Technicolor TG650S, Руководство по установке и эксплуатации

Страница: 102 / 114

96
8 INTERNET SECURITY
DMS-CTC-20111123-0002 v1.0
8.3 Firewall
Introduction
The MediaAccess Gateway comes with an integrated firewall that helps you protect your network from attacks from the
Internet. This firewall has a number of predefined levels to allow you to adjusted the firewall to your needs.
The Firewall is disabled by default. This means that all traffic passing through the MediaAccess Gateway (from and to the
Internet) is allowed.
Predefined security levels
The MediaAccess Gateway has a number of predefined security levels. The following levels are available:

BlockAll :
All traffic from and to the Internet is blocked. Game and Application Sharing is not allowed by the firewall.

High:
All outgoing connections are blocked, except for traffic from well-known protocols such as DNS, HTTP, HTTPS, FTP,
TELNET, IMAP and POP. All incoming connections are blocked.
Game and Application Sharing is not allowed.

Medium :
All outgoing connections are blocked except MS Windows protocols such as NetBIOS, RPC and SMB. All incoming
connections are blocked except inbound connections assigned to a local host via Game and Application Sharing.

Standard :
All outgoing connections are allowed. All incoming connections are blocked, except for inbound connections assigned to
a local host via Game and Application Sharing. This is the
default firewall level .

Low :
All outgoing connections are allowed. All incoming connections are blocked, except for ICMP (Internet Control
Management Protocol) and inbound connections assigned to a local host via Game and Application Sharing.

Disabled :
All in- and outgoing traffic is allowed to pass through your MediaAccess Gateway, including Game and Application
Sharing.
Changing the security level
Proceed as follows:
1 Browse to the MediaAccess Gateway GUI .
For more information, see “Accessing the MediaAccess Gateway GUI” on page 33 .
2 On the Toolbox menu, click Firewall .
3 The Firewall page appears. In the upper-right corner, click Configure .
4 Under Security Settings , select the security level of your choice and click Apply .
Although BlockAll will block all connections, some mandatory types of traffic such as DNS will still be relayed
between LAN and WAN by the MediaAccess Gateway.
The firewall levels only have impact on traffic passing through your MediaAccess Gateway. This means that the
handling of traffic directly appointed from and to MediaAccess Gateway is independent of the selected firewall level.
Protocol checks will be performed on all accepted connections, irrespective of the chosen level.