B
Firewall Pages • Advanced Routing Information Protocol Setup Page
Motorola SURFboard SBG941 Series Wireless Cable Modem Gateways • User Guide
41
570280-001-a
8
Firewall Pages
The SBG941 Firewall Pages allow you to configure the SBG941 firewall filters and
firewall alert notifications. The SBG941 firewall protects the SBG941 LAN from
undesired attacks and other intrusions from the Internet. It provides an advanced,
integrated stateful-inspection firewall supporting intrusion detection, session tracking,
and denial-of-service attack prevention. The firewall:
•
Maintains state data for every TCP/IP session on the OSI network and transport
layers.
•
Monitors all incoming and outgoing packets, applies the firewall policy to each one,
and screens for improper packets and intrusion attempts.
•
Provides comprehensive logging for all:
User authentications
Rejected internal and external connection requests
Session creation and termination
Outside attacks (intrusion detection)
You can configure the firewall filters to set rules for port usage. For information about
choosing a predefined firewall policy template, see the Firewall Pages.
You can click any Firewall submenu option to view or change the firewall configuration
information for that option.
For information about how the firewall can affect gaming, see
Gaming Configuration
Guidelines
.
The predefined policies provide outbound Internet access for computers on the SBG941
LAN. The SBG941 firewall uses stateful-inspection to allow inbound responses when
there already is an outbound session running that corresponds to the data flow. For
example, if you use a web browser, outbound HTTP connections are permitted on port
80. Inbound responses from the Internet are allowed because an outbound session is
established.
When required, you can configure the SBG941 firewall to allow inbound packets without
first establishing an outbound session. You also need to configure a port forwarding
entry on the
Advanced Port Forwarding Page
or a DMZ client on the
Advanced DMZ
Host Page
.
