User Guide

STPro Firewall hooks
STPro Firewall streams
17 Network Security - Firewalling
210 / 288
3EC 36231 ABAA TCZZA Ed. 01
The following hooks, or PIPs can be determined (See Firewall
model):
 Input : The point of all incoming traffic
At this point it can be determined whether the packet is
allowed to reach the STPro IP router, or the local host.
 Sink : The point of all traffic destined to the STPro IP router
At this point it can be determined whether the packet is
allowed to address the local host.
 Forward : The point of all traffic to be forwarded by the
STPro
At this point it can be determined whether the packet is
allowed to be handled, i.e. routed, by the STPro IP router.
 Source : The point of all traffic sourced by the STPro IP router
At this point it can be determined whether the packet is
allowed to leave the local host.
 Output : The point of all outgoing traffic
At this point it can be determined whether the packet is
allowed to leave the STPro IP router or local host.
The following streams (See Firewall model) can run through the
PIPs:
 (1) Input -> Sink : The flow of packets exclusively destined
to the STPro
 (2) Source-> Output : The flow of packets sourced
exclusively by the STPro itself
 (3) Input -> Forward -> Output : The flow of packets
sourced by the WAN, forwarded towards the local network or
vice versa.