Netgear WGT634U 참조 매뉴얼
Reference Manual for the 108 Mbps Wireless Media Router WGT634U
2-4
Introduction
April 2004, 202-10018-02
A Powerful, True Firewall with Content Filtering
Unlike simple Internet sharing NAT routers, the WGT634U is a true firewall, using stateful packet
inspection to defend against hacker attacks. Its firewall features include:
inspection to defend against hacker attacks. Its firewall features include:
•
Denial of Service (DoS) protection. Automatically detects and thwarts DoS attacks such as
Ping of Death, SYN Flood, LAND Attack, and IP Spoofing.
Ping of Death, SYN Flood, LAND Attack, and IP Spoofing.
•
Blocks unwanted traffic from the Internet to your LAN.
•
Blocks access from your LAN to Internet locations or services that you specify as off-limits.
•
The WGT634U blocks objectionable content from reaching your computers. The router allows
you to control access to Internet content by screening for keywords within Web addresses. You
can configure the router to log and report attempts to access objectionable Internet sites.
you to control access to Internet content by screening for keywords within Web addresses. You
can configure the router to log and report attempts to access objectionable Internet sites.
Security
The WGT634U Wireless Media Router is equipped with several features designed to maintain
security, as described in this section.
security, as described in this section.
•
PCs Hidden by NAT
NAT opens a temporary path to the Internet for requests originating from the local network.
Requests originating from outside the LAN are discarded, preventing users outside the LAN
from finding and directly accessing the computers on the LAN.
Requests originating from outside the LAN are discarded, preventing users outside the LAN
from finding and directly accessing the computers on the LAN.
•
Port Forwarding with NAT
Although NAT prevents Internet locations from directly accessing the computers on the LAN,
the router allows you to direct incoming traffic to specific computers based on the service port
number of the incoming request, or to one designated “DMZ” host computer. You can specify
forwarding of single ports or ranges of ports.
the router allows you to direct incoming traffic to specific computers based on the service port
number of the incoming request, or to one designated “DMZ” host computer. You can specify
forwarding of single ports or ranges of ports.
•
Logs security incidents.
The WGT634U will log security events such as blocked incoming traffic, port scans, attacks,
and administrator logins. You can configure the router to e-mail the log to you at specified
intervals. You can also configure the router to send immediate alert messages to your e-mail
address or e-mail pager whenever a significant event occurs.
and administrator logins. You can configure the router to e-mail the log to you at specified
intervals. You can also configure the router to send immediate alert messages to your e-mail
address or e-mail pager whenever a significant event occurs.
Autosensing Ethernet Connections with Auto Uplink
With its internal 8-port 10/100 switch, the WGT634U can connect to either a 10 Mbps standard
Ethernet network or a 100 Mbps Fast Ethernet network. Both the LAN and WAN interfaces are
autosensing and capable of full-duplex or half-duplex operation.
Ethernet network or a 100 Mbps Fast Ethernet network. Both the LAN and WAN interfaces are
autosensing and capable of full-duplex or half-duplex operation.