ZyXEL Communications Corporation NBG4104 Manual De Usuario
Chapter 18 Firewall
NBG4104 User’s Guide
113
2
Think about access control before you connect to the network in any way, including attaching a
modem to the port.
modem to the port.
3
Limit who can access your router.
4
Don't enable any local service (such as NTP) that you don't use. Any enabled service could present
a potential security risk. A determined hacker might be able to find creative ways to misuse the
enabled services to access the firewall or the network.
a potential security risk. A determined hacker might be able to find creative ways to misuse the
enabled services to access the firewall or the network.
5
For local services that are enabled, protect against misuse. Protect by configuring the services to
communicate only with specific peers, and protect by configuring rules to block packets for the
services at specific interfaces.
communicate only with specific peers, and protect by configuring rules to block packets for the
services at specific interfaces.
6
Protect against IP spoofing by making sure the firewall is active.
7
Keep the firewall in a secured (locked) room.
18.4 The Firewall General Screen
Use this screen to enable or disable the NBG4104’s firewall, and set up firewall logs. Click
Configuration > Security > Firewall to open the General screen.
Configuration > Security > Firewall to open the General screen.
Figure 57
Configuration > Security > Firewall > General l
The following table describes the labels in this screen.
Table 44
Configuration > Security > Firewall > General
LABEL
DESCRIPTION
Enable Firewall
Select this check box to activate the firewall. The NBG4104 performs access control and
protects against Denial of Service (DoS) attacks when the firewall is activated.
protects against Denial of Service (DoS) attacks when the firewall is activated.
Enable Anti-DoS
Attack
Attack
Select this check box to activate the Anti-Dos Attack function.
Apply
Click Apply to save the settings.
Reset
Click Reset to start configuring this screen again.