User`s guide

User’s Guide
159
CHAPTER 15
The Firewall Screens
15.1 Overview
Use the TOOLS > Firewall screens to manage WiMAX Modem’s firewall security measures.
Originally, the term firewall referred to a construction technique designed to prevent the
spread of fire from one room to another. The networking term "firewall" is a system or group
of systems that enforces an access-control policy between two networks. It may also be
defined as a mechanism used to protect a trusted network from an untrusted network. Of
course, firewalls cannot solve every security problem.
A firewall is one of the mechanisms used to establish a network security perimeter in support
of a network security policy. It should never be the only mechanism or method employed. For
a firewall to guard effectively, you must design and deploy it appropriately. This requires
integrating the firewall into a broad information-security policy. In addition, specific policies
must be implemented within the firewall itself.
15.1.1 What You Can Do in This Chapter
•The Firewall Setting screen (
Section 15.2 on page 160) lets you configure the basic
settings for your firewall.
•The Service Setting screen (
Section 15.3 on page 163) lets you enable service blocking,
set up the date and time service blocking is effective, and to maintain the list of services
you want to block.
15.1.2 What You Need to Know
The following terms and concepts may help as you read through this chapter.
About the WiMAX Modem Firewall
The WiMAX Modem firewall is a stateful inspection firewall and is designed to protect
against Denial of Service attacks when activated. The WiMAX Modem's purpose is to allow a
private Local Area Network (LAN) to be securely connected to the Internet. The WiMAX
Modem can be used to prevent theft, destruction and modification of data, as well as log
events, which may be important to the security of your network.
The WiMAX Modem is installed between the LAN and a WiMAX base station connecting to
the Internet. This allows it to act as a secure gateway for all data passing between the Internet
and the LAN.