User`s guide

VigorPro5510 Series User’s Guide
vii
3.4.1 Basics for Firewall........................................................................................................... 64
3.4.2 General Setup................................................................................................................. 66
3.4.3 Filter Setup ..................................................................................................................... 71
3.4.4 DoS Defense .................................................................................................................. 78
3.5 Objects Settings.................................................................................................................... 81
3.5.1 IP Object ......................................................................................................................... 82
3.5.2 IP Group ......................................................................................................................... 84
3.5.3 Service Type Object .......................................................................................................85
3.5.4 Service Type Group........................................................................................................86
3.5.5 Keyword Object .............................................................................................................. 87
3.5.6 Keyword Group............................................................................................................... 88
3.5.7 File Extension Object...................................................................................................... 89
3.5.8 IM Object ........................................................................................................................ 91
3.5.9 P2P Object...................................................................................................................... 93
3.5.10 Misc Object ................................................................................................................... 94
3.6 CSM ...................................................................................................................................... 95
3.6.1 APP Enforcement Profile................................................................................................ 97
3.6.2 URL Content Filter Profile............................................................................................... 97
3.6.3 Web Content Filter Profile............................................................................................. 101
3.7 Defense Configuration ........................................................................................................ 105
3.7.1 Anti-Intrusion................................................................................................................. 105
3.7.2 Anti-Virus ...................................................................................................................... 109
3.7.3 Anti-Spam..................................................................................................................... 116
3.7.4 Activation for Anti-Intrusion/Anti-Virus/Anti-Spam/Web-Filter Service ......................... 120
3.7.5 AI/AV Auto Block .......................................................................................................... 122
3.7.6 Signature Upgrade........................................................................................................ 124
3.7.7 Status............................................................................................................................ 127
3.8 Bandwidth Management ..................................................................................................... 128
3.8.1 Sessions Limit............................................................................................................... 128
3.8.2 Bandwidth Limit ............................................................................................................ 129
3.8.3 Quality of Service.......................................................................................................... 131
3.9 Applications......................................................................................................................... 138
3.9.1 Dynamic DNS ............................................................................................................... 138
3.9.2 Schedule....................................................................................................................... 140
3.9.3 RADIUS/LDAP.............................................................................................................. 142
3.9.4 UPnP............................................................................................................................. 144
3.9.5 IGMP............................................................................................................................. 146
3.9.6 Wake On LAN............................................................................................................... 146
3.10 VPN and Remote Access.................................................................................................. 148
3.10.1 Remote Access Control.............................................................................................. 148
3.10.2 PPP General Setup .................................................................................................... 149
3.10.3 IPSec General Setup.................................................................................................. 150
3.10.4 IPSec Peer Identity..................................................................................................... 151
3.10.5 Remote Dial-in User ................................................................................................... 153
3.10.6 LAN to LAN................................................................................................................. 158
3.10.7 VPN TRUNK Management......................................................................................... 167
3.10.8 Connection Management ........................................................................................... 178
3.11 Certificate Management .................................................................................................... 179
3.11.1 Local Certificate.......................................................................................................... 179
3.11.2 Trusted CA Certificate ................................................................................................ 183
3.11.3 Certificate Backup....................................................................................................... 184
3.12 ISDN.................................................................................................................................. 185