Zyxel-communications 202H Bedienungsanleitung Seite 141
- Seite / 309
- Inhaltsverzeichnis
- FEHLERBEHEBUNG
- LESEZEICHEN
Bewertet. / 5. Basierend auf Kundenbewertungen
Prestige 202H User’s Guide
Firewalls 12-11
work properly, this connection must be allowed to pass through even though a connection from the Internet
would normally be rejected.
In order to achieve this, the Prestige inspects the application-level FTP data. Specifically, it searches for
outgoing "PORT" commands, and when it sees these, it adds a cache entry for the anticipated data
connection. This can be done safely, since the PORT command contains address and port information, which
can be used to uniquely identify the connection.
Any protocol that operates in this way must be supported on a case-by-case basis. You can use the web
configurator’s Custom Ports feature to do this.
12.6 Guidelines For Enhancing Security With Your Firewall
1. Change the default password via SMT or web configurator.
2. Think about access control before you connect a console port to the network in any way, including
attaching a modem to the port. Be aware that a break on the console port might give unauthorized
individuals total control of the firewall, even with access control configured.
3. Limit who can telnet into your router.
4. Don't enable any local service (such as SNMP or NTP) that you don't use. Any enabled service could
present a potential security risk. A determined hacker might be able to find creative ways to misuse the
enabled services to access the firewall or the network.
5. For local services that are enabled, protect against misuse. Protect by configuring the services to
communicate only with specific peers, and protect by configuring rules to block packets for the services
at specific interfaces.
6. Protect against IP spoofing by making sure the firewall is active.
7. Keep the firewall in a secured (locked) room.
12.6.1 Security In General
You can never be too careful! Factors outside your firewall, filtering or NAT can cause security breaches.
Below are some generalizations about what you can do to minimize them.
1. Encourage your company or organization to develop a comprehensive security plan. Good network
administration takes into account what hackers can do and prepares against attacks. The best defense
against hackers and crackers is information. Educate all employees about the importance of security and
how to minimize risk. Produce lists like this one!
2. DSL or cable modem connections are “always-on” connections and are particularly vulnerable because
they provide more opportunities for hackers to crack your system. Turn your computer off when not in
use.
- Prestige 202H 1
- Copyright 2
- Interference Statement 3
- Caution 4
- ZyXEL Limited Warranty 5
- Customer Support 6
- Table of Contents 7
- List of Figures 14
- List of Tables 21
- Preface 25
- Part I: 27
- Chapter 1 29
- 1.3.1 Internet Access 32
- 1.3.2 LAN-to-LAN Connection 33
- 1.3.3 Remote Access Server 34
- Chapter 2 37
- Hardware Installation 37
- 2.3 Turn On Your Router 39
- Chapter 3 41
- Introducing the SMT 41
- Enter Password : XXXX 42
- 3.5 SMT Menu Overview 44
- 3.7 Resetting the Prestige 46
- Chapter 4 49
- SMT Menu 1 General Setup 49
- 4.3 Dynamic DNS 50
- 4.4 Configuring Dynamic DNS 51
- Chapter 5 53
- ISDN Setup 53
- Switch Type 54
- Calling Line Indication 54
- PABX Outside Line Prefix 54
- Data Link Connection 55
- 5.3 NetCAPI 57
- 5.3.3 RVS-COM 58
- 5.3.4 Configuring NetCAPI 59
- 5-8 ISDN Setup 60
- Chapter 6 61
- Ethernet Setup 61
- 6.2.3 Private IP Addresses 63
- 6.2.4 RIP Setup 63
- 6.2.5 DHCP Configuration 64
- , as shown 65
- 6.4 IP Alias 66
- 6.5 IP Alias Setup 67
- 6-8 Ethernet Setup 68
- Chapter 7 69
- Internet Access Setup 69
- 7.2 Internet Access Setup 70
- Part II: 72
- Chapter 8 73
- Remote Node Configuration 73
- 8.4 PPP Multilink 78
- 8.5 Bandwidth on Demand 78
- 8.6 Editing PPP Options 79
- 8.7 LAN-to-LAN Application 81
- 8.9 Configuring Filter 86
- Chapter 9 89
- Static Route Setup 89
- Chapter 10 93
- Dial-in Setup 93
- Dial-in Setup 10-3 95
- 10-4 Dial-in Setup 96
- 10.4 Callback Overview 97
- 10.5 Dial-In User Setup 97
- Both and 103
- No respectively 103
- Both and Yes 103
- Required 105
- Chapter 11 107
- 11.1.2 What NAT Does 108
- 11.1.3 How NAT Works 108
- 11.1.4 NAT Application 109
- 11.1.5 NAT Mapping Types 110
- 11.2 Applying NAT 112
- 11.3 NAT Setup 113
- 11.3.1 Address Mapping Sets 114
- 11.3.3 Ordering Your Rules 116
- 11.5 General NAT Examples 121
- Part III: 130
- Chapter 12 131
- Firewalls 131
- 12.4 Denial of Service 133
- 12.4.2 Types of DoS Attacks 134
- 5 REDIRECT 136
- 13 TIMESTAMP_REQUEST 136
- 14 TIMESTAMP_REPLY 136
- 17 ADDRESS_MASK_REQUEST 136
- 18 ADDRESS_MASK_REPLY 136
- 12.5 Stateful Inspection 137
- 12.5.3 TCP Security 140
- 12.5.4 UDP/ICMP Security 140
- 12.5.5 Upper Layer Protocols 140
- 12.6.1 Security In General 141
- 12.7.1 Packet Filtering: 142
- 12.7.2 Firewall 143
- Chapter 13 145
- Prestige 202H User’s Guide 147
- Table 13-1 View Firewall Log 147
- Chapter 14 149
- Configurator 149
- 14.2 Enabling the Firewall 151
- 14.3 E-mail 151
- 14.3.1 Alerts 152
- Table 14-2 E-mail 153
- 14.3.2 SMTP Error Messages 154
- 14.3.3 Example E-mail Log 154
- 14.4 Attack Alert 155
- 14.4.2 Half-Open Sessions 156
- Table 14-4 Attack Alert 158
- Chapter 15 161
- Creating Custom Rules 161
- Service 162
- 15.3 Connection Direction 163
- 15.4 Rule Summary 164
- 15.5 Predefined Services 166
- 15.6 Timeout 172
- Chapter 16 175
- Customized Services 175
- 16.3 Example Firewall Rule 177
- 10.0.0.15 on the LAN 180
- Click Apply to save your 180
- Chapter 17 181
- Firewall Logs 181
- 17-2 Firewall Logs 182
- Table 17-1 Log Screen 182
- Part IV: 183
- Chapter 18 185
- Filter Configuration 185
- Built-in 186
- Call Filters 186
- Filter Rule 187
- Filter Set 187
- 18.3.1 TCP/IP Filter Rule 193
- 18.3.2 Generic Filter Rule 198
- 18.4 Filter Types and NAT 200
- 18.5 Example Filter 200
- 18.6.1 Ethernet Traffic 204
- 18.6.2 Remote Node Filters 204
- Chapter 19 207
- SNMP Configuration 207
- 19.2 Supported MIBs 208
- 19.3 SNMP Configuration 208
- 19.4 SNMP Traps 209
- Chapter 20 211
- 20.3.1 System Information 214
- 20.4 Log and Trace 215
- 20.4.2 Unix Syslog 216
- FIELD DESCRIPTION 218
- Firewall log 218
- 20.5 Accounting Server 219
- 20.6 Call Triggering Packet 220
- 20.7 Diagnostic 221
- Chapter 21 225
- Maintenance 225
- 21.2 Backup Configuration 226
- 21.2.1 Backup Configuration 227
- 21.2.4 GUI-based FTP Clients 228
- 21.2.7 TFTP Command Example 229
- 21.3 Restore Configuration 231
- 21.3.1 Restore Using FTP 232
- 21.4.1 Firmware File Upload 234
- 21.4.5 TFTP File Upload 237
- Choose the Xmodem protocol 239
- Then click Send 239
- Chapter 22 243
- SMT Menus 24.8 to 24.10 243
- 22.2 Call Control Support 244
- 22.2.2 Black List 245
- 22.2.3 Budget Management 246
- 22.2.4 Call History 247
- 22.3 Time and Date 248
- 22.3.1 Resetting the Time 250
- Chapter 23 251
- Call Scheduling 251
- 23.3 Applying Schedule Sets 253
- 23-4 Call Scheduling 254
- Chapter 24 255
- Remote Management 255
- 24.2 Telnet 256
- 24.3 FTP 256
- 24.4 Web 256
- DESCRIPTION 257
- Chapter 25 259
- Introduction to VPN/IPSec 259
- 25.1.4 VPN Applications 260
- 25.2 IPSec Architecture 261
- 25.2.1 IPSec Algorithms 262
- 25.2.2 Key Management 262
- 25.3 Encapsulation 263
- 25.4 IPSec and NAT 264
- Chapter 26 265
- VPN/IPSec Setup 265
- 26.2 IPSec Algorithms 266
- 26.3 My IP Address 267
- 26.4 Secure Gateway Address 267
- 26.5 IPSec Summary 268
- VPN/IPSec Setup 26-5 269
- 26-6 VPN/IPSec Setup 270
- VPN/IPSec Setup 26-7 271
- 26.6 Keep Alive 272
- 26.7 ID Type and Content 272
- 26.8 Pre-Shared Key 274
- 26.9 IPSec Setup 274
- 26-12 VPN/IPSec Setup 276
- VPN/IPSec Setup 26-13 277
- 192.168.1.35 277
- 26-14 VPN/IPSec Setup 278
- 26.10 IKE Phases 279
- 26.10.1 Negotiation Mode 281
- VPN/IPSec Setup 26-19 283
- 26.12 Manual Key Setup 284
- VPN/IPSec Setup 26-21 285
- Chapter 27 289
- SA Monitor 289
- 27-2 SA Monitor 290
- Chapter 28 291
- IPSec Log 291
- IPSec Log 28-3 293
- IPSec Log 28-5 295
- Part V: 296
- Appendix A 298
- Troubleshooting 298
- Problems With the ISDN Line 299
- Remote User Dial-in Problems 300
- Problems With the Password 300
- Appendix B 302
- Power Adapter Specifications 302
- Index I 306
- J Index 307
Verwandte Produkte und Handbücher für Hardware Zyxel-communications 202H
(2 Seiten)
(133 Seiten)Philips SC5274/13 manuály
Uživatelské manuály a uživatelské příručky pro DVD přehrávače Philips SC5274/13.
Poskytujeme manuály pdf Philips SC5274/13 ke stažení zdarma podle typů dokumentů:
Kommentare zu diesen Handbüchern