User`s guide

MBR W40 – Admin’s Manual
53
3.7.3 Firewall
The W40 gateway security suite includes security services: Stateful Packet Inspection Firewall, user-authentication
protocols, and password protection mechanisms. These features together allow users to connect their computers to
the Internet and simultaneously be protected from the security threats of the Internet. The firewall, the cornerstone
of your gateway's security suite, has been tailored to the needs of the residential/office user and has been pre-
configured to secure your LAN.
Figure 59: W40 Firewall in Action
W40 secures the use of interactive applications, such as Internet gaming and video-conferencing.
Additional features, including Web site restrictions and access control, can also be configured locally by the user
through W40 WBM or remotely by a service provider. The W40 firewall supports advanced filtering, which is designed
to allow control over the firewall's behavior. You can define specific input and output rules, control the order of
logically similar sets of rules and make a distinction between rules that apply to WAN and LAN network devices.
The Firewall service includes the following management screens:
An Overview screen allowing you to choose the security level for the firewall (refer to section 3.7.3.1).
An Access Control screen that can be used to restrict access from the home network to the Internet (refer to
section 3.7.3.2).
A Port Forwarding screen that can be used to enable access from the Internet to specified services provided by
computers in the home network and special Internet applications (refer to section 3.7.3.3).
A DMZ Host screen that allows you to configure a LAN host to receive all traffic arriving at your gateway that does not
belong to a known session (refer to section 3.7.3.4).
A Port triggering screen that allows you to define port triggering entries to dynamically open the firewall for some
protocols or ports (refer to section 3.7.3.6).
A Website Restrictions screen that allows you to block LAN access to a certain host or Web site on the Internet (refer
to section 3.7.3.7).
The NAT screen allows you to manually control the translation of network addresses and ports (refer to
section 3.7.3.8).
The Connections screen allows you to view all the connections that are currently open (refer to section 3.7.3.9).
The Advanced Filtering screen allows you to implicitly control the firewall setting and rules (refer to section 3.7.3.10).