![background image](http://html1.mh-extra.com/html/patton-electronics/patton-iplink-2603/patton-iplink-2603_getting-started-manual_4094964076.webp)
Security Triggers
76
Models 2603, 2621, and 2635 Getting Started Guide
7 • Security
4.
Set Inbound as
Block
, but Outbound as
Allow
. (See
figure 51
.)
5.
Click on
Create
.
Figure 51. Configuring TCP port filter for FTP
After configuring the FTP portfilter, you can open an ftp session from Remote to Local, however you can issue
ftp commands (e.g., login, cd, etc.). Because the trigger to permit transfer of data via FTP has not been
defined, no data can be transferred. (Data transfer occurs with the commands ls, dir, get, put commands.) The
portfilter allows an ftp control channel but does not allow the use of a secondary data channel for passing data
by ftp.
To enable the FTP data channel, add a trigger to open a secondary channel only when data is being passed.
This minimizes the number of open ports. Each open port is a security risk.
1.
From the Configuration Menu, > Configuration > Security >
Security Trigger Configuration...
>
New Trig-
ger
.
2.
Set the parameters as follows (See
figure 52
.):
– Transport Type = tcp
– Port Number Start = 21
– Port Number End = 21
– Allow Multiple Hosts = Block
– Max Activity Interval = 3000
– Enable Session Chaining = Block
– Enable UDP Session Chaining = Block
– Binary Address Replacement = Block
– Address Translation Type = none
3.
Click on Create.
Содержание Patton IPLink 2603
Страница 9: ...Contents Models 2603 2621 and 2635 Getting Started Guide 9 ...
Страница 24: ...24 Chapter 2 Product Overview Chapter contents Introduction 25 Applications Overview 26 ...
Страница 40: ...40 Chapter 4 Ethernet LAN Port Chapter contents Introduction 41 LAN Connections 41 Ethernet Port 41 ...
Страница 122: ...122 Appendix C Cable Recommendations Chapter contents Ethernet Cable 123 Adapter 123 ...