Chapter 5: Configuring the CopperJet
Page
38
Important:
Enabling the Firewall will block ALL traffic going in and out of the
CopperJet. Firewall Policies need to be configured for allowing traffic
to pass through.
5.6.5 Enabling Intrusion Detection
Before enabling Intrusion Detection, you must have Security enabled and you
must have at least 1 internal interface or 1 external interface configured.
Be sure that the WAN and/or LAN connections and the Security Interfaces are
defined and configured.
To enable Intrusion Detection, go to the Security State section and select
Intrusion Detection Enabled. Click on Change State to update the Security State
section. The Intrusion Detection is now enabled on the CopperJet.
5.6.6 Configuring Triggers
A trigger allows an application to open a secondary port in order to transport
packets. The most common applications that require secondary ports are FTP and
NetMeeting. Triggers are mandatory for these applications to work with NAT of
other security options.
This section assumes that you have enabled Security and defined at least 1
security interface.
To configure a trigger, go to the Policies, Triggers and Intrusion Detection section
of the Security Interface Configuration. Click on Firewall Trigger Configuration.
The Firewall Trigger Configuration page is displayed.
5.6.6.1 Adding Triggers
To add a trigger, click on the New Trigger link. The Firewall Add Trigger page is
displayed.