Siemens SINAUT MD740-1, Руководство пользователя

Страница: 27 / 105

Configuration
SINAUT MD740-1 27 von 105
File 3172AD001_V1_1_060206.doc
File saved 06.02.2006
File printed 06.02.2006
State Freigabe
Autor Pauluhn
4.2 Firewall menu
The SINAUT MD740-1 comes with a Stateful Packet Inspection Firewall . The connection
data of an active connection are collected in a database ( connection tracking ). This
means that rules are only to be defined for one direction, while data from the other
direction of a connection, and only these, are allowed through automatically. A side
effect of this is that existing connections are not interrupted as a result of
reconfiguration, even if a corresponding new connection should no longer be
established.
Default firewall setting:
•
All incoming connections are rejected (except VPN).
•
The data packets of all outgoing connections are rejected (except VPN and except
connections to the integrated website which provides information about devices and
connection data).
!
VPN connections are not subject to the firewall rules determined under this menu
item. You can determine firewall rules for each individual VPN connection under the
menu
VPN
# # # #
Connections .
!
If several firewall rules have been set, they are scanned in the order of the entries
from top to bottom until a suitable rule is found. This rule is then applied. Should
there also be rules further down in the list which would be also suitable, they are
ignored.
Firewall
#
# #
#
Incoming
This lists the fixed firewall rules. These apply to incoming data
connections which have been initiated externally.
•
If no rule has been set, all incoming connections (except VPN)
are rejected (= default setting).
Deleting a rule
Click on Delete next to the entry concerned. Then click on OK
or Apply .