ZyXEL xtrememimo x-550 Manual Do Utilizador
ZyXEL X-550 User’s Guide
FIREWALL SETTINGS
Enable SPI:
SPI ("stateful packet inspection" also known as "dynamic packet filtering") helps to prevent cyberattacks
by tracking more state per session. It validates that the traffic passing through that session conforms to the
protocol. When SPI is enabled, the extra state information will be reported on the Status -> Active Sessions
page.
SPI ("stateful packet inspection" also known as "dynamic packet filtering") helps to prevent cyberattacks
by tracking more state per session. It validates that the traffic passing through that session conforms to the
protocol. When SPI is enabled, the extra state information will be reported on the Status -> Active Sessions
page.
Enable DMZ:
DMZ means "Demilitarized Zone." If an application has trouble working from behind the router, you can
expose one computer to the Internet and run the application on that computer.
DMZ means "Demilitarized Zone." If an application has trouble working from behind the router, you can
expose one computer to the Internet and run the application on that computer.
Putting a computer in the DMZ may expose that computer to a variety of security
risks. Use of this option is only recommended as a last resort.
risks. Use of this option is only recommended as a last resort.
DMZ IP Address:
Specify the IP address of the computer on the LAN that you want to have unrestricted Internet
communication. If this computer obtains its address Automatically using DHCP, then you may want to
make a static reservation on the BASIC -> DHCP page so that the IP address of the DMZ machine does
not change.
Specify the IP address of the computer on the LAN that you want to have unrestricted Internet
communication. If this computer obtains its address Automatically using DHCP, then you may want to
make a static reservation on the BASIC -> DHCP page so that the IP address of the DMZ machine does
not change.
3.2.10 ADVANCED - Inbound Filter
The Inbound Filter option is an advanced method of controlling data received from the Internet. With this
feature you can configure inbound data filtering rules that control data based on IP Address.
feature you can configure inbound data filtering rules that control data based on IP Address.
Inbound Filters can be used for limiting access to a server on your network to a system or group of systems.
Filter rules can be used with Virtual Server, Gaming, or Remote Administration features. Each filter can be
used for several functions; for example a "Game Clan" filter might allow all of the members of a particular
gaming group to play several different games for which gaming entries have been created. At the same time
an "Admin" filter might only allows systems from your office network to access the WAN admin pages
and an FTP server you use at home. If you add an IP address to a filter, the change is effected in all of the
places where the filter is used.
Filter rules can be used with Virtual Server, Gaming, or Remote Administration features. Each filter can be
used for several functions; for example a "Game Clan" filter might allow all of the members of a particular
gaming group to play several different games for which gaming entries have been created. At the same time
an "Admin" filter might only allows systems from your office network to access the WAN admin pages
and an FTP server you use at home. If you add an IP address to a filter, the change is effected in all of the
places where the filter is used.
3-27