FIREWALL
Version 2.0, February 2012. Copyright
2012 Hitron Technologies
55
Version 2.0, February 2012. Copyright
2012 Hitron Technologies
55
HITRON CGN USER’S GUIDE
4.1.2
INTRUSION DETECTION SYSTEM
An intrusion detection system monitors network activity, looking for policy violations,
and malicious or suspicious activity. The CGN’s intrusion detection system logs all
such activity to the
Firewall
>
Local Logs
screen.
4.1.3
PING
The CGN allows you to use the ping utility on the LAN (in the
WAN/LAN
>
Debug
screen) and also on the WAN (in the
Firewall
>
Firewall Options
screen). For more
information, see
Debugging (Ping and Traceroute)
on page
46
.
4.1.4
MAC FILTERING
Every networking device has a unique Media Access Control (MAC) address that
identifies it on the network. When you enable MAC address filtering on the CGN’s
firewall, you can set up a list of MAC addresses, and then specify whether you want
to:
Deny the devices on the list access to the CGN and the network (in which case
all other devices can access the network)
or
Allow the devices on the list to access the network (in which case no other
devices can access the network)
4.1.5
IP FILTERING
IP filtering allows you to prevent computers on the LAN from sending certain types of
data to the WAN. You can use this to prevent unwanted outgoing communications.
Specify the IP address of the computer on the LAN from which you want to prevent
communications, and specify the port range of the communications you want to
prevent. The CGN discards outgoing data packets that match the criteria you
specified.
