Netgear fvs114 사용자 설명서

다운로드
페이지 212
Reference Manual for the ProSafe VPN Firewall FVS114
2-2
Introduction
202-10098-01, April 2005
A Powerful, True Firewall with Content Filtering
Unlike simple Internet sharing NAT firewalls, the FVS114 is a true firewall, using stateful packet 
inspection to defend against hacker attacks. Its firewall features include:
DoS protection.
Automatically detects and thwarts DoS attacks such as Ping of Death, SYN Flood, LAND 
Attack, and IP Spoofing.
Blocks unwanted traffic from the Internet to your LAN.
Blocks access from your LAN to Internet locations or services that you specify as off-limits.
Logs security incidents.
The FVS114 logs security events such as blocked incoming traffic, port scans, attacks, and 
administrator logins. You can configure the firewall to email the log to you at specified 
intervals. You can also configure the firewall to send immediate alert messages to your e-mail 
address or email pager whenever a significant event occurs.
With its content filtering feature, the FVS114 prevents objectionable content from reaching 
your PCs. The firewall allows you to control access to Internet content by screening for 
keywords within Web addresses. You can configure the firewall to log and report attempts to 
access objectionable Internet sites.
Security
The FVS114 VPN Firewall is equipped with several features designed to maintain security, as 
described in this section.
PCs Hidden by NAT
 
NAT opens a temporary path to the Internet for requests originating from the local network. 
Requests originating from outside the LAN are discarded, preventing users outside the LAN 
from finding and directly accessing the PCs on the LAN.
Port Forwarding with NAT
 
Although NAT prevents Internet locations from directly accessing the PCs on the LAN, the 
firewall allows you to direct incoming traffic to specific PCs based on the service port number 
of the incoming request, or to one designated “DNS” host computer. You can specify 
forwarding of single ports or ranges of ports.