be blocked by
default. This is the recommended security level.
•
High Security
- Everything that is not explicitly allowed will
be blocked, including traffic from the LAN side.
The
link refers to the page where
Quadro’s privacy can be configured.
The
View Filter Rules
link opens the
page.
Fig. II-174: Firewall and NAT Settings page
Advanced Firewall Settings
Advanced Firewall Settings
are used to deny Ping and Portscanning operations addressed towards the device. With these features enabled,
Quadro will answer with inscrutable messages to the Ping and Portscanning operations.
Please Note:
Operations are available only when the firewall is
enabled from the
Firewall and
NAT page.
This page offers the following components:
The
Ping Stealth
checkbox selection prohibits a Ping operation
toward Quadro from its WAN.
The
Fool Portscanner
checkbox selection prohibits Quadro
portscanning from its WAN. As a reply to a Portscanning
operation, "network unreachable" or "host unreachable"
feedback messages will be sent.
Fig. II-175: Advanced Firewall Settings page
Filtering Rules
The
Filtering Rules
page allows you to configure the filters for incoming and outgoing traffic.
To prevent inaccurate configuration, only one rule per service is allowed. The user may use IP groups to include several IP addresses for this rule.
Since the filtering rules specify the operation mode of the firewall, they only take effect if the firewall has been enabled (additionally NAT should be
enabled to use the
Port Forwarding
function in the
Incoming Traffic / Port Forwarding
filtering rules). The filtering rules are independent from the
security level, so they will work if enabled, no matter what security level has been selected.
Please Note:
Applying firewall rules will prevent the establishment of new connections that violate the rules. Applying rules does not kill existing
connections that violate the rule.
View All
displays all configured filters specified by their
State
(enabled or disabled), the selected
Service
, the set
Action
(allowed or blocked), the IP addresses the filters apply to (if
Restricted
) and the destination of port forwarding (
Redirect to
,
in case of
Incoming Traffic/Port Forwarding
). Since it is read-
only, no modifications are allowed and no functional buttons are
available.
The
Incoming Traffic/Port Forwarding
filter is for incoming
traffic. The rules here allow or deny systems on the Internet to
reach the services of Quadro’s LAN. The NAT service should be
enabled on the Quadro to provide the possibility of
Port
Forwarding
in the
Incoming Traffic/Port Forwarding
filtering
rules. The
Port Forwarding
function will be unavailable if NAT is
disabled on the Quadro.
The
Outgoing Traffic
filter is for outgoing traffic. The rules here
allow or deny Quadro’s LAN users to reach external services.
Management Access
is used to enable management access to
the Quadro from the Internet. A host on the Internet can be
allowed to reach the Quadro.
Call Control Access
is used to enable the access from the call
controlling application from the Internet to the Quadro. The call
controlling applications can be used to remotely initiate and
handle calls on the Quadro and to subscribe for certain event
