Matrix NAVAN CNX200, Системное руководство

Страница: 280 / 1388

270 Matrix NAVAN CNX200 System Manual
• Block ICMP and Block Ping : Internet Control Message Protocol (ICMP) provides a means to control the
flow of traffic in an effort to ensure that the data can be reliably delivered. Use of ICMP is through the use
of the Ping application. WAN Block Ping prevents your network from being ‘pinged’ or detected by other
Internet users and gain your IP Address.
• Block IDENT on 113 : Block IDENT (Port 113) prevents outside intruders from attacking the router through
the Internet using service port 113.
• Intrusion Detection Prevention (IDS & IPS) : Intrusion detection is the process of monitoring the events
occurring in a computer system or network and analyzing them for signs of possible incidents, which are
violations or imminent threats of violation of computer security policies, acceptable user policies, or
standard security practices.
One of the most common attacks is DOS (Denial of Service). DOS is a type of attack that makes a service
unusable, usually by overloading the server or network which causes your computer to crash or to become
busy processing data and you are unable to use it. This can be done by consuming the host resources,
and bandwidth or forcing more computation.
An Intrusion Detection System (IDS) is a software that automates the intrusion detection process. An
Intrusion Prevention System (IPS) is a software that has all the capabilities of an intrusion detection
system and can also attempt to stop possible incidents.
• Port Scanning: Port scanning means someone across the network is scanning your computer for open
ports possibly to see if he/she can access any of the services running on your computer (such as File and
Print Sharing, Web Server, Telnet, SSH) for hacking.
Configuring the Security Settings
• Log into Jeeves as System Engineer.
• Click the Firewall & Security tab.
• On the left navigation bar, click the Security Settings link.
• Matrix NAVAN provides you with following of security measures:
•
Firewall (Stateful Inspection)
• Block ICMP
• Block PING
• Block IDENT on 113