D-Link DWC-1000 Manuel D’Utilisation
Wireless Controller
User Manual
110
ports. The controller has a list of common applications and games with corresponding
outbound and inbound ports to open. You can also specify a port triggering rule by
defining the type of traffic (TCP or UDP) and the range of incoming and outgoing
ports to open when enabled.
outbound and inbound ports to open. You can also specify a port triggering rule by
defining the type of traffic (TCP or UDP) and the range of incoming and outgoing
ports to open when enabled.
Figure 69 : Li st of Available Applica tion Rul e s showi ng 4 uni que r ules
The application rule status page will list any active rules, i.e. incoming ports that are
being triggered based on outbound requests from a defined outgoing port.
being triggered based on outbound requests from a defined outgoing port.
5.8 Web Content Filtering
The gateway offers some standard web filte ring options to allow the admin to easily
create internet access policies between the secure LAN and insecure WAN. Instead of
creating policies based on the type of traffic (as is the case when using firewall rules),
web based content itself can be used to determine if traffic is allowed or dropped.
create internet access policies between the secure LAN and insecure WAN. Instead of
creating policies based on the type of traffic (as is the case when using firewall rules),
web based content itself can be used to determine if traffic is allowed or dropped.
5.8.1 Content Filtering
Advanced > Website Filter > Content Filtering
Content filtering must be enabled to configure and use the subsequent features (list of
Trusted Domains, filtering on Blocked Keywords, etc.). Pro xy servers, which can be
used to circumvent certain firewall rules and thus a potential security gap, can be
blocked for all LAN devices. Java applets can be prevented from being downloaded
from internet sites, and similarly the gateway can prevent ActiveX controls from
being downloaded via Internet Explorer. For added security cookies, which typically
contain session information, can be blocked as well for all devices on the private
network.
Trusted Domains, filtering on Blocked Keywords, etc.). Pro xy servers, which can be
used to circumvent certain firewall rules and thus a potential security gap, can be
blocked for all LAN devices. Java applets can be prevented from being downloaded
from internet sites, and similarly the gateway can prevent ActiveX controls from
being downloaded via Internet Explorer. For added security cookies, which typically
contain session information, can be blocked as well for all devices on the private
network.