FWX120 Operation Manual
75
4
Enhancing security
Outline of security functions
provided by the product
Security functions against external attacks
To protect the LANs connected to the product against external attacks, the product provides various
filter functions and Intrusion Detection System.
DOWNLOAD
POWER
STATUS
LAN 1
LAN 2
microSD
USB
LAN2
4
3
2
1
ON
STANDB
Y
CONSOLE
LAN1
UP LINK
1
3
4
2
LAN
Packet processing flow
Provider
Inbound f
ilt
er
Intr
usion
Det
ection S
yst
em
N
AT
(r
eceiving
side)
R
outing
P
olic
y f
ilt
er
N
AT
(tr
ansmit
ting side)
Internet
Filter function
The product has the following two filters:
•
Inbound filter (page 77):
Used to discard needless packets early.
•
Policy filter (page 80):
Performs stateful inspection filtering (dynamic filter). It can control access
on a connection basis.
Intrusion Detection System (page 88)
When incoming packets are checked through the inbound filter, the function detects illegal packets
for potential external attacks. You can specify whether detected packets are discarded immediately
after received or can pass through the function, depending on the types of packets.
