Edge-Core VG007, Руководство по управлению

Страница: 35 / 86

Firewall
3-11
3
Firewall Options
The Pocket VoIP Gateway’s firewall enables access control of client PCs, blocks
common hacker attacks, including IP Spoofing, Land Attack, Ping of Death, Smurf
Attack, TCP null scan, ICMP defect, and TCP SYN flooding. The firewall does not
significantly affect system performance and it is best to leave it enabled to protect
your network.
Figure 3-10. Gateway Mode Firewall Options
• Enable Hacker Attack Protect – Network attacks that deny access to a network
device are called DoS attacks. DoS attacks are aimed at devices and networks with
a connection to the Internet. Their goal is not to steal information, but to disable a
device or network so users no longer have access to network resources. The VoIP
Router protects against the following DoS attacks: IP Spoofing, Land Attack, Ping
of Death, Smurf Attack, TCP null scan, ICMP defect, and TCP SYN flooding.
• Discard PING from WAN side – Prevents pings on the unit’s WAN port from being
routed to the network.
• Discard to PING the Gateway – Prevents any response to a ping to the unit’s IP
address.
• Drop Port Scan – Prevents outside hackers form testing the TCP/UDP port
numbers on the unit for any services.