ZyXEL Communications Centralized Network Management Vantage CNM, Руководство пользователя

Страница: 116 / 430

Chapter 6 Device Security Settings
Vantage CNM User’s Guide
116
6.1.4 Anti-Probing
Click Device Operation in the menu bar and then click Device Configuration > Security >
Firewall > Anti-Probing in the navigation panel to open the following screen. Configure this
screen to help keep the device hidden from probing attempts. You can specify which of the
device’s interfaces will respond to Ping requests and whether or not the device is to respond to
probing for unused ports.
Figure 53 Device Operation > Device Configuration > Security > Firewall > Anti-Probing
Action for
Matched Packets Use the drop-down list box to select what the firewall is to do with packets that
match this rule.
Select
Drop to silently discard the packets without sending a TCP reset packet or
an ICMP destination-unreachable message to the sender.
Select
Reject to deny the packets and send a TCP reset packet (for a TCP packet)
or an ICMP destination-unreachable message (for a UDP packet) to the sender.
Select
Permit to allow the passage of the packets.
Note: You also need to configure NAT port forwarding (or full
featured NAT address mapping rules) if you want to allow
computers on the WAN to access devices on the LAN.
Note: You may also need to configure the remote management
settings if you want to allow a WAN computer to manage the
device or restrict management from the LAN.
Apply Click Apply to save your customized settings and exit this screen.
Cancel Click Cancel to exit this screen without saving.
Table 42 Device Operation > Device Configuration > Security > Firewall > Rule Summary >
Add/Edit (continued)
LABEL DESCRIPTION